Privacy Policy

Account Information:

• Email address and password (encrypted)
• Account creation timestamp and IP address
• Subscription tier and payment status
• Usage statistics and generation counts

Product Information You Provide:

• Product names, descriptions, and features you input
• Selected categories, tones, and target audiences
• Keywords and custom specifications
• Generated product descriptions you save

Technical Information:

• IP address, browser type, and device information
• Session data and authentication tokens
• Usage patterns and feature interactions
• Error logs and performance metrics

Enhanced Tracking (With Your Consent):

• Browser fingerprinting data for abuse prevention (screen resolution, timezone, installed fonts, hardware information)
• Cross-session identification to prevent limit bypassing
• Anonymous device characteristics (cannot identify you personally)
• Automatically deleted after 30 days for privacy compliance

Payment Information:

• Payment method details (processed by Stripe)
• Billing address and tax information
• Transaction history and subscription changes
• Refund and cancellation records

Types of Cookies & Tracking We Use:

• Essential Cookies: Required for authentication, session management, and core functionality
• Analytics Cookies: Help us understand how users interact with our service (Vercel Analytics)
• Payment Cookies: Enable secure payment processing through Stripe
• Preference Cookies: Remember your settings like dark/light mode preferences
• Guest Tracking: Multiple storage methods (cookies, localStorage, sessionStorage) to prevent abuse of free services
• Browser Fingerprinting: Optional advanced tracking with explicit consent for enhanced abuse prevention

Browser Fingerprinting Details:

Managing Cookies:

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of our service, particularly authentication and payment features.

Service Provision:

• Generate AI-powered product descriptions
• Provide SEO optimization suggestions
• Track usage limits and subscription features
• Save and organize your generated content

Account Management:

• Authenticate and secure your account
• Process payments and manage subscriptions
• Provide customer support and technical assistance
• Send important account and service notifications

Service Improvement:

• Analyze usage patterns to improve our AI prompts
• Monitor system performance and reliability
• Develop new features and enhancements
• Ensure compliance with our Terms of Service

Essential Service Providers:

Legal Requirements:

We may disclose information when required by law, court order, or to protect our rights, property, or safety of our users.

Data Breach Response:

In the unlikely event of a data breach, we will notify affected users within 72 hours and take immediate steps to secure the system and investigate the incident.

You have the right to:

• Access: Request a copy of all personal data we hold about you
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your personal data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Revoke consent for data processing at any time

How to Exercise Your Rights:

To exercise any of these rights, please contact us at privacy@productdescai.com. We will respond to your request within 30 days.

Retention Periods:

• Account Data: Retained while your account is active, plus 3 years after deletion
• Generated Content: Retained while your account is active, deleted upon account closure
• Payment Data: Retained for 7 years for tax and accounting purposes
• Usage Logs: Retained for 2 years for service improvement and security
• Support Communications: Retained for 3 years after resolution

Automated Deletion:

We automatically delete temporary data (AI processing requests, session tokens) within 24 hours. Inactive accounts are reminded and may be deleted after 2 years of inactivity.

Data Processing Locations:

• Primary data processing occurs in the United States
• Supabase data centers are located in the US with GDPR compliance
• Anthropic AI processing occurs in the US with appropriate safeguards
• Stripe payment processing follows international data protection standards

Safeguards:

All international transfers are protected by appropriate safeguards including encryption, standard contractual clauses, and adequacy decisions where applicable.

Notification of Changes:

• We will notify users via email of any material changes to this Privacy Policy
• Updates will be posted on this page with a new "Last Updated" date
• Continued use of our service after updates constitutes acceptance
• For significant changes, we may require explicit re-consent