Privacy policy

Coupera.ai (“we,” “us,” or “our”) operates the website at coupera.ai, the Coupera.ai mobile application, and the public Model Context Protocol server at mcp.coupera.ai. This policy explains what information we collect across each surface, why we collect it, who receives it, how long we keep it, and the controls available to you. By using our services you agree to the practices described here.

We do not require account registration, collect payment information, or sell your personal data to third parties.

Website & mobile app (coupera.ai)

• Usage data — pages visited, deals viewed, deals clicked, search queries, referrer, approximate time on page. Collected via Google Analytics.
• Device & browser metadata — user agent, screen size, language, approximate location derived from IP (city/region level, not precise GPS), and a randomly-generated anonymous device identifier used to remember your saved deals without an account.
• Cookies and local storage — small values stored on your device to remember your saved deals, recent searches, dismissed banners, and analytics IDs.
• Server access logs — automatically generated by our hosting provider when your browser requests a page. Includes IP address, timestamp, requested URL, response code, and user agent.
• Contact information — name and email address, only if you email us directly or fill out a support form.

Coupera MCP server (mcp.coupera.ai)

• Tool call inputs — the parameters that an AI assistant sends to our MCP tools on behalf of its user. Specifically: search keywords, product ASINs or URLs, and numeric filters (price range, minimum discount, minimum rating). See the “MCP server” section below for the full list per tool.
• Request metadata — the IP address of the calling AI client (typically the AI provider's server, not the end user's device), user-agent string, timestamp, and HTTP response code. These are recorded in standard access and application logs.
• What we do NOT receive from AI clients — your name, account, email, chat transcripts, system prompts, conversation history, payment information, browser cookies, or any direct identifier of the human end user. Tool inputs may indirectly reflect what you asked the assistant (for example, a search keyword like “hiking boots” or a pain-point phrasing the assistant translated into a keyword).

• Service operation — to return deal results, render the website, sync your saved deals across visits on the same device, and serve the MCP tools to AI clients.
• Personalization — to surface deals, categories, and rails likely to be useful based on aggregate behavior. We do not build advertising profiles.
• Analytics & product improvement — to understand which deals, categories, and tools are most useful and improve the experience.
• Security & abuse prevention — to detect and block scraping, denial-of-service, and other abuse of our website, app, or MCP endpoints. Server logs are the primary signal here.
• Support — to respond if you email us.
• Legal compliance — to comply with applicable law and respond to lawful requests.

Where required by law (e.g., GDPR), our legal bases are: legitimate interest in operating and securing the service; consent for non-essential analytics cookies where applicable; and legal obligation for compliance-driven uses.

Coupera.ai operates a public Model Context Protocol (MCP) server at mcp.coupera.ai that lets AI assistants — including ChatGPT, Claude, and other MCP-compatible clients — search and read the same Amazon deal catalog available on coupera.ai. The server is read-only, requires no account, and accepts no destructive operations.

Tools exposed and the data each one accepts and returns:

• search_deals — Inputs: a keyword string (required), pagination limit/offset, and optional numeric filters (min/max price, min discount percent, min discount dollar amount). Outputs: a list of matching deals from our public catalog, including product title, ASIN, discounted price, rating, promo code (if any), discount percent/amount, image URL, and a coupera.ai deal URL.
• lookup_by_asin — Inputs: a 10-character Amazon ASIN or a product URL. Outputs: a single deal record (same fields as above) if a promo exists for that ASIN, or a “not found” response.
• list_categories — Inputs: none. Outputs: the list of category names available in our catalog and the count of deals in each.
• top_deals — Inputs: pagination limit/offset and optional filters (min rating, min/max price, min discount percent, min discount dollar amount). Outputs: a ranked list of top deals using the same fields as search_deals.

Logging. Each MCP request is recorded in standard server logs containing the timestamp, requesting IP address (typically the AI provider's server), user-agent, the tool name invoked, and the input parameters listed above. Logs are used solely for operating the service, debugging, and abuse prevention. They are retained for up to 30 days and then deleted on a rolling basis.

What we never receive. AI clients do not transmit user identities, account data, chat transcripts, system prompts, conversation history, cookies, or end-user IP addresses to our MCP server. The user-facing AI client (e.g., ChatGPT) is the data controller for its own conversation; please consult that client's privacy policy for how it handles your prompt.

Affiliate links. Product URLs returned by the MCP server point to coupera.ai deal pages, which then redirect to Amazon with affiliate tags appended (the same behavior as the website). A purchase made after discovering a deal through an AI assistant may earn Coupera.ai a commission at no extra cost to the shopper.

We share information only with the service providers below, each of which processes data on our behalf under contractual confidentiality and security obligations. We do not sell or rent personal data, and we do not share data with advertisers.

• Vercel (United States) — hosts the coupera.ai website and serverless functions. Receives website request logs (IP, URL, user agent).
• Render (United States) — hosts the mcp.coupera.ai MCP server. Receives MCP request logs (IP, user agent, tool name, tool inputs).
• Supabase (United States) — our backend database. Stores the public deal catalog and anonymous saved-deal records keyed to a random device identifier.
• Google Analytics (United States) — aggregated, IP-anonymized website analytics. See Google's Privacy Policy.
• Amazon.com — source of product data, images, and pricing displayed in the catalog. Affiliate clicks redirect to amazon.com under the Amazon Services LLC Associates Program.
• AI clients (e.g., OpenAI, Anthropic) — when a user invokes our MCP tools through an AI assistant, the AI provider is the entity making the request to our server. Data returned by our tools flows back through the AI client to the user.

We may also disclose information when required by law, to enforce our Terms, or to protect the rights, property, or safety of Coupera.ai, our users, or others.

• Website and MCP server access logs — up to 30 days, then deleted on a rolling basis.
• Saved deals (anonymous device records) — kept until you clear your browser/app storage or request deletion.
• Google Analytics data — retained per Google's default retention (currently 14 months from last activity).
• Support emails — kept for up to 24 months unless a longer period is required to resolve an issue or for legal reasons.
• Public deal catalog — not personal data; managed on its own lifecycle as deals expire.

Depending on where you live, you may have the following rights regarding personal data we hold about you:

• Access — request a copy of personal data we hold about you.
• Correction — ask us to correct inaccurate information.
• Deletion — ask us to delete your data, including any anonymous saved-deal records associated with your device identifier.
• Objection / opt-out — opt out of analytics, object to certain processing, or withdraw consent at any time.
• Portability — receive your data in a portable format where applicable.

To exercise any of these rights, email us at support@coupera.ai. We respond within 30 days. You can also:

• Disable analytics cookies in your browser, install the Google Analytics opt-out, or use a tracker-blocker.
• Clear your browser/app storage to remove the anonymous device identifier and saved-deal records.
• If you used our MCP server through an AI assistant, manage that assistant's data within the assistant's own settings — we do not hold your conversation.

California residents have additional rights under the CCPA/CPRA (right to know, delete, correct, and limit use of sensitive information; right to non-discrimination for exercising rights). Residents of the EEA, UK, and Switzerland have rights under the GDPR/UK GDPR and may lodge a complaint with their local data protection authority.

Coupera.ai is a participant in the Amazon Services LLC Associates Program. When you click a deal link and make a purchase on Amazon, we may earn a small commission at no extra cost to you. This helps us keep the service free.

Prices, availability, and discount amounts are sourced from Amazon and may change without notice. We are not responsible for pricing discrepancies between what is shown here and what appears at checkout on Amazon.

Questions, requests, or complaints? Email us at support@coupera.ai. We are the data controller for personal information handled under this policy.