Privacy Policy

Overview

HAULS is being built as a consumer intelligence tool: price history, honest discount analysis, and, eventually, a browser extension and an Android app that help you check a product before you buy it. HAULS.in is a website and waitlist; the HAULS browser extension works on supported shopping sites and can optionally sync your watchlist to an account you create with Google sign-in.

This page covers all three: the website, the extension, and Google sign-in. The Android app is not released; this policy will be updated before it launches.

Who operates HAULS

HAULS is built and operated by Vishwajeet Trivedi, an individual founder, not a registered company. Everywhere else on this page, HAULS is referred to as “HAULS,” “we,” or “us.”

What the website collects

The HAULS.in website collects the following through its forms and servers. Visit analytics are described separately under Cookies and tracking below:

• The email address you submit to join the waitlist, from the header button, the homepage, the pricing page or the signup page. They all save to the same place, together with a short label for which form it came from.
• Your IP address, briefly. When you submit the waitlist form, your IP address is checked against a rate limit (no more than 5 submissions per 10 minutes from the same address) to stop automated abuse of the form. It is used for that check only and is not saved alongside your email in our database.
• Standard web server logs.Like any website, our hosting infrastructure generates ordinary request logs (things like IP address, browser type, and timestamp) as a normal part of serving pages. We don’t use these for tracking or profiling, and we don’t control their retention beyond our hosting provider’s own defaults.

The website itself has no accounts or logins. Sign-in with Google happens inside the browser extension and is described in Google sign-in and Google user data. The signup page’s “Continue with Google” button on the website is disabled and does not connect to Google or collect anything. The pricing page’s “Go Pro” checkout is a preview: it states plainly that payments aren’t live yet and collects nothing beyond the same waitlist email. No payment or card details are collected anywhere on the site.

The HAULS browser extension

The HAULS extension runs in your browser on supported shopping sites (for example Amazon.in, Flipkart, Myntra, Croma, Reliance Digital, Tata CLiQ, Nykaa, Vijay Sales and Snapdeal) and, if you switch it on in the extension settings, on independent online stores. It is designed so that your data stays in your browser first.

• What it reads, locally.When you open a product page, it reads that page’s product title, price, original price (MRP), image, seller name and rating information, and review ratings that are already on the page, to show price history, deal checks and alerts. This is saved in your browser’s own extension storage on your device. It does not collect or upload your general browsing history, and it does not read pages on sites outside the list above (and any independent stores you enable).
• What leaves your device, and only when you are signed in:your watchlist (product link, title, image, the price you set as a trap) so it can sync across your devices and power price-drop alerts. If, and only if, you switch on “Share prices I see with the community,” the extension also sends the product identifier, store, and price you saw, with no product title, no link and no personal details shown to anyone. This sharing is off by default and you can switch it off at any time and remove what you shared earlier.
• Grocery price comparison. When you search, your browser contacts the grocery stores directly (currently Blinkit, DMart and JioMart) with your search words and your delivery pincode or approximate location, so prices match your area. These requests go from your browser to those stores and are not routed through HAULS.
• Location.If you tap “Use my location,” your browser asks for permission. HAULS keeps the result on your device only, rounded to roughly 1 km. To turn a pincode into map coordinates it contacts OpenStreetMap’s Nominatim service, and if your browser has no GPS it can fall back to an approximate, city-level location from ipwho.is. Both receive the pincode or your IP address as part of the request.
• Permissions. The extension asks for browser storage and alarms (to save your data and run reminders), notifications (price alerts), identity (Google sign-in), and access to the shopping sites above. Access to other sites is optional and requested separately.

The extension has no advertising, no affiliate tracking and no third-party analytics, and it does not sell data.

Google sign-in and Google user data

You can sign in to the HAULS extension with your Google account. Sign-in is optional; the extension works without it.

• What we access from Google. Only the basic profile scopes openid, email and profile: your name, your email address and your profile picture address. We do not access your Gmail, Drive, Contacts, Calendar or any other Google data, and we do not request phone numbers. If you want to add a phone number, it is an optional field you type yourself, and we do not verify it.
• How we use it. To create and show your HAULS account, to recognise you across your devices so your watchlist syncs, and to send you the price-drop alerts and service messages you ask for. We do not use it for advertising, we do not sell it, and we do not build advertising profiles from it.
• Where it is stored.In HAULS’s database on Supabase, protected by per-user access rules so that other users cannot read it. Your sign-in tokens are kept in the extension’s private storage on your device.
• Who it is shared with. Only the service providers that run HAULS on our behalf (see Who we share it with), and only where needed, or where the law requires. Nobody at HAULS reads your Google data except to operate the service, keep it secure, prevent abuse, or comply with the law.

Your control.You can sign out at any time, switch community sharing off, export your data, or erase your cloud data from the account screen in the extension. You can also remove HAULS’s access to your Google account at myaccount.google.com/permissions. To have your sign-in record removed entirely, email legal@hauls.in and we will delete it.

How we use it

For the waitlist, we use your email address to send you a best-effort confirmation that you’ve joined, and to let you know when HAULS launches. For the extension, we use your account details and watchlist only to run the features you use (sync and price-drop alerts). That’s the entire purpose. If the confirmation email fails to send for any reason, your signup still succeeds, because the email isn’t a requirement for being on the list, just a courtesy.

We do not use your email to build an advertising profile, we do not use it for anything other than reaching you about HAULS, and we do not sell it.

