Nesmori is a shopping assistant: you describe what you are looking for, and we search across retailers, compare the options, and link you to the retailer to buy. This policy explains what information we handle to do that, which service providers receive it, and what stays on your own device.
Information we collect
Your account
When you create an account we collect your email address and sign-in credentials through our authentication provider, Auth0. If you sign in with Apple, Apple confirms who you are and gives us your email address, or a private relay address Apple makes for us if you choose to hide yours. We use your email to operate your account — for example, sign-in and password resets. We also keep a record of your sign-up with your name and email address, which is what lets you into Nesmori.
We also store the name from your sign-in profile (for example, your Google account). We email you when an item you saved drops in price or we find a new seller for it, and when a store you visited or saved is later removed as unsafe. Price emails are on by default, and each one has an unsubscribe link.
What you add to Nesmori
Your own profile details (such as sizes, pronouns, birthday, city or region, interests, and dates you added), your searches and chat messages, our replies, and the items and lists (“nests”) you save are stored on our servers so the service can do its job — building shortlists, comparing prices, and surfacing price drops on items you saved. To produce your results we send your searches and messages to the service providers listed under Sharing, including the AI provider OpenAI, once you have agreed to that as described there. After you agree, what you type in the search box on your signed-in home screen is sent to OpenAI as you type, before you press send, so it can shape your request. We also keep a record of the products you open or click in your results.
If you report a seller, we keep your report (the store, the listing’s web address, and any note you write) with your account so we can review the store. If you delete your account, we keep the report, including your note, with your account and nests removed from it.
Store links you click
When you click through from Nesmori to a store, we record which store and item you went to, and when. We keep these records so that if we later remove a store as unsafe, we can tell you that you visited it and what to watch for. If you delete your account, we keep these records with your account and nests removed from them. See How we vet sellers.
Your profile in a search
When you send a message or start a search, your browser sends our servers a short summary of your own profile: your sizes and the range they are for, such as women’s. Our servers hold that summary only until your request is finished, normally a few seconds, or a few minutes if it has to be retried. It can also remain in our database backups for up to 14 days. Your sizes go into the search words we send to our search provider, not to OpenAI.
Nesmori does not keep a list of other people. If you write about someone else, for example their name in a message or in a nest’s name, we store it and send it to OpenAI as you wrote it, like everything else you type.
When you start a search, our servers keep the search’s name, your first request, and the sizes and gender copied from your profile until the search is deleted, as described under Retention and deletion. A nest keeps its name. Some older nests also keep your first request, sizes and gender copied from a profile, an interest picked for the nest and brands that were copied from a profile. Those sizes, gender, and brands can appear in the search words we send to our search provider.
In October 2026 we removed the list of people you shop for, which was stored encrypted in your browser, together with its optional end-to-end encrypted syncing between your devices. We hold no copies of the list, and Nesmori deletes it from your browser the next time you open Nesmori while signed in.
Photos you search with
If you search with a photo, we shrink it and remove its location and camera details, then save it on our servers at a random web address so that Google Lens, through our search provider SearchAPI, can fetch it. We delete our copy as soon as that search returns, normally within seconds. When Google Lens finds too few matching listings, we also send the photo to Anthropic, an AI provider, which describes the item so we can search for it. On the home screen, that description fills in the search box, where you can edit it before sending. When you search with a photo from a nest’s card on the home screen, the description starts a new search.
Technical information
Like most services, our servers keep technical logs (which can include IP address, browser type, the addresses requested, and request timing) to keep Nesmori reliable and secure. These logs are kept with Microsoft Azure for 30 days and are also sent to Grafana Labs, which runs our logging and performance service. They can include your sign-in identifier, internal account and nest identifiers, the names and web addresses of products you save, parts of the search words our systems build, and occasionally a short description of a photo you searched with. We use this operational data to diagnose problems and understand aggregate usage, not to build advertising profiles.
