Privacy Policy

1. What we collect

• Account data — your email address and password (stored as a secure hash by our authentication provider), and your subscription tier.
• Product research data — products you swipe, save, and generate (ad scripts, competitor analyses, store blueprints, trend reports, videos), plus any images you upload.
• Usage data — counts of AI generations you run, used to enforce fair-use limits.
• Billing data — handled by Stripe. We never see or store your card number; we store only your Stripe customer reference and subscription status.
• Integration credentials — if you connect a Shopify store, we store the store domain and the access token you provide, solely to push products you ask us to push.

2. How we use it

• To provide the Service: your saved products and generated research exist so you can use them.
• To process payments and manage subscriptions through Stripe.
• To enforce plan limits and prevent abuse of AI features.
• To fix problems — server logs may include technical events tied to your account.

We do not sell your personal data. We do not use your data for third-party advertising.

3. Who processes your data

We rely on a small set of processors to run the Service:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Stripe — payments and subscription billing.
• Anthropic — AI text generation (product research, scripts, analyses). Prompts contain product research context, not your personal details.
• Higgsfield — AI video and image generation when you use the video generator.
• Shopify — only if you connect your own store.

4. Cookies

We use only the cookies required to keep you signed in (authentication session cookies). We do not run third-party advertising or tracking cookies.

5. Retention and deletion

Your data is kept while your account exists. You can delete saved products, generated content, and integrations at any time from within the Service. To delete your account and all associated data, contact us (section 8) and we will remove it within 30 days, except where billing records must be retained for tax and accounting law.

6. Your rights

Depending on where you live (including under the Australian Privacy Act and the GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Contact us and we will honour verified requests.

7. Security

Data is encrypted in transit (TLS) and at rest by our providers. Access to production systems is restricted. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.

8. Contact & changes

Questions or requests: email support@productdeck.app. We may update this policy as the Service evolves; material changes will be flagged on this page with a new "last updated" date.