Privacy Policy

1. Who we are

Circuit Sherpa is operated by Heron Networks LLC ("we", "us", "our"). We provide an electronic component search and BOM pricing service at circuitsherpa.com. Questions? Email us at [email protected].

2. What we collect

• Email address — collected when you sign in via magic link. Used solely for authentication and service-related emails (magic links, price alert notifications).
• Search queries — part numbers and search terms you enter. Stored to power your search history and saved searches on paid plans.
• BOM uploads — CSV files containing part numbers and quantities. Stored to provide BOM history on paid plans (retained for 90 days, then deleted). On the Team plan, a BOM you choose to save to your team's shared library is visible to every member of that team, not only to you; a personal BOM stays visible to you alone.
• Price alert targets — part numbers and target prices you configure. Stored to trigger email alerts on your behalf.
• Usage data — search counts and feature usage for enforcing free-tier limits and improving the service.
• Push notifications — the iOS and Android apps do not send push notifications. Price alerts arrive by email only.
• Network address — your IP address is used transiently as a key for rate limits that protect sign-in and search from abuse; it is not used for advertising or profiling.
• Payment information — handled entirely by Stripe. We never see or store your card number. We receive a Stripe customer ID and subscription status.

3. How we use your data

• Providing and improving the Circuit Sherpa service
• Sending you magic link sign-in emails
• Sending price alert notification emails you explicitly configured
• Enforcing plan limits (e.g., 10 free searches/day)
• Detecting and preventing abuse

We do not sell your data to third parties, use it for advertising, or share it with distributors.

4. Third-party services

• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Brevo, Resend and Postmark — transactional email delivery (magic links and alerts). Email addresses are passed to the email provider solely to deliver messages.
• Distributor APIs — search queries are sent to the DigiKey and Mouser distributor APIs, and to the Nexar parts network when it is configured, to retrieve pricing. These APIs do not receive your identity.
• Cloudflare — infrastructure and DDoS protection. Subject to Cloudflare's privacy practices.
• Cloudflare Web Analytics — we count visits with Cloudflare Web Analytics. It sets no cookies, uses no local storage and does not fingerprint visitors. For each page view Cloudflare records the page address, the referring site, the browser, operating system and device type, and the country (derived from the IP address, which is not kept for analytics). We see only totals, never an individual visitor. We use no Google Analytics, no advertising pixels and no cross-site trackers, so there is no cookie banner. The only cookie we set is the session cookie that keeps you signed in. We also keep daily totals of sign-ups and checkout starts (a date, an event name and a count) with no visitor identifier attached.

5. Data retention

• BOM history: 90 days from upload date, then automatically deleted
• Search history: retained while your account is active
• Price alerts: retained until you delete them or close your account
• Account data: retained until you request deletion

6. Your rights

You can delete your account and all associated data yourself at any time from Settings → Danger zone → Delete account on the website or in the iOS app (Account → Delete account); it takes effect immediately and cancels any active subscription. You may also request deletion by emailing [email protected]. We will process deletion requests within 30 days.

7. Security

We use industry-standard security practices including encrypted connections (TLS), signed JWT session tokens, and short-lived magic link tokens (15-minute expiry). We do not store passwords.

8. Changes

We may update this policy. Material changes will be communicated via email to registered users. Continued use of the service after changes constitutes acceptance.

9. Contact

Heron Networks LLC
[email protected]
Business phone: (703) 249-9248