What Wally collects, and what it does not.

Your account

Signing in on wally.ai or in the Chrome extension creates the same Wally account. We store your email, name, and a session so both surfaces stay signed in. Price checks and shared saves still work without an account. Connecting mail or contacts is not on yet; when it is, you will opt in from the account page. Those optional Google connections are not available in the Chrome extension, and the extension does not request access to Gmail or Google Contacts. Google sign-in provides basic account information, not mailbox or contact access.

On your device

Saves (product title, the price you saw, better-priced store, dollar amount) are stored in Chrome local storage on this computer. You can clear them from the extension settings. Clearing local saves does not delete operational records already received by our servers. Product-price observations are buffered locally only while waiting for upload to Wally’s servers. Wally attempts uploads hourly while Chrome is running and on browser startup; successful uploads remove the corresponding local observations. Network failures or paused price checks can delay uploads. Long-term price records and API result caches are stored on our servers, not maintained as a local extension archive.

Shopping requests

When Wally detects a public shopping page, the extension sends a limited set of shopping evidence to wally.ai so our servers can identify the product or browsing context. This can include the page address, shopping headings and structured product data, displayed prices and currencies, product image URLs, retailer product IDs (such as Amazon ASIN, Walmart item ID, or GTIN/UPC), brand, model, specifications, selected options such as size or color, and condition. Shopping evidence can also include category breadcrumbs, shopping navigation links and labels, and whether purchase controls are present. Eligible retailer homepages can show shopping choices without starting a paid product search until you choose an item or category. If local product extraction is incomplete, our server may fetch the public shopping URL to obtain product information; the extension does not forward your retailer cookies or login credentials for that lookup. Our servers use shopping and search providers to find offers and related results. These providers can include SerpAPI (search, shopping, videos, reviews and image-based matches), Keepa, Best Buy, CJ Affiliate, and Shopify Catalog. Relevant queries and product information may be sent to those providers to fulfill the request. We also receive product-price observations from supported shopping pages to improve price comparisons. We cache offers by product or query so later checks can return results quickly. Cached shopping results generally have a 24-hour freshness window; freshness is separate from storage retention. We retain the returned public product data, including earlier versions of offers and reviews, until deliberately purged. Refreshing a cache does not automatically delete its earlier product data.

Operational records can include the query, title, source page address, product identifiers, source price, timestamp, result counts, provider usage and cost, cache status, and errors. These records help operate the shopping service, diagnose failures, and prevent abuse. They may contain activity from multiple shopping sites where Wally runs; they are not a record of every page you visit. We do not sell this data or use it to create an advertising profile.

When Wally recognizes an adult or intimate product, it excludes the shopping details and account or installation identifiers from durable shopping histories and caches. Limited operational counts may remain without those details or identifiers. Detection is automated and may not recognize every sensitive product.

Installation identifiers and signed-out use

Installation reporting is on by default and can be disabled in extension settings. While enabled, Wally generates a random installation identifier and stores it in browser local extension storage. It persists across extension reloads and is sent with shopping requests to Wally. The identifier represents one browser extension installation. It is not your name, email address, or proof that a particular person is using that browser. It is pseudonymous data, not anonymous data. Multiple people may share an installation, and one person may have several installations.

When supplied with a shopping request, the identifier lets Wally apply service limits and distinguish installations in operational records. Our restricted administration console shows separate signed-out installation summaries, including request counts and activity times. Signed-out summaries do not provide administrators with an individual shopping trail. Requests without a usable identifier remain in an unattributed group; we do not infer an identifier from your IP address or browser fingerprint.

You can decline reporting and still check prices. In extension settings, you can view the identifier, disable reporting, or reset the identifier. Disabling removes the local identifier and stops sending it with future requests. Resetting removes the local identifier; a later request creates a new one if reporting remains enabled. These controls do not erase records already on the server. Copy your identifier before resetting or disabling if you want to request deletion of those records.