Who we share it with

These service providers currently touch the data described above, each doing one specific job:

• Supabase hosts the database where your waitlist email is stored.
• Upstash provides the rate-limiting check described above; it briefly processes your IP address to enforce that limit.
• Resend sends the waitlist confirmation email on our behalf. Delivery is best-effort and not required for your signup to succeed.
• Vercel Analytics, HAULS’s hosting provider, measures aggregate page views and a small set of named events (for example, a waitlist signup succeeding, or a click on a link to the methodology page), see Cookies and tracking below for exactly what that involves.
• Google provides sign-in for the extension (the basic profile scopes described above). Cloudflaremay run HAULS’s server functions (for example account deletion and price-drop checks) as our infrastructure provider.
• OpenStreetMap Nominatim and ipwho.is receive a pincode or an IP address when you use the location features described above.
• Google Analytics (Google LLC) counts visits and shows which pages are useful, see Cookies and tracking below for exactly what that involves.

Google is also an advertising company, so to be specific: we have switched off Google’s advertising features for our Analytics account (Google signals and ad personalization), and none of these providers receive your data for any purpose beyond the function listed above. HAULS does not sell or share data with advertisers.

What we don’t do

This isn’t a marketing line. It’s the reason HAULS exists: a tool that tells you the truth about a price only works if nothing else is competing for influence over what it tells you.

How we protect it

The waitlist database is only reachable through a server-side credential that never reaches your browser; there is no client-side path to it. For extension accounts, each user can only read and change their own rows, privileged keys never ship inside the extension, and sign-in tokens live in the extension’s private storage. Data you send to HAULS travels over an encrypted (HTTPS) connection. Every external input, including the waitlist form, is validated on our server before it is written anywhere, and secrets used to run the site are kept out of our source code.

How long we keep it

We keep your waitlist email for as long as it serves the purpose you gave it to us for: reaching you about HAULS’s launch. We don’t currently have an automated deletion schedule or a automated deletion schedule for the waitlist. Extension users can erase their cloud data (watchlist, profile, shared prices) at any time from the account screen, and export it first. For anything else, including removing your sign-in record entirely, email us using the contact details at the bottom of this page and we will delete it from our database directly.

Your rights

You can ask us, at any time, to tell you what we have on file for you, to correct it, or to delete it, to withdraw your consent, and to complain if you are unhappy with how we handled your data. Email us at legal@hauls.inand we’ll handle it directly; there’s no separate form to fill out.

India’s Digital Personal Data Protection Act, 2023 will eventually make rights like these a formal legal requirement, but its substantive provisions are not yet in force. We’re offering them now anyway, because a product built on trust shouldn’t wait for a compliance deadline to do the obviously right thing.

Cookies and tracking

HAULS.in uses two analytics tools. The first is Vercel Analytics, which is cookie-free and has no persistent visitor identifier. It records aggregate page views and a small set of named events, for example a waitlist signup succeeding or failing, or a click on a methodology or blog link, tagged only with which page or feature the click happened on.

The second is Google Analytics 4, which tells us which pages bring people in and which ones are useful. It does set cookies in your browser (their names start with _ga) that hold a random identifier so repeat visits can be counted, and it sends Google your page views, the same named events as above, and approximate location, device and browser details. We have switched off Google’s advertising features (Google signals and ad personalization), we do not use it for advertising or profiling, and we never send it your email address. We do not currently show a cookie banner. You can opt out of Google Analytics on any site with Google’s browser add-on, or by blocking cookies and scripts from google-analytics.com and googletagmanager.com in your browser.

Apart from these, we do not run any advertising or cross-site tracking script, and HAULS.in does not use browser local storage to track you. (The extension is separate: it saves your watchlist, history and settings in your browser’s extension storage, which only the extension can read, as described above.) If that changes, this section will be updated first, before the change ships, not after.

Age and children’s data

HAULS is intended for people 18 and older. We don’t currently have a technical age check on the waitlist form; by signing up, you’re confirming you meet this requirement. We don’t knowingly collect information from anyone under 18, and if we learn that we have, we’ll delete it on request.

Product and price data from elsewhere

Once HAULS is checking prices, that price and product information will come from pages on third-party shopping sites, and eventually from external product databases for grocery items. HAULS is not affiliated with, endorsed by, or operated by any marketplace, seller, or brand it reports on, unless we explicitly say otherwise. That data can be incomplete, delayed, or simply wrong, and we’ll always frame it as what HAULS observed, not as a guarantee.

Where data is processed

Supabase, Upstash, Resend, Vercel, Cloudflare, and Google are all global infrastructure providers, and may process data on servers located outside India as part of their standard operations. We chose providers that publish their own security and privacy practices, but we don’t control which specific data-center region each one uses to serve this account.

Changes to this policy

If this policy changes in a way that matters, we’ll update the effective date above and call out what changed, rather than quietly editing the page. Significant changes, like adding analytics or cookies, or the extension or Android app going live, will be reflected here before or as they happen.

2026-08-25: added Vercel Analytics, cookie-free page-view and named-event measurement, see Cookies and tracking and Who we share it with above.

2026-10-07: added Google Analytics 4, which sets cookies (_ga) and counts visits, with Google’s advertising features switched off. See Cookies and tracking and Who we share it with.

2026-10-17: added the HAULS browser extension and Google sign-in (basic profile scopes only, with Google’s Limited Use statement), new data processors (Cloudflare, OpenStreetMap Nominatim, ipwho.is), and extension data controls. See The HAULS browser extension and Google sign-in and Google user data.