Privacy Policy
Last updated: October 22, 2026
This policy explains what personal information Pounce collects, why we use it, who receives it, how long we keep it, and the rights you have. It covers the Pounce Windows app, Pounce Cloud (our servers), the Pounce community, and this website.
The short version: your Facebook logins, saved passwords, notification secrets, and proxy credentials stay on your PC. Pounce Cloud receives listing data to check and price deals, and license data to confirm your plan. We don't sell or share your personal information, and we don't run targeted advertising. Usage stats are minimized, and you can turn them off in Settings.
1. Who we are
Pounce is operated by Thalmann Enterprises LLC, 2125 Mark Ave, Punta Gorda, FL 33950, United States ("Pounce", "we", "us"). We are the controller of the personal information described in this policy. For privacy questions or requests, email [email protected] or contact us through our Discord.
2. What stays on your PC
The Pounce app stores the following on your PC and does not upload it to Pounce Cloud:
- Facebook cookies, saved sessions, and browser profiles for the accounts you add. Saved sessions are encrypted with Windows DPAPI.
- Saved Facebook account passwords, encrypted with Windows DPAPI.
- Discord webhook URLs, Telegram bot tokens and chat IDs, and proxy credentials. These are kept in your local Pounce settings and are not encrypted, so protect access to your Windows account.
- The local listings database: listings Pounce has seen, alert history, AI decisions, your conversations with sellers, your flip tracker, and app logs.
Your license key is also stored on your PC, encrypted with Windows DPAPI. The app sends it to Pounce Cloud to confirm your plan (see section 3).
Because this data is on your device, you control it, and we cannot see or delete it. Deleting an account in Pounce removes that account's saved Facebook session and browser profile. When you uninstall, the uninstaller offers "Also remove your Pounce data", which deletes the rest.
3. What Pounce Cloud receives and why
License and device
The app sends your license key, a hashed hardware identifier, and the app version with requests to Pounce Cloud. We use them to confirm your plan, bind your license to your devices, and stop key sharing and abuse. Your IP address reaches our servers when the app connects. We use it for rate limiting and abuse prevention, and it can appear in server logs.
Listing checks and pricing
For listings that pass your local filters, the app sends the listing title, description, price, location as shown, photos or photo links, your search name, and the rules and notes you wrote for that search. Pounce Cloud uses them to verify the listing with AI, match it to a catalog item, and estimate resale value. For vehicle searches it also receives the year, make, model, trim, posted mileage, and a ZIP code that is converted to a pricing region.
Listing photos are processed in memory and are not stored on our servers. We keep a record of each AI decision (listing title, price, description, search, the AI's reasons, and a fingerprint of the image, with emails, links, and phone numbers removed) for up to 30 days so we can investigate wrong decisions. Price results are cached by search text, without your license or device identifiers.
Alert quality review
When the app alerts you to a deal, it also sends a copy of that alert to a private Pounce team channel on Discord so we can check alert quality. The copy has the listing title, price, location as shown on the listing, link, photo, search name, estimated profit, the AI's short reason, and, for vehicles, the mileage and repair notes. It never includes your saved location, license key, Facebook accounts, or messages. Turn off Share usage and alert data in Settings to stop sending it.
To enforce plan limits and track costs, Pounce Cloud records each AI request with hashed license and device identifiers, the search name, the AI model, and token counts.
Seller messaging
Auto-message and negotiation are off until you turn them on for a search. When they are on, Pounce Cloud receives the listing details, recent turns of your conversation with the seller, and up to 20 of your recent sent messages so drafts match your style. We use them to draft openers and offers and to classify seller replies. AI-written messages are filtered to block links, contact details, and payment requests before they are sent.
Usage analytics
The app sends minimized usage events through Pounce Cloud to our analytics provider, LogSnag: counts, the category, bucketed price and profit bands, and the app version, linked to a hashed identifier rather than your name or license key. LogSnag never receives listing titles, URLs, images, locations, or seller text. We use them to see which features work and where the app fails. Turn off Share usage and alert data in Settings to stop sending them.
Bug reports and support
Bug reports you submit from the app include the description you write, a report ID, the app version, monitor status, and the first characters of your license key so we can match the report to your plan. They are delivered through Pounce Cloud to a private Pounce support channel on Discord. Please don't include other people's personal information. Support bundles are covered in section 12.
Billing
Whop runs checkout, billing, and license keys. Whop collects your payment and contact details under its own privacy policy. We receive membership details from Whop, such as membership ID, plan, status, and paid-through date. The app never talks to Whop directly; Pounce Cloud checks your license key and hashed hardware identifier with Whop.
4. Data about sellers and other people
Pounce processes information about people who don't use Pounce, mainly Facebook Marketplace sellers:
- Public listing data: title, description, price, photos, location as shown, and the seller's profile name and link as shown on the listing.
