Privacy Policy

This Privacy Notice for ProductEcommerce ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at productecommerce.com or any website of ours that links to this Privacy Notice, or engage with us in other related ways, including any marketing or events.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@productecommerce.com.

Summary of key points

This summary provides key points from our Privacy Notice — you can find more detail on any topic in the numbered sections below.

• What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the products and features you use.
• Do we process any sensitive personal information? We do not process sensitive personal information (e.g., racial or ethnic origin, sexual orientation, religious beliefs).
• Do we collect any information from third parties? We do not collect any information from third parties.
• How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent, and only when we have a valid legal reason to do so.
• In what situations and with which parties do we share personal information? We may share information in specific situations and with specific categories of third parties, described below.
• How do we keep your information safe? We have organizational and technical processes in place to protect your personal information, though no method of transmission or storage can be guaranteed 100% secure.
• What are your rights? Depending on where you are located geographically, applicable privacy law may give you certain rights regarding your personal information.
• How do you exercise your rights? The easiest way is by submitting a data subject access request, or by contacting us directly.

1. What information do we collect?

Personal information you disclose to us. We collect personal information that you voluntarily provide to us when you express interest in our Services, participate in activities on the Services, or otherwise contact us. This may include your email address. We do not process sensitive information. All personal information you provide must be true, complete, and accurate.

Information automatically collected. Some information — such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and general location — is collected automatically when you visit our Services. This is primarily needed to maintain security and operation of the Services and for internal analytics and reporting. We also collect information through cookies and similar technologies — see our Cookie Policy for details. This information does not reveal your specific identity.

2. How do we process your information?

We process your personal information to: deliver and facilitate our Services; respond to your inquiries and support requests; send administrative information such as changes to our terms or policies; identify usage trends so we can improve our Services; and, where necessary, to protect an individual's vital interests. We may also process your information for other purposes only with your prior explicit consent.

3. What legal bases do we rely on to process your information?

If you are located in the EU or UK, the GDPR and UK GDPR require us to explain our legal bases, which may include: your consent (which you can withdraw at any time); performance of a contract; our legitimate interests (for example, analyzing how our Services are used so we can improve them); legal obligations; and vital interests.

If you are located in Canada, we may process your information with your express or implied consent, which you can withdraw at any time, or in certain narrow cases permitted by law without consent (e.g., fraud prevention, legal proceedings, or where information is publicly available).

4. When and with whom do we share your personal information?

We may share your data with third-party vendors, consultants, and service providers who perform work on our behalf and require access to do so, including data analytics services. We have contracts in place with our third parties designed to safeguard your personal information — they may not use it beyond our instructions or share it further. We may also share or transfer information in connection with a merger, acquisition, or sale of company assets.

5. Do we use cookies and other tracking technologies?

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services, including for security, crash prevention, and remembering your preferences. Specific information about how we use these technologies, and how you can control them, is in our Cookie Policy.

Google Analytics. We may share your information with Google Analytics to track and analyze use of the Services (only after you accept cookies via our consent banner). To opt out of Google Analytics tracking across sites, visit tools.google.com/dlpage/gaoptout. For more on Google's privacy practices, see the Google Privacy & Terms page.

6. Do we offer artificial intelligence-based products?

As part of our Services, we offer a tool — the AI-Guided Scope Builder — powered by artificial intelligence (specifically, AI document generation) to help you draft a project scope document. All personal information processed using this tool is handled in line with this Privacy Notice and our agreement with the underlying AI provider (Anthropic), which safeguards your information throughout the process.

7. Is your information transferred internationally?

Our servers are located in the United States. Regardless of your location, your information may be transferred to, stored, and processed in the United States and other countries, including by the third parties we share your information with.

If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, these countries may not have data protection laws as comprehensive as your own — however, we take measures to protect your personal information in accordance with this Privacy Notice and applicable law, including by relying on the European Commission's Standard Contractual Clauses for transfers between us and our third-party providers. Details can be provided upon request.

8. How long do we keep your information?

We keep your personal information only for as long as necessary for the purposes set out in this Privacy Notice, unless a longer period is required by law. When we no longer have an ongoing legitimate business need to process it, we delete or anonymize it, or securely isolate it until deletion is possible.

9. How do we keep your information safe?

We have implemented appropriate technical and organizational security measures designed to protect your personal information. However, no transmission over the internet or storage method can be guaranteed 100% secure, so we cannot promise that unauthorized third parties will never be able to defeat our security measures.

10. Do we collect information from minors?

We do not knowingly collect, solicit, or market to children under 18 years of age (or the equivalent age in your jurisdiction). If we learn we have collected such data, we will deactivate the account and delete the data. Contact us at privacy@productecommerce.com if you become aware of any such data.

11. What are your privacy rights?

Depending on your region (including the EEA, UK, Switzerland, and Canada), you may have the right to request access to, rectification or erasure of, or restriction on the processing of your personal information; the right to data portability; and the right to object to certain processing, including automated decision-making. You can exercise these rights by contacting us using the details in "How can you contact us" below, or by submitting a data subject access request.

UK residents: if you are unhappy with how we've handled your personal information, you can complain to us directly, or to the Information Commissioner's Office (ICO) — ico.org.uk/make-a-complaint, helpline 0303 123 1113, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Withdrawing consent: where we rely on your consent, you may withdraw it at any time by contacting us — this will not affect the lawfulness of processing carried out before withdrawal.

12. Controls for Do-Not-Track features

No uniform technology standard for recognizing and implementing Do-Not-Track ("DNT") signals has been finalized. We do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will update this Privacy Notice accordingly.

13. Do United States residents have specific privacy rights?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to withdraw consent to its processing. These rights may be limited in some circumstances by applicable law.

In the preceding twelve (12) months, the categories of personal information we have collected are:

We have not collected California Customer Records information, protected classification characteristics, commercial information, biometric information, geolocation data, audio/visual information, professional/employment information, education information, inferences, or other sensitive personal information. We retain Identifiers and Internet/network activity data for 1 year. We do not sell or share personal information for cross-context behavioral advertising.

You can opt out of the sale, sharing, or targeted advertising use of your personal information (to the extent applicable) by disabling non-essential cookies in the Cookie Preference settings, or by contacting us at privacy@productecommerce.com. You may also designate an authorized agent to submit a request on your behalf, and California residents may request details about disclosures for direct marketing purposes once a year under the "Shine the Light" law by writing to us.

14. Do we make updates to this notice?

Yes — we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by a revised "Last updated" date at the top of this page. We encourage you to review this Privacy Notice periodically.

15. How can you contact us about this notice?

If you have questions or comments about this notice, you may contact our Data Protection Officer by email at privacy@productecommerce.com, or by submitting a data subject access request.

16. How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country or state of residence, you may have the right to request access to, correction of, or deletion of the personal information we collect from you, and to withdraw your consent to its processing. To make such a request, please submit a data subject access request.