Privacy Policy

1. Introduction

productrue ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our product information management platform.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered address is 128 City Road, London, EC1V 2NX.

2. Data We Collect

We collect and process the following types of personal data:

2.1 Account Information

• Name and email address
• Company name and business details
• Password (stored securely using one-way hashing)
• Billing information (processed securely by Stripe)

2.2 Usage Data

• Log data (IP address, browser type, pages visited)
• Device information
• Feature usage and interaction data

2.3 Business Data

• Product information you upload to the platform
• Dealer and customer contact information you manage
• Order and inventory data

3. How We Use Your Data

We use your personal data for the following purposes:

• Service Delivery: To provide and maintain our platform
• Account Management: To manage your account and subscription
• Communication: To send service updates, security alerts, and support messages
• AI Features: Where you choose to use them, to process product images and text you submit (background removal, model try-on, descriptions, translations). See section 5 for the providers involved.
• Improvement: To analyse usage patterns and improve our services
• Legal Compliance: To comply with legal obligations
• Marketing: With your consent, to send promotional communications

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: Processing necessary to perform our contract with you
• Legitimate Interests: For our legitimate business interests (e.g., improving our services)
• Legal Obligation: Where required by law
• Consent: Where you have given explicit consent (e.g., marketing emails)

5. Data Sharing

We may share your personal data with:

• Sub-processors: The providers listed below, who process data on our instructions
• Professional Advisers: Lawyers, accountants, and auditors where necessary
• Law Enforcement: When required by law or to protect our rights

We do not sell your personal data to third parties.

5.1 Our sub-processors

These are the third parties that may process data on our behalf. We keep this list current; material additions are notified in advance.

Provider	Purpose	Location
Stripe	Payment processing and card vaulting	EU / USA
OpenAI	AI image and text processing, when you use an AI feature	USA
Google (Gemini)	AI image and text processing, when you use an AI feature	USA
Amazon Web Services	SMS delivery	EU / USA
Resend	Transactional email delivery	EU / USA
Cloudflare	Content delivery and bot protection	Global
Google Analytics	Website analytics (marketing site only)	USA
Apple / Google	Mobile push notification delivery	USA

5.2 What AI providers receive

AI features are optional and run only when you invoke them. When you do, the specific image or text you selected is sent to the provider for processing and the result is returned to you. We do not send your catalogue, customer records or order data to AI providers, and we do not permit these providers to use your content to train their models.

6. International Transfers

Your account and business data are stored in the United Kingdom.

Some processing necessarily takes place outside the UK, because the providers we rely on operate internationally. This applies to payment processing (Stripe), AI features when you use them (OpenAI, Google), message delivery (Amazon Web Services, Resend), and content delivery (Cloudflare). See the sub-processor table in section 5 for the full list.

Where data is transferred outside the UK, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on a UK adequacy decision where one exists for the destination country.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfil the purposes described in this policy. After account deletion, we may retain certain data for up to 7 years for legal and regulatory compliance.

8. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Request limitation of processing
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent

To exercise any of these rights, please contact us at [email protected].

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and penetration testing
• Access controls and authentication measures
• Employee training on data protection
• Incident response procedures

10. Cookies

We use cookies and similar technologies to provide and improve our services. For detailed information, please see our Cookie Policy.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through our platform. The "last updated" date at the top indicates when the policy was last revised.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Address: 128 City Road, London, EC1V 2NX

14. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated:

• Website: ico.org.uk
• Phone: 0303 123 1113