Privacy policy
Version 2026-09-08-draft. Draft for the operator's review; placeholders must be replaced before checkout opens.
Operator (data controller)
[Operator name — to be provided by the operator], [Address — to be provided by the operator]. Contact: [Support e-mail — to be provided by the operator]. Jurisdiction: [Jurisdiction — to be provided by the operator].
What we process and why
- Uploaded CSV files and generated files — to validate and convert your catalog (performance of the service you request). Files are stored in private storage on our server, are never published, shared with third parties or used to train AI models.
- Guest session cookie (
__Host-guest, random token, HttpOnly, 7 days) — to keep your job linked to your browser. It is strictly necessary; no login exists. - Mapping configuration, validation report, preview and sample — derived from your file to show you the result.
- Payment data — the payment is processed by PayPal (Standard Checkout). We store the PayPal order and capture identifiers, amount, currency and status; we do not store payer profile data or receive card numbers. PayPal is not the merchant of record; it acts as our payment service provider under its own privacy policy.
- Recovery code — shown once; we store only a SHA-256 hash.
- Support requests — contact address and message, encrypted at rest, kept 90 days.
- Rate-limit and abuse protection — a daily keyed hash of your IP address (never the raw IP) for 48 hours; the reverse proxy may keep access logs for up to 14 days.
- First-party product analytics — server-side events (upload accepted, mapping confirmed, preview ready, checkout, payment, download, feedback) with coarse size buckets and error codes. No file contents, file names, catalog URLs or e-mail addresses are stored in analytics; the referrer is reduced to its hostname. No Google Analytics, Meta Pixel, session replay or marketing cookies are used.
Retention
| Data | Retention |
|---|---|
| Unpaid uploads, configs, reports, previews, built files | 24 hours after last activity, at most 48 hours after upload — or immediately when you delete the job |
| Paid built file | 7 days after payment |
| Guest session | 7 days |
| Product analytics events | 90 days, then daily aggregates without session IDs |
| IP-hash rate buckets | 48 hours |
| Payment ledger (order, amounts, provider IDs, status history) | 30 days |
| Support requests | 90 days |
Sub-processors and transfers
- Hosting: a virtual private server operated by [VPS provider and location — to be provided by the operator].
- Payments: PayPal.
- Optional e-mail delivery (SMTP): not enabled in this release.
Transfers outside your jurisdiction: [transfer basis, if applicable — to be provided by the operator].
Your rights
You can delete your uploaded file and all derived files at any time from the review or order page. Depending on your jurisdiction you may have rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to a supervisory authority. Contact [Support e-mail — to be provided by the operator] to exercise them; we may keep the payment ledger where the law requires it.
Security
Files live in private storage under random identifiers, are never served publicly, and are removed on their retention deadline. The application never downloads image URLs from your file. Logs do not contain file contents, file names or secrets.