Privacy

Last updated: 10 November 2026

Cashley (cashley.co) is run by WINNIEY LIMITED, a company registered in England and Wales (company no. 16151469), 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. We are responsible for your data on this site. Contact: hello@cashley.co.

The short version

• No account, no sign-up, and we don't ask for your name or email.
• The only cookies we set are Google Analytics cookies, to see which pages are used. In the EU, the UK and Switzerland we ask first, and anyone can turn them off with “Cookie settings” at the bottom of every page.
• We don't keep what you type. Your messages go to our AI provider to write the reply, and are then gone from our side.
• We don't sell or share your personal information, and we don't use it for advertising.

What happens to your messages

The conversation lives in your browser tab. Each time you send a message, the tab sends the conversation so far to our server, which:

• passes it to Anthropic, the company that provides the AI model (Claude), to write the reply. Anthropic acts as our service provider; under its commercial terms it does not train its models on this data;
• sends short search terms (for example "sport watch under $150") to product catalogs: Shopify's Global Catalog, Channel3 and, when available, Amazon's product API. Stores in these catalogs can see the search terms, so we remove email addresses, phone numbers and links from them first.

We don't store the text of your messages or the replies. Closing or reloading the tab ends the conversation. Please don't type sensitive personal details (health, finances, contact details) into the chat; the assistant doesn't need them.

Your IP address

To stop abuse and keep costs under control, each visitor has a daily message limit. To count it, we turn your IP address into a salted, one-way code and keep that code in memory until the end of the day. We don't write your IP address to logs or to disk.

Product images load directly from the stores' and Amazon's servers, which see your IP address as any website does.

Usage statistics

To learn whether the site helps people, we record anonymous events: a page was opened, a product was opened or liked, a store link was clicked (which store, and its position), and how many products a search returned. Each event carries a random code that only lives as long as the open page, so we can tell events from the same visit apart but can't recognise you on a later visit. Events contain no IP address and no message text. We keep them for up to 13 months.

We also use Google Analytics to see which pages are used and how people reach them. It sets first-party cookies (_ga, _ga_…) that last up to 13 months. Google processes your IP address to provide this; Google Analytics 4 does not store it. Google signals, ad personalization and data sharing for ads are off. Visitors in the EU, the UK and Switzerland are asked first, and anyone can change the choice with “Cookie settings” at the bottom of every page or block it with Google's opt-out browser add-on. Your choice is kept in your browser's local storage so we don't ask again.

Shared lists

When you share your list, the link contains only product references. We don't store the list or who shared it; whoever opens the link sees the products with current prices.

When you go to a store

Store links take you to the store's own site. The store, and affiliate programs such as Amazon Associates, may use cookies there to record that you came from us. Their privacy policies apply on their sites. SeeHow we make money.

Legal basis (UK GDPR)

We process the little data described here on the basis of our legitimate interests: answering your request, keeping the service secure and affordable, and understanding how it is used.

Where data is processed

Our server and our providers (Anthropic, Shopify, Channel3, Amazon) are in the United States. Where UK data protection law applies, these transfers rely on the providers' standard data protection terms.

Your rights

Depending on where you live (for example the UK, the EU or California), you may have the right to ask what data we hold about you, to have it corrected or deleted, and to object to its use. Because we don't keep your messages or anything that identifies you, we usually have nothing to return or delete, but write to hello@cashley.coand we will answer within one month. In the UK you can also complain to the Information Commissioner's Office (ico.org.uk).

California: we do not sell or share personal information, as those terms are defined in the CCPA.

Children

Cashley is not meant for children under 13, and we don't knowingly collect data from them.

Changes

If we change how we handle data, we will update this page and the date at the top.