- Messages exchanged with sellers through your own Facebook account, when you use messaging features.
We process this data only to help you find, evaluate, and negotiate deals. Pounce may look at a seller's other public listings to spot likely scams. We don't sell seller data, use it for advertising, or keep seller profiles in Pounce Cloud. AI-written messages are filtered to block links, contact details, and payment requests. Sellers can ask about or object to this processing by emailing [email protected].
5. Sharing wins and the community
Nothing is posted to the community unless you choose to share it.
- Community board in the app. When you share a completed flip, other Pounce users see your public alias, the item title and category, your purchase and sale amounts and dates, and any notes you saved with that flip. Those notes appear on the community win until you stop sharing it. You can remove a win at any time, and removed entries are permanently deleted within 30 days.
- Pounce community Discord. When you share a win to our Discord, Pounce posts the alert details for that listing: title, photo, price, location as shown on the listing, listing link, search name, estimated profit, the AI's note, and the opener you sent the seller if Pounce messaged them for you, plus mileage and repair notes for vehicles. The post mentions the Discord user ID you enter, and that ID is used only for the mention.
- Negotiation wins. Negotiation-win shares don't include the seller's message text, your account names, or conversation links, and Pounce shows you a preview before anything is posted.
Posts in our Discord are visible to its members and are also subject to Discord's policies. Ask us to remove any post you shared.
6. Service providers and services the app contacts
We use service providers (subprocessors) to run Pounce: DigitalOcean (hosting), Whop (licensing and payments), Google Gemini and DeepSeek (AI), LogSnag (usage analytics), Discord (community shares, waitlist, bug reports, alert quality review, and operator notifications), and Cloudflare (website hosting, security, and forwarding email sent to our pounce.gg addresses). Scrape.do and Decodo proxy our price lookups and receive search text only, never information about you. The subprocessor list shows what each one receives and where it operates.
The app also contacts some services directly from your PC, so they see your IP address or your proxy's IP address:
- Facebook, through the accounts you add, to search Marketplace and message sellers. Facebook's own policies apply to that activity. Listing images for alerts are fetched from Facebook's image servers.
- OpenStreetMap Nominatim, which receives location text (your home location, and sometimes a listing's location) to convert it to coordinates.
- ipinfo.io, get.geojs.io, and api.ipify.org, contacted through your own proxy when one is set, to check the proxy's exit IP address and timezone.
- GitHub, for update checks and downloads. GitHub receives your IP address and the app's user agent.
Alerts go to the Discord channels, Telegram chats, and Windows notifications you configure. Those channels, and any proxy provider you use, are your own services, governed by their own terms.
7. International transfers
Pounce Cloud runs in the United States. Our providers process data in the United States and the other countries shown on the subprocessor list. DeepSeek processes listing and catalog text for some searches in China; it receives listing text, search names, and your search notes, but no photos, license keys, or device identifiers. If you are in the European Economic Area, the United Kingdom, or Switzerland, your data is transferred to countries that may not offer the same level of protection as your own. We rely on each provider's standard service terms and do not currently have Standard Contractual Clauses in place with them. We limit what each provider receives to what it needs, and DeepSeek never receives photos, license keys, or device identifiers.
8. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Running the app and Pounce Cloud: licensing, AI checks, pricing, seller messaging you turn on, and alerts | Performance of our contract with you |
| Billing and keeping business and tax records | Contract; legal obligation |
| Support and bug reports | Contract; legitimate interests in fixing problems |
| Security, fraud and abuse prevention, license enforcement, and server logs | Legitimate interests in protecting Pounce and its users |
| Processing seller listing data and messages for your deal finding | Legitimate interests (yours in finding deals; ours in providing the service) |
| Minimized usage analytics and alert quality review | Legitimate interests in improving Pounce; you can opt out in Settings |
| Community and Discord win shares | Consent, given when you choose to share; withdraw it by removing the share |
| Waitlist emails | Consent; you can unsubscribe at any time |
| Website hosting and performance measurement | Legitimate interests in running a fast, secure website |
9. How long we keep data
Pounce Cloud and our providers
| Data | Kept for |
|---|---|
| Application and proxy logs | 30 days |
| Usage analytics | 13 months |
| Listing data and images sent for AI checks | Processed in memory; cached images and AI decision records are kept for at most 30 days |
| AI request records (hashed identifiers, search name, model, token counts) | 90 days in detail; daily totals for 2 years |
| License, membership, and device activation records | Life of your membership plus 24 months |
| Discord user ID linked for win shares | Life of your license |
| Community wins | Until you remove them; removed entries are permanently deleted within 30 days |
| Bug reports | 12 months |
| Waitlist sign-ups | Until you unsubscribe, or 12 months after sign-up |
| Backups | Rolling 30 days |
On your PC
Pounce cleans up local data automatically on this schedule. You can delete it sooner.
