Privacy Policy

Payvern Inc. (“Payvern”, “we”) makes the Payvern browser extension and website, which show the interest-adjusted cost of a purchase. Payvern is the data controller for the information described here.

Contact us about anything on this page at hello@payvern.com.

This is the part most people want to know, so it comes first. The extension does not send us the pages you visit, the prices on them, or your browsing history. When you open a page, the extension reads its text in your browser, applies the interest rate you saved, and writes the second figure next to the price. All of that happens locally. No request leaves your machine for a price to be marked up.

The extension also refuses to run at all on banking, payment, credit bureau, tax and password manager sites, and on any page showing a password field. That list is fixed in the extension itself and is not fetched from us, so we cannot change where it runs without shipping an update you receive through the Chrome Web Store.

There are three exceptions, and each one is something you do on purpose:

Saving a price

When you press the bookmark icon next to a price, we receive that page’s address and title along with the figures shown. Nothing is recorded until you press it.

Looking up a term

The word or phrase you type is sent to be explained. The page you were on is not.

Uploading a document

The file you choose is read and translated. See section 5 for what happens to it.

Account

Your email address, and a password stored only as a hash by our authentication provider. We never see your password.

Cards you save

A name you choose for each card, its APR, and the payoff period you set. Optionally, and only if you enter them: which card product it is (picked from a list, so we can work out which of your own cards earns the most on a purchase), its cashback rate if you enter one yourself, the card’s credit limit, whether you are currently carrying a balance, and the balance itself. Payvern only collects the information you choose to provide. We never ask for a card number or bank login. Most features work without an account balance. If you choose to enter a balance for debt planning, it is used only to provide those calculations and is never shared.

Prices you save

The address and title of the page, the listed price, the calculated true cost and interest, the APR applied, the currency, and the time you saved it.

Billing

If you subscribe, we store identifiers issued by our payment processor and whether your subscription is active or past due. Card details never reach our servers.

Waitlist

If you join the waitlist, your email address and the name you give us, until the waitlist closes or you ask us to remove it.

Technical

A session token so you stay signed in, and counters used to enforce plan limits such as the number of term lookups a day. The counters are keyed to your account identifier and hold no content.

To run the product and nothing else: to sign you in, to apply your saved rate to prices, to keep the log of prices you chose to save, to bill you if you subscribe, to enforce plan limits, and to send you transactional email such as password resets and receipts.

We do not sell your personal information, and we do not share it with advertisers, data brokers, or anyone else for their own marketing. We do not build advertising profiles, and we do not use your saved prices to target you. Section 8 states this in the terms California law uses.

The document translator holds an uploaded file for the length of one request. The file and the text taken from it are kept in memory on our systems, sent to Anthropic to be translated, and discarded from our systems when the response is returned. They are not written to our database, our logs, or our error monitoring. What Anthropic retains is governed by Anthropic’s own data policy. Section 6 lists what it receives. Only the translation comes back to you, and only you can choose to keep it by copying it.

If the translator finds an interest rate in your document it offers to save it to your profile. That is a suggestion you confirm or dismiss. Nothing is saved unless you accept it.

We use a small number of providers to run the service. Each receives only what it needs, and none of them are permitted to use your information for their own purposes.

Supabase

Database and authentication. Holds your account, saved cards and saved prices.

Google

Sign-in, only if you choose “Continue with Google”. Google confirms who you are and sends us your name and email address; Google learns that your account signs in to Payvern. If you sign up with a password instead, Google is not involved.

Vercel

Hosting for the website and its API.

Stripe

Payments. Stripe receives your payment details directly and we never see them. Stripe tells us only that a subscription exists and whether it is paid.

Resend

Transactional email. Receives your email address and the message being sent.

Anthropic

Term explanations and document translation. Receives the term you type or the text of the document you upload, for the length of the request.

PostHog

Product analytics on the website only. We record which pages are viewed. Automatic capture of clicks and form input is switched off, and the extension does not send analytics at all.

Sentry

Error monitoring. Reports are filtered before they are sent so that interest rates, card names, which cards you hold, prices, balances, statement text and tokens are stripped out.

Upstash

Rate limiting. Holds only counters keyed to your account identifier.

You can delete any saved price individually from your dashboard, at any time, and it is gone.

