Privacy Policy

Introduction

Welcome to AutoProductAI ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered product content generation platform and related services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

Information We Collect

Information You Provide

• Account Information: Email address, name, password (encrypted), and profile details when you create an account.
• Payment Information: Billing address and payment method details. Payment processing is handled by third-party payment processors (e.g., Stripe). We do not store complete credit card numbers.
• Product Data: Product information, descriptions, images, SKUs, barcodes, and other content you input for processing.
• Uploaded Files: Images, documents, and other files you upload to the Service. These are stored securely in cloud storage within your plan's storage limit and are associated with your account.
• Communications: Information you provide when contacting our support team or participating in surveys.

Information Collected Automatically

• Usage Data: Information about how you use our Service, including features accessed, actions taken, and time spent.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Cookies and Local Storage: We use cookies and browser local storage to enhance your experience. See our Cookie Policy for full details on all cookies, local storage keys, and third-party tracking technologies we use.
• Log Data: Server logs that record requests made to our Service, including timestamps and referring pages.

Information from Third Parties

• Authentication Providers: If you sign in using Google or other OAuth providers, we receive basic profile information.
• Analytics Services: We use Google Analytics to understand Service usage patterns.

How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our AI-powered product content generation services.
• Account Management: To create and manage your account, process transactions, and provide customer support.
• AI Processing: To process your product data through our AI systems and third-party AI service providers to generate content.
• Storage Management: To store and manage your uploaded files within your plan's storage allocation, and to enforce storage limits based on your subscription plan.
• Communication: To send service-related notifications, updates, security alerts, and promotional materials (with your consent).
• Analytics: To analyze usage patterns, improve our Service, and develop new features.
• Security: To detect, prevent, and address technical issues, fraud, and security threats.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the Service you have requested (account management, service delivery, support).
• Legitimate Interests: Processing for our legitimate business interests, such as improving our Service, fraud prevention, and security, balanced against your rights and interests.
• Consent: Where you have given consent for specific processing activities, such as marketing communications or certain cookies.
• Legal Obligation: Processing necessary to comply with legal requirements, such as tax and accounting obligations.

Data Sharing and Disclosure

We may share your information with:

• AI Service Providers: Third-party AI providers for content generation. Your product data is processed by these services according to their respective privacy policies and data processing agreements.
• Payment Processors: Stripe for secure payment processing.
• Cloud Infrastructure: Third-party cloud providers for hosting, data storage, and file storage.
• CDN and Security: Cloudflare for content delivery, DDoS protection, and security optimization. Cloudflare processes your requests and may set its own cookies (see our Cookie Policy).
• Analytics Providers: Google Analytics for usage analysis (consent-gated).
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

Team Collaboration

If you use our team collaboration features (available on certain plans), the following applies:

• Team Admin Visibility: Team administrators can view team member activity, including credit usage, products created, and usage statistics.
• Shared Resources: Products and content created within a team workspace may be visible to other team members, depending on the team's configuration.
• Invitation Data: When you are invited to a team, the inviting admin can see your name and email address.
• Credit Allocation: Team credits are shared across the team account. Individual usage is tracked and visible to team administrators.

You can leave a team at any time. Upon leaving, your access to shared team resources will be revoked.

WordPress Plugin

Our WordPress plugin (“AutoProductAI for WooCommerce”) communicates with our servers via API to provide its features. When installed and active, the plugin processes the following data:

• Product Data: Product titles, descriptions, SKUs, URLs, and images you submit are sent to our API for processing (content generation, SKU lookup, URL import, AI Product Scout).
• Site Information: Your site URL, site name, WordPress version, WooCommerce version, PHP version, and plugin version are transmitted periodically for compatibility tracking and update checks.
• API Key: Your API key is stored securely in your WordPress database and used to authenticate requests to our server. The key is never exposed to the browser.
• Language Detection: The plugin contacts third-party geolocation services to auto-detect your preferred language based on your IP address. Only the country code is retrieved and used locally.
• Flag Images: Country flag images are loaded from a third-party CDN for the language selector interface.
• Image Storage: Product images (generated, scraped, or uploaded) are stored securely in cloud storage under your account, subject to your plan's storage limit. No images from external websites are stored without being re-hosted on our infrastructure.

Cookies, Local Storage, and Tracking Technologies

We use cookies and browser local storage to operate and improve our Service:

For a complete list of all cookies, local storage keys, and third-party tracking technologies we use, including names, purposes, and durations, please see our Cookie Policy.

File Storage and Limits

When you upload files or generate images through our Service, they are stored securely in cloud storage, associated with your account:

• Storage Limits: Each subscription plan includes a specific storage allocation. When your storage limit is reached, new file uploads and image generation will be restricted until you free up space or upgrade your plan.
• What Counts: All files uploaded or generated through the Service count toward your storage limit, including product images, AI-generated images, profile avatars, and document uploads.
• Background Jobs: If a storage limit is reached during a background operation (e.g., batch processing), the product data will still be saved but image storage may be skipped.
• Storage Monitoring: You can view your current storage usage and limit in your account dashboard under Usage Statistics.
• Account Deletion: When you delete your account, all associated files will be permanently deleted from our cloud storage within 30 days.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure password hashing using bcrypt
• Access controls and authentication mechanisms
• Regular security assessments and monitoring
• Secure cloud infrastructure hosted in the European Union
• Cloudflare DDoS protection and web application firewall
• Employee access controls and training

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your personal information for specific periods depending on the type of data:

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes as described above.

Your Rights (GDPR - European Residents)

If you are located in the European Economic Area (EEA), you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: Request limitation of processing in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for marketing purposes.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at the email address below. We will respond within 30 days. There is no fee for exercising these rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

Your Rights (CCPA - California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purpose, and the categories of third parties with whom we share your information.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. However, you have the right to opt out if we ever change this practice.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email address, IP address)
• Commercial information (transaction history, products purchased)
• Internet activity (browsing history on our Service, search queries)
• Geolocation data (approximate location based on IP address)

To exercise your CCPA rights, you may submit a verifiable consumer request by emailing us at [email protected]. We will verify your identity and respond within 45 days.

International Data Transfers

Your information may be transferred to and processed in countries outside the EEA, including the United States (where our AI providers are located). We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with third-party providers
• Compliance with applicable data protection frameworks

Children's Privacy

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and sending you an email notification where appropriate. We encourage you to review this policy periodically.