| Data | Kept for |
|---|---|
| Conversations with sellers | 180 days, unless still tied to an active conversation or a tracked flip |
| Dismissed listings | 90 days |
| Alert history | Kept so all-time Insights stay accurate; the oldest alerts are removed once a count limit is reached |
| Other listings Pounce has seen | 30 days |
| Cached listing images | 30 days for rejected listings; images for alerts and messages are removed oldest first once a count limit is reached; images for tracked flips stay until you remove the flip |
| Rotated log files | 30 days |
| Support bundles | 30 days |
| Facebook sessions, saved passwords, settings, and your flip tracker | Until you delete them, delete the account in Pounce, or uninstall with "Also remove your Pounce data" |
10. Your rights and choices
Depending on where you live, you can ask us to:
- Access the personal information we hold about you and receive a copy in a portable format.
- Delete it.
- Correct it if it is wrong.
- Object to or restrict processing based on legitimate interests, including analytics.
- Withdraw consent for community shares or waitlist emails at any time.
You can also turn off usage analytics yourself with Share usage and alert data in Settings, and you can complain to your local data protection authority.
California and other US state privacy rights
California residents have the right to know what personal information we collect, use, and disclose; to delete it; to correct it; and not to be discriminated against for using these rights. In the past 12 months we collected: identifiers (license key, hashed hardware identifier, IP address, Discord user ID, and waitlist email); commercial information (plan and membership status, and purchase and sale amounts you choose to share); internet activity (usage analytics and logs); approximate location (location text you enter and ZIP codes for vehicle searches); and the content of your messages with sellers when you use messaging features. We get it from you, your device, the Marketplace listings you search, and Whop, and we disclose it only to the service providers on our subprocessor list for the purposes in this policy.
We do not sell or share personal information, as those terms are defined in the California Consumer Privacy Act, and we have not done so in the past 12 months. We do not use personal information for targeted advertising. We use sensitive personal information, such as message contents, only to provide the features you ask for.
11. How to make a request
Email [email protected] or contact us through our Discord. To protect your data, we verify requests by asking you to confirm the license key tied to the request (or, for the waitlist, the email address you signed up with). Never post your license key in a public channel; send it privately.
We respond within 30 days under the GDPR and UK GDPR, and within 45 days under the CCPA. If a request is complex, we may extend these deadlines as the law allows and will tell you why. You can use an authorized agent; we may ask for proof that you authorized them. If we decline a request, we will explain why, and you can appeal by replying to our decision.
We can only act on data we hold. Data on your PC is under your control: delete accounts, flips, and listings in the app, or choose "Also remove your Pounce data" when you uninstall.
12. Support bundles
A support bundle is a diagnostic file that Pounce creates and saves on your PC. Nothing is uploaded automatically. You decide whether to send the file to support, for example in Discord. A bundle contains redacted logs, settings summaries, and recent listing rows without seller IDs or locations. It does not contain Facebook page HTML or your license, session, or credential files. Bundles older than 30 days are deleted automatically. Send bundles only to Pounce support, never in a public channel.
13. Website and waitlist
This website is hosted by Cloudflare. Cloudflare receives your IP address and browser details when you visit so it can deliver the site and protect it from abuse. This site doesn't use advertising or analytics cookies.
If you join the waitlist, we receive your email address, optional Discord username, what you flip, and your setup notes. They are delivered through Pounce Cloud to a private Pounce channel on Discord. Our server logs record only a one-way hash of your email, not the address. We use them only to contact you about Pounce.
14. Age requirement
You must be at least 18 to use Pounce, and Facebook Marketplace also requires adult users. Pounce is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you think a minor has given us personal information, contact us and we will delete it.
15. Security
The app's dashboard is only reachable from your own PC. Facebook passwords, saved sessions, and your license key are encrypted on your PC with Windows DPAPI. Connections to Pounce Cloud use TLS, and license receipts are cryptographically signed. No system is perfectly secure, so keep your Windows account protected and treat your license key, webhooks, and proxies as secrets. See our security page to report a vulnerability.
16. Affiliations
Pounce is not affiliated with Facebook, Meta, eBay, TCGplayer, Kelley Blue Book, J.D. Power, Whop, Discord, Telegram, Google, or DeepSeek.
17. Changes to this policy
We will update this policy when Pounce changes. We announce material changes in the app and on our Discord before they take effect, and we update the date at the top of this page.
Contact
Thalmann Enterprises LLC, 2125 Mark Ave, Punta Gorda, FL 33950, United States. Email [email protected], or contact us through our Discord.