How you use Nesmori
We use Pendo, a product-analytics service, to see which pages are visited, which features are clicked, basic browser and device information, and a rough location, such as country and region, that Pendo may work out from your IP address, so we can improve the product. Pendo ties this to your sign-in account’s identifier and is not given your name or email. If you sign in with Google or Apple, that identifier includes the ID that Google or Apple gives your account. Pendo does not collect the text on your screen, and its session recording feature is turned off. We send Pendo identifiers, counts, and similar event details. Pendo also receives the address of each page you open and of each link you click. Before an address goes to Pendo, we remove everything after the page’s path except a few values that never hold your own words, such as a page number, the filter on your list of nests, or the identifier of a saved item, so search phrases, photo descriptions, names and interests stay out of the addresses Pendo receives. The path can still include the identifiers we give a nest, a search or a saved item. Pendo also delivers our short in-app messages and optional surveys; if you answer a survey, your answer is stored with Pendo too. Pendo handles this data under its terms for business customers and its privacy policy.
You can turn Pendo off for your account with “Share usage analytics” in Settings, under Privacy. We also leave it off in any browser that sends a Global Privacy Control signal. Once it is off, Pendo is not loaded on any page you open or reload after that, so it receives nothing from those pages and our in-app messages and surveys are not shown. A page already open in another tab or on another device keeps sending to Pendo until it reloads.
Cookies
Nesmori uses cookies to keep you signed in and to remember your session. Our product-analytics service, Pendo, sets first-party cookies so a returning browser is counted once rather than as a new visitor. We do not run third-party advertising cookies on our site. Product images, on our site and in our emails, load directly from retailers’ and Google’s image servers, which receive your IP address and browser type the way any website does.
Affiliate links and third parties
When you click through to a retailer from Nesmori, the link may be an affiliate link operated by a network such as Sovrn Commerce or CJ Affiliate, and your browser passes through the network’s site on the way to the store. These networks may use cookies or similar technologies on their own and the retailer’s sites to attribute a purchase to the referral from Nesmori. On links through Sovrn Commerce we include a code that we create for that click. If a link is copied rather than clicked, the code identifies the nest it came from instead. When Sovrn reports a purchase made after the click, its report carries the same code with the order value, the items bought, the device type, and the country, and we match it to your click record so we can show you the savings you confirmed. We do not give the networks your name or email address. What a retailer collects on its own site is governed by that retailer’s privacy policy, not this one. See our Affiliate Disclosure for how commissions work.
How we use information
- To provide the service: searching, comparing, and saving items you choose.
- To shape your results with the service providers listed under Sharing.
- To operate your account and communicate with you about it, including price-drop emails.
- To keep the service secure and reliable.
- To warn you if a store you visited or saved is later removed as unsafe.
- To show you the savings on purchases Sovrn Commerce reports.
- To understand aggregate usage and improve Nesmori.
We do not sell your personal information, and we do not share it with third parties for their own advertising.
Sharing
We share personal information with the service providers below, each of which receives what it needs to do its part of running Nesmori, and where required to comply with law.
Before you search, Nesmori asks whether you agree to send your searches to OpenAI and some photos to Anthropic, and to send OpenAI what we know about products you save, as described below. Until you agree, what you type in the search box or in a search’s chat, and any photo you choose to search with, is not sent to us, to them, or to our search provider SearchAPI and Google. You can turn this off at any time in Settings, under Privacy, and searching then waits until you agree again, in other open tabs and on your other devices once their page reloads; a search already running when you turn it off still finishes. The nightly price checks on items you saved keep working without it, and they share what is described below.
You can save products before you agree, and until then nothing about a product you save goes to OpenAI or Anthropic. We still fetch its page, with ScraperAPI or Zyte fetching it for us if the store blocks us, and SearchAPI and Google receive its name, brand, and similar details so we can find other sellers. Without OpenAI, some details can stay empty, such as a price the page hides. If we find no name for a product, for example because its store blocks us, we use words from its web address to look for other sellers, and those words can become the name it shows. Otherwise the product may show without a name until you agree. When you agree, we go back to the products that waited, up to the 200 you saved most recently, and send OpenAI what is described below to fill in their missing details and look for more sellers. Details we already have stay as they are. If you later withdraw your agreement in Settings, we stop sending products to OpenAI, and a request already sent still finishes.