You can delete your entire account from Settings. That cancels any active subscription, then removes your saved cards, your saved prices, your profile and your login. It is immediate and cannot be undone. We keep no shadow copy of a deleted account, though billing records that we are required to retain for tax and accounting purposes remain with our payment processor.

You can cancel a subscription without deleting your account, in one click from Settings. Your account stays open on the free plan.

Depending on where you live you may also have the right to access, correct, or export your information, to object to processing, or to complain to a supervisory authority. Write to hello@payvern.com and we will respond within 30 days.

This section applies to California residents and uses the terms of the California Consumer Privacy Act as amended by the California Privacy Rights Act. It sits alongside the rest of this policy rather than replacing it.

Do Not Sell or Share My Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done either in the twelve months before the date at the top of this page, and we have no plans to.

Because there is no sale or sharing, there is nothing for you to opt out of and no opt-out link to click. If you would like that confirmed in writing, or you want to register an objection anyway, email hello@payvern.com and we will reply. Browser signals such as Global Privacy Control require no action from us for the same reason: there is no sale or sharing for them to switch off.

We do not knowingly sell or share the personal information of anyone under 16, since we do not sell or share anyone’s.

Categories we collect

Stated in the categories the statute uses. Section 3 describes the same information in plainer terms, and the purposes in section 4 apply to all of it.

Identifiers

Your email address and the account identifier we assign you.

Commercial information

Which plan you are on, and whether your subscription is active or past due.

Internet or network activity

The address and title of any page whose price you chose to save, and pageviews on our own website. Not your browsing history, which we never receive.

Financial information

Identifiers issued by our payment processor, and what you choose to save against a card: its interest rate, which card product it is, its cashback rate if you enter one yourself, its credit limit, and its balance. Everything but the interest rate is optional, and all of it is used only for the payoff and card-comparison calculations you ask for. Not a card number and not a bank login, neither of which we collect.

Sensitive personal information

Your account credentials. We use them only to sign you in. We do not use or disclose sensitive personal information for any purpose that would give you the right to limit that use, and we do not infer characteristics from it.

We collect these directly from you. We do not buy personal information from data brokers and we do not enrich your account with information from anywhere else.

Your rights, and how to use them

You have the right to:

• know what we collect, where it came from, why we have it, and who receives it
• a copy of the personal information we hold about you
• have it corrected if it is wrong
• have it deleted
• opt out of sale or sharing, which in our case is already the position
• limit our use of sensitive personal information, which we already do not use beyond signing you in
• not be treated differently for exercising any of these. We will not deny you the service, charge you a different price, or give you a worse version of it

The fastest route to deletion is to do it yourself: individual saved prices from your dashboard, and your whole account from Settings. For anything else, email hello@payvern.com from the address on your account, which is how we verify that a request is yours. If we cannot verify it we will say so rather than act on it. An authorised agent may make a request on your behalf with written permission we can check.

We acknowledge requests within 10 business days and answer them within 45 calendar days. If we need longer we will tell you why and take no more than a further 45 days.

Your account and everything attached to it is kept until you delete it. Waitlist entries are kept until the waitlist closes. Rate limiting counters expire on their own within days. Error reports are retained by our monitoring provider on a rolling window, stripped of the fields listed against Sentry in section 6 before they are sent.

Traffic is encrypted in transit. Access to your rows in our database is enforced at the database itself, so one account cannot read another’s data even if the application asked it to. Your subscription tier can only be changed by our payment processor’s verified webhook, not by the browser. Session tokens are held in cookies that page scripts cannot read, and in the extension’s own storage.

No system is perfect, and we will not claim otherwise. If we discover a breach affecting your information we will tell you and any regulator we are required to notify.

Payvern is not directed at children and is not for anyone under 18. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, write to us and we will delete it.

We are based in the United States and our providers operate there. If you use Payvern from outside the United States, your information is transferred to and processed in the United States, under the safeguards our providers offer for such transfers.

Payvern Inc. is incorporated in the State of Delaware, and this policy is governed by the laws of Delaware and the federal laws of the United States, without regard to conflict of law rules. This does not deprive you of the protection of privacy laws that apply to you where you live, including the California rights set out in section 8.

If we change this policy we will update the date at the top. If a change materially affects what we collect or who receives it, we will tell account holders by email before it takes effect.