Privacy notice

Deck My Alerts is operated by Vallar LLC. Questions and privacy requests may be sent to george@vallar.am.

Public website

The Phase 024A public website does not use advertising, analytics, marketing trackers, account creation, payment checkout, or contact forms. It does not set an application cookie. Ordinary hosting and security systems may process request information such as IP address, browser details, requested path, time, and security outcome to deliver and protect the site.

Selecting an email link opens your own email service. Information you send is processed by your email provider and by Vallar LLC for the purpose of answering your request. Do not send payment credentials, passwords, marketplace login details, or raw alert messages by support email.

Invite-only product

When an invited account is activated, Deck My Alerts expects to process:

• the opaque identity and session information needed to authenticate the account;
• one permanent private inbound address assigned to the account;
• marketplace and auction alert emails delivered to that address, including their content and necessary transport metadata;
• normalized listing information extracted from supported alerts, controlled images, provenance, queue state, Favorites, filters, and safe processing Status;
• subscription state and bounded payment-provider references, but not card or bank credentials; and
• privacy-safe security, reliability, diagnostic, and support records.

Deck My Alerts uses this information to receive and parse supported alerts, show the private discovery experience, preserve Favorites and queue state, operate subscriptions, prevent abuse, diagnose failures, meet retention and security obligations, and provide requested support.

Agent connections

Agent compatibility is planned for the invite-only beta. If you intentionally connect a compatible external agent, Deck My Alerts sends only the normalized WDD data needed for the tool request and accepts only specifically supported WDD actions. Raw alert email, your permanent inbound address, private storage keys, parser evidence, credentials, and administrator controls are excluded.

The connected agent provider processes the information it receives under its own terms and privacy policy. You can disconnect the agent to stop future access without deleting your Deck My Alerts data. Prompts and conversation transcripts are not stored by WDD as part of the agent action record.

Service providers

Deck My Alerts expects to use:

• Clerk for authentication;
• Vercel for the public website and authenticated web application;
• Cloudflare for DNS, inbound email handling, private object storage, and queueing;
• Neon for PostgreSQL application data;
• Railway for private ingestion, parsing, and image-processing services;
• Sentry for tightly bounded, scrubbed error monitoring;
• Lemon Squeezy as merchant of record for hosted checkout, subscription billing, tax handling, refunds, and customer billing tools; and
• GitHub for private source and controlled release workflows, not for customer application records.

These providers process information only for their stated service roles and under their own contractual and legal obligations. The final production provider, region, and subprocessor details will be reviewed before beta access opens.

Retention

• Private raw alert messages are retained for up to 90 days after normal processing.
• An alert held only because payment has lapsed is deleted unprocessed after seven days unless the subscription resumes in time.
• Privacy-safe diagnostic records are retained for up to one year.
• An unseen listing with a reliable auction end may remain discoverable for seven days after the auction ends. An undated unseen listing normally leaves discovery after 30 days.
• A seen listing that is not a Favorite is normally retained for 30 days after it was seen. After removal from Favorites, it is normally retained for 30 days, subject to any later applicable retention boundary.
• A Favorite remains available while it is saved, subject to account and legal obligations.

Backups, security records, billing records, or information required for legal, fraud, dispute, or accounting purposes may follow separately reviewed retention obligations.

Your choices and requests

You may choose not to connect an agent. You may disconnect a connected agent, remove Favorites, cancel future subscription renewal, or ask about access, correction, deletion, and other applicable privacy rights by emailing george@vallar.am. A request may require reasonable identity verification. Some records may be retained where required for security, billing, disputes, legal obligations, or the rights of others.

Security and limits

Deck My Alerts separates account-owned data, keeps raw alerts and controlled images private, uses bounded service permissions, and avoids placing secrets or raw customer email in ordinary logs. No online service can guarantee absolute security. If you believe your account or inbound address has been misused, contact george@vallar.am.

This notice will be updated before the beta if production providers, data flows, legal requirements, or product behavior materially change.