Requests made while you are authenticated can be attributed to your account. When an authenticated shopping request includes an installation identifier, we automatically associate that installation, including its earlier signed-out operational summaries, with the account to understand service use and reliability. Earlier activity remains labeled signed out; we do not claim the account holder performed it. An installation can be associated with multiple accounts, and this association does not unlock signed-out shopping trails for administrators. Signing out does not delete records already received by Wally.

Product reliability analytics

When installation reporting is enabled and product analytics is available, Wally sends limited reliability and interaction events through its server to PostHog: lookup outcomes, shopping page type, cache status, request duration, result counts, whether useful results appear in the ribbon or panel, panel interactions, offer clicks, automatic saving of savings records, signups that supply an installation identifier, and extension version. Event times and event identifiers help measure repeat use and avoid counting the same event twice. These events use a pseudonymous installation identifier. Automatic saving and offer clicks do not confirm a purchase. Disabling installation reporting stops future analytics events as well as installation reporting.

These analytics events do not include product titles, retailer domains, full URLs or query strings, page text, email addresses, account identifiers, credentials, or raw retailer traffic. Wally does not enable session replay or automatic page tracking. Wally does not merge accounts through the analytics installation identifier. Wally's server remains the source of retained shopping and product records.

Mail and contacts are not connected

Wally does not currently connect to or collect your Gmail messages or Google Contacts. If these features become available, we will explain their data practices and request the necessary authorization before connecting them.

Use, sharing, and access

Wally follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Information obtained through the extension is used to provide and improve its shopping features, maintain their reliability, and protect the service. We do not sell extension user data, use it for personalized advertising or credit decisions, or send it to data brokers.

We use hosting, authentication, shopping/search, and operational service providers as needed to run Wally. For example, signup notifications may send basic account details to our internal operational tools. Shopping providers receive relevant search or product inputs, not your Wally password or session token. Merchant or affiliate links may attribute a purchase and earn Wally a commission; the merchant or affiliate provider handles information you give it under its own policy.

Personnel may read individual extension user data only with your explicit consent for the specific data, when necessary for security or legal compliance, or when the data has been aggregated and anonymized for permitted internal operations. Signing in, receiving an administrator role, or enabling installation reporting does not by itself grant consent for a person to read your shopping trail. Automated processing and access controls support the shopping service.

Retention, security, and deletion

Account information is retained while needed to provide your account, subject to deletion requests and legal obligations. Production data is transmitted over HTTPS. Access to operational data is restricted to authorized systems and personnel under the access limits above. Contact us to request account deletion; this is currently handled by support, not an automatic deletion button. We may use your IP address to operate the service, including rate limiting and abuse prevention. We do not use it for advertising.

Shopping operational records currently have no automatic expiration period. You may request deletion of records associated with your account or installation. We may need information that lets us locate the records and verify the request; an installation identifier alone is not proof of ownership. Clearing browser storage or uninstalling Wally does not delete server records. Applicable law may provide rights to access, correct, delete, or object to processing of your personal data; contact us to make a request.

Shared save links

If you share a save, wally.ai stores a public page at /s/<id> with the product title, this store’s price, the better-priced store, that store’s price, and dollars saved — so the link can unfurl in a chat. Anyone with the link can view it. No account is required. We do not put your email, the product page URL, or other browsing history on that page.

What we do not do

Wally does not apply coupon codes or collect mailbox contents, private messages, passwords typed on merchant pages, or payment-card fields for shopping comparisons. Its shopping features skip ordinary social feeds and private productivity or financial dashboards; a public product listing on a social site may qualify. No account is required to check a price or view a shared save.

Trademarks

Wally™ and Wally.ai™ are trademarks of North Bay Opco I, Inc. Applications are pending. Do not treat these marks as registered.

Contact

Questions or deletion requests: North Bay Opco I, Inc., at support@wally.ai.