Privacy Policy

sniperstack is operated by a company registered in the United Kingdom. We provide an AI-powered e-commerce intelligence and creative-automation platform for COD (cash-on-delivery) merchants and marketers across Algeria, Morocco, Tunisia and the wider Arab region.

We do not sell your data.

• Cloud infrastructure providers — under data processing agreements
• Payment processors — only what is needed to process a transaction
• The store you're testing — receives only the test order you submit
• Law enforcement — only if required by UK law or a valid court order

SniperStack integrates the following third-party services to deliver its features. Each acts as a sub-processor under a Data Processing Agreement or their own published terms.

You can connect an AI assistant such as Claude or ChatGPT to your account through our MCP connector at https://mcp.sniperstack.com/. This section explains what happens to your data when you do.

Connecting

You sign in to SniperStack and approve the assistant on our own consent screen (OAuth). Only the account owner can approve a connection; team members cannot. The assistant never sees your SniperStack password, and we never see your password for the assistant.

What the assistant can do

Browse the public Marketplace Radar; list and view your products (name, SKU, status, prices, category, country, description, photo links and number of landing pages); add products from their details, photo links or a product page link; create landing pages for your products and list them with their status, views, order counts and links; and list your orders. For each order it sees the status, the buyer's name and phone number, the wilaya and commune, the product, quantity, total and date — never the street address. It cannot read your payments or your account settings, and it cannot change or cancel an order.

What we receive

Only what the assistant sends when it uses one of these tools — for example a product name, a price, photo links or a product page link — and the product photos you attach in the chat or send through an upload link the assistant gives you. We do not receive your conversation with the assistant.

What we send back

The result of each tool: your product, landing page or order details, or Radar listings. Order results include your buyers' names and phone numbers, so connect only an assistant you trust with your customers' data. Once the assistant has received them, they are handled under the AI provider's own privacy policy (for example Anthropic's or OpenAI's).

What we store

A record of each connected app: its name, when it was connected and when its access expires. Each access token lasts one day and the assistant renews it on its own; a connection left unused for 90 days expires. Products and landing pages the assistant creates are stored like the ones you create yourself. Photos you send through an upload link are kept privately until the assistant creates the product with them, and deleted within two days if it never does.

Personal tokens

If you create a token by hand instead, we store only a hash of it. Anyone holding the token can act for your account until you revoke it, so keep it private.

Disconnecting

Disconnect an app or revoke a token at any time on the AI connection page of your account, or remove the connector in the assistant. Access ends at once.

Without an account, the public server at https://mcp.sniperstack.com/public offers the Marketplace Radar only. We keep the IP address of those requests for rate limiting and security, for the period in section 4.

Email privacy@sniperstack.com — we respond within 30 days. You may also complain to the UK ICO.

We use essential session cookies to keep you logged in and prevent CSRF attacks. We do not use third-party advertising or tracking cookies.

Our servers are in the EEA or in countries with a UK ICO adequacy decision. Where data is transferred outside these regions, we use Standard Contractual Clauses.

Material changes will be notified by email at least 14 days before taking effect.