Privacy Policy — Circuit Sherpa

1. Who we are

Circuit Sherpa is operated by Heron Networks LLC ("we", "us", "our"). We provide an electronic component search and BOM pricing service at circuitsherpa.com. Questions? Email us at [email protected].

2. What we collect

Email address — collected when you sign in via magic link. Used solely for authentication and service-related emails (magic links, price alert notifications).
Search queries — part numbers and search terms you enter. Stored to power your search history and saved searches on paid plans.
BOM uploads — CSV files containing part numbers and quantities. Stored to provide BOM history on paid plans (retained for 90 days, then deleted).
Price alert targets — part numbers and target prices you configure. Stored to trigger email alerts on your behalf.
Usage data — search counts and feature usage for enforcing free-tier limits and improving the service.
Payment information — handled entirely by Stripe. We never see or store your card number. We receive a Stripe customer ID and subscription status.

3. How we use your data

Providing and improving the Circuit Sherpa service
Sending you magic link sign-in emails
Sending price alert notification emails you explicitly configured
Enforcing plan limits (e.g., 10 free searches/day)
Detecting and preventing abuse

We do not sell your data to third parties, use it for advertising, or share it with distributors.

4. Third-party services

Stripe — payment processing. Subject to Stripe's Privacy Policy.
Resend — transactional email delivery (magic links and alerts). Email addresses are passed to Resend solely to deliver messages.
Distributor APIs — search queries are sent to DigiKey, Mouser, Arrow, and other distributor APIs to retrieve pricing. These APIs do not receive your identity.
Cloudflare — infrastructure and DDoS protection. Subject to Cloudflare's privacy practices.

5. Data retention

BOM history: 90 days from upload date, then automatically deleted
Search history: retained while your account is active
Price alerts: retained until you delete them or close your account
Account data: retained until you request deletion

6. Your rights

You may request deletion of your account and all associated data at any time by emailing [email protected]. We will process deletion requests within 30 days.

7. Security

We use industry-standard security practices including encrypted connections (TLS), signed JWT session tokens, and short-lived magic link tokens (15-minute expiry). We do not store passwords.

8. Changes

We may update this policy. Material changes will be communicated via email to registered users. Continued use of the service after changes constitutes acceptance.

9. Contact

Heron Networks LLC
[email protected]