- OpenAI, an AI provider, receives what you type in the search box and chat, recent messages from the same chat, your search’s details and filters (such as budget, a size you choose for the search, and brands). When we need help reading a product page or finding more sellers for it, and only after you agree, it also receives what we know about a product you save: its web address and store, name, brand, category, price, the web address of its picture, color and size, its store item number, model number, and barcode number (SKU, MPN, and GTIN), and a short extract of its store page, such as its title, product data, and the text near its price.
- Anthropic, an AI provider, receives a photo you search with when Google Lens finds too few matches.
- SearchAPI runs our searches on Google Shopping and Google Lens, so SearchAPI and Google receive the search words built from your request (which can include the sizes, gender, and brands in a nest’s details), the names and identifiers of products you save or open, and a photo you search with, which Google fetches from a temporary address on our servers. We instruct OpenAI to leave names out of the search words it builds. Nothing else removes names, so a name you type can occasionally reach a search. If a request cannot be planned, your message itself is not searched and the search stays as it was.
- DataForSEO receives the names of products you saved, to check their prices each night.
- When you save or paste a product link, our servers fetch that page. If the store blocks us, ScraperAPI or Zyte fetches it for us and receives the full link.
- Sovrn Commerce and CJ Affiliate receive product links and identifiers to look up prices, sellers, and coupon codes, and handle affiliate clicks as described above.
- Microsoft Azure hosts our servers, database, file storage, and backups. Auth0 handles sign-in. Apple handles Sign in with Apple and delivers our iPhone app’s price-drop notifications, so it receives a device token and each notification’s content. SendGrid sends our emails, so it receives your email address and each email’s content, such as the items in a price-drop email, and it may record when an email is opened and which of its links are clicked. Grafana Labs receives our server logs and performance data. Pendo provides product analytics and in-app messages.
Each provider handles what it receives under its own terms for business customers and keeps it for as long as those terms allow.
Retention and deletion
We keep your account information while your account is active. Some records are removed sooner: a shopping chat, with your messages and our replies, is deleted 30 days after its last message; and the list of products you opened or clicked in your results is deleted 180 days after you last viewed each one. That list is separate from the record of store links you click, described above, which we keep. A search keeps what you asked, the sizes and gender copied from your profile, your filters and its results until 24 hours after you last use it, and then we delete them from our servers, while its chat follows the 30-day rule above. A nest keeps its name and the items you add to it, even while it is empty. When you delete a nest or a saved item, it disappears from your account, but its record (the nest’s name, your first request, its details, and the items saved to it) stays on our servers until your account is deleted. Database backups are kept for 14 days.
You can delete your account at any time in Settings. When you confirm, we delete your account and everything saved with it: your profile (including your city or region), your nests and the items saved to them, your price alerts, your chats, the list of products you opened or clicked in your results described above, and the record of your sign-up. Your sign-in record at Auth0 is removed within a day. If you signed in with Apple, we also ask Apple to end Nesmori’s access to your Apple sign-in. Copies in our database backups expire after 14 days. If you also tried signing in to Nesmori another way, that second sign-in record at Auth0 is not removed, so email privacy@nesmori.com and we will remove it. You can also ask us to delete your account by emailing privacy@nesmori.com.
A few records outlive a deleted account. We keep the separate record of store links you clicked, any purchase reports Sovrn Commerce sent us for your clicks or copied links, and seller reports you made, including your note, with your account and nests removed from them. Until our server logs and database backups expire, those copies can still link them to your account. Until the deletion finishes and for 30 days after, we keep a record of it with a one-way hash of your sign-in identifier and your former internal account number, so that a device still signed in to the deleted account cannot create it again. While the deletion is still running, that record holds your sign-in identifier itself. If an account was refused access to Nesmori, we keep its sign-in identifier and a one-way hash of its email address so the refusal still applies. Copies in our server logs expire on our logging providers’ schedules (30 days at Microsoft Azure), and deleting your account does not remove what service providers have already received.
Your rights
Depending on where you live, you may have rights to access, correct, or delete personal information we hold about you. Email privacy@nesmori.com and we will honor these requests.
Children
Nesmori is not directed to children under 13, and we do not knowingly collect personal information from them.
Changes
If we change this policy, we will update this page and its date.
Contact
Questions about privacy: privacy@nesmori.com.