本页面仅提供英文版本，法律文件以英文版为准。
Privacy Policy
[LEGAL ENTITY NAME], [REGISTERED ADDRESS] ("omniSKU", "we") is the controller of the personal data described here. Contact: [CONTACT EMAIL].
What we collect
- Account data: your email address and a hashed password; when you confirmed your email; sign-in sessions (IP address and browser type).
- Your catalogue data: the product files, feeds and API submissions you send us, the fixes we make, and your channel settings. This is business data about products and normally contains no personal data. Please don't upload personal data.
- Billing data: credit purchases and balance. Card details are handled by Stripe and never reach us.
- Technical data: server logs (IP address, requests, errors) used to run and secure the service.
How we use it
- To provide the service: scan and fix your data, generate your feeds, run the API and AI-assistant (MCP) connections (legal basis: contract).
- To take payment and keep accounting records (contract, legal obligation).
- To email you about your account: confirmation, password resets, receipts, deletion notices. We don't send marketing email without asking.
- To keep the service secure and prevent abuse such as farming free credits (legitimate interests).
Who we share it with
We don't sell your data. We use these service providers (sub-processors):
- Anthropic (Claude): when AI fixes are on, the product fields needed for a fix (for example title, description, brand and category) are sent to Anthropic's API to generate suggestions. Under Anthropic's commercial terms this data isn't used to train its models.
- Stripe: payments and receipts.
- [HOSTING PROVIDER, REGION]: servers and database.
- [EMAIL PROVIDER]: sending our emails.
We may also disclose data if the law requires it. If we are bought or merge, your data may transfer to the new owner under this policy. [LAWYER: ADD INTERNATIONAL TRANSFER SAFEGUARDS (e.g. SCCs) IF APPLICABLE]
Cookies
We use one essential session cookie to keep you signed in. No advertising or analytics tracking. See the cookie notice.
How long we keep it
We keep your data while your account is open. When you delete your account (Settings → Delete account) your catalogues, products, API tokens and credit history are permanently deleted from our database; backups expire within [BACKUP RETENTION, e.g. 30 days]. Stripe keeps its own payment records as the law requires. Server logs are kept for [LOG RETENTION].
Your rights
Depending on where you live (including under the GDPR and UK GDPR) you can ask to access, correct, delete, restrict or move your data, and to object to certain processing. You can do the two most common ones yourself in Settings: Download my data (a JSON export) and Delete account. For anything else email [CONTACT EMAIL]. You can also complain to your data protection authority.
Security
Passwords are hashed, traffic uses HTTPS, API tokens are stored hashed, and access to production data is limited. No system is perfectly secure; tell us at [CONTACT EMAIL] if you find a problem.
Children
omniSKU is for businesses and isn't aimed at anyone under 16.
Changes
If we change this policy in a meaningful way we'll update the date above and notify you by email or in the app.