Privacy Policy

1. Introduction

Welcome to Productrise. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services, including data we access from Google Merchant Center and Google Shopping when you connect your account. We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

3. Personal Data We Collect

We collect the following categories of personal data:

Information You Provide Directly

• Account information: Name, email address, password (encrypted)
• Business information: Company name, website URL
• Payment information: Billing address, payment card details (processed securely via Stripe)
• Product feed data: Product information you upload or create
• Google Merchant Center / Google Shopping data: When you connect your Google Merchant Center account via OAuth, we access your product data and related content through Google’s Merchant API in read-only mode. We use this data only to show you analytics, audit your feed, track products, and suggest optimizations for Google Shopping. We do not store your Google Merchant data in our databases except for short-term caching. See section 4 below for more detail.
• Communications: Messages sent to our support team

Information Collected Automatically

• Technical data: IP address, browser type and version, device type, operating system
• Usage data: Pages visited, features used, time spent on pages, click patterns
• Cookie data: See our Cookie Policy for details

4. Google Merchant Center and Google Shopping Data

Productrise helps merchants optimize their presence in Google Shopping. If you connect your Google Merchant Center account to Productrise, we use Google’s Merchant API to access your data. Today we use this access in read-only mode only: we do not create or update your product listings. We only:

• Read (fetch) your product listings and related data from your Merchant Center account via the Merchant API
• Show analytics for the connected property so you can optimize your products for Google Shopping
• Audit your Google Merchant Center data using our feed tracking — we track your products and optimizations and suggest improvements
• Let you select products from the fetched data to track and optimize from there

We have future plans to let you apply supplemental feed data directly to Google Merchant Center (e.g. to push optimized product data to your account). If we enable write access for that purpose, we will update this policy and use write access only for that stated feature.

We never store your Google Merchant data in our databases, except for short-term caching where needed to serve your requests (e.g. while we fetch and display product data). Cached data is cleared when you disconnect or when it is no longer needed. We do not use your Google Merchant or Shopping data for advertising, profiling, or any purpose other than providing these services to you. You can revoke our access at any time via your Google Account permissions; we will then stop accessing your Google data. Google’s Privacy Policy applies to data held by Google.

Productrise’s use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Lawful Bases for Processing

We process your personal data based on the following lawful bases under GDPR Article 6:

• Performance of contract (Art. 6(1)(b)): Processing necessary to provide our services, manage your account, process payments, and—when you connect your Google Merchant Center account—to read (fetch) your product and inventory data via Google’s Merchant API in read-only mode for analytics, auditing, and optimization suggestions.
• Legitimate interests (Art. 6(1)(f)): Processing for analytics to improve our services, fraud prevention, and security. We balance our interests against your rights and freedoms.
• Consent (Art. 6(1)(a)): Processing for marketing communications and non-essential cookies. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): Processing required to comply with legal requirements, such as tax and accounting obligations.

6. How We Use Your Data

We use your personal data for the following purposes:

• Providing, maintaining, and improving our services
• Reading (fetching) your product data from Google Merchant Center when you connect your account — for analytics, feed auditing, product tracking, and optimization suggestions only (we do not create or update your listings)
• Processing transactions and sending related information
• Sending technical notices, updates, and support messages
• Responding to your comments, questions, and requests
• Analyzing usage patterns to optimize our platform
• Detecting, preventing, and addressing technical issues and security threats
• Complying with legal obligations

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Account data: Retained while your account is active and for 30 days after deletion request
• Google Merchant Center / Google Shopping data: We access your Google data only while your account is connected, and we do not store it in our databases except for short-term caching. When you disconnect or revoke access, we stop accessing it and clear any cached data in line with our account data retention above.
• Transaction records: Retained for 7 years for tax and legal compliance
• Analytics data: Aggregated and anonymized after 26 months
• Support communications: Retained for 3 years after the last interaction
• Cookie consent records: Retained for 12 months from consent date

8. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with the following categories of recipients:

Service Providers (Data Processors)

• Stripe: Payment processing (USA, EU Standard Contractual Clauses in place)
• Google: When you connect your Google Merchant Center account, we use Google’s Merchant API to read (fetch) your product and inventory data on your behalf. Our current use is read-only; we have future plans to support applying supplemental feed data directly to Google Merchant Center, and any write access would be used only for that purpose and reflected in an updated policy. We do not store your Google Merchant data in our databases except for short-term caching. Data accessed from Google is subject to Google’s Privacy Policy. We do not use Google data for advertising or other purposes beyond providing these services.
• Google Analytics: Website analytics (anonymized IP enabled)
• Postmark: Transactional emails
• Cloud hosting providers: Data storage and infrastructure

All processors are bound by Data Processing Agreements (DPAs) that ensure GDPR-compliant handling of your data.

9. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms. When you connect your Google Merchant Center account, data accessed via Google’s Merchant API may be processed by Google in the United States; Google provides appropriate safeguards for such transfers.

10. Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15): Request a copy of your personal data we hold
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete data
• Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
• Right to restriction (Art. 18): Request limitation of processing in certain circumstances
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent (Art. 7(3)): Withdraw consent at any time where processing is based on consent
• Right to lodge a complaint: File a complaint with a supervisory authority (see below)

To exercise any of these rights, please contact us at hello@productrise.app. We will respond within 30 days. To revoke Productrise’s access to your Google Merchant Center data, use your Google Account permissions.

11. Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For the Netherlands, the supervisory authority is:

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure password hashing, regular security audits, and access controls. However, no method of transmission over the Internet is 100% secure.

13. Children's Data

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe we may have collected data from a child under 16, please contact us.

14. Cookies and Tracking

We use cookies and similar tracking technologies on our website. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by email or through a prominent notice on our website before the changes take effect. We encourage you to review this policy periodically.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: hello@productrise.app