Privacy Policy

1) Summary

• We collect account, payment, and usage information to run the Service.
• We process your Customer Content as a service provider/processor and only as instructed by you.
• We do not sell or share personal information (as “sell”/“share” are defined under CPRA).
• We prohibit customers from selling or brokering the Service Data we provide.

2) Information we collect

• Account info: name, email, company, role, and preferences.
• Billing info: handled by our payment processor; we don’t store full card numbers.
• Service usage & device data: IP, device/browser, pages viewed, timestamps, diagnostics, logs.
• Customer Content: inputs you provide (e.g., brand lists, store targets) and resulting outputs.
• Cookies & similar tech: for authentication, security, analytics, and remembering settings.

3) How we use information

• Provide, maintain, and secure the Service.
• Generate dashboards, reports, and Service Data for your internal use.
• Prevent abuse, enforce limits, and ensure reliability.
• Communicate about updates, billing, and support.
• Improve the Service (including aggregate analytics and product research).
• Comply with law and legal process.

4) How we share information

We share with service providers (e.g., hosting, analytics, payment processing, support) under contracts that restrict use to providing services for us; with legal and safety recipients as required by law; and in business transfers under this Policy. We do not sell or share personal information. Customers may not sell, license, or broker Service Data except under a separate written Data License with us.

5) Your responsibilities

• Do not upload personal data you are not authorized to process.
• Obtain and honor required notices, consents, and opt‑outs from your end users.
• Respect any third‑party terms for sources you direct us to interact with.

6) Customer Content & roles under privacy laws

For Customer Content, we act as a service provider/processor to you (the business/controller). For website operations and account management, we act as a business/controller.

7) Data retention

• Account and billing records: retained as needed for service provision, audits, and legal obligations.
• Logs and telemetry: typically 6–24 months, unless needed longer for security/compliance.
• Customer Content: retained per your settings or as needed to provide the Service. We may retain de‑identified or aggregate information.

8) Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is 100% secure.

9) Your rights

Depending on where you live, you may have rights to access, correct, delete, receive a copy, or restrict/object to certain processing.

California residents (CPRA)

• No sale/share: we do not sell or share personal information.
• Rights to know/access, delete, correct, limit use of sensitive PI, and non‑discrimination.
• You may use an authorized agent. We will verify your request.
• Submit requests at info@instorecheck.com.

EEA/UK residents (GDPR)

• Legal bases include contract, legitimate interests, consent (where applicable), and legal obligations.
• Contact us to exercise rights to access, rectify, erase, port, restrict, or object. You may lodge a complaint with your local authority.

10) International transfers

If data is transferred internationally, we use appropriate safeguards where required.

11) Children’s privacy

The Service is not directed to children under 13 (or 16 where applicable). Do not use the Service if you are under the applicable age.

12) Cookies & analytics

We use strictly necessary cookies for login and security, and functional/analytics cookies to improve the Service. You can control cookies via your browser; some features may not function without them.

13) Do Not Track & opt‑outs

Browsers may send “Do Not Track” signals; we don’t respond to them. For marketing emails, use the unsubscribe link. We don’t serve interest‑based ads that would constitute “sharing” under CPRA.

14) Changes to this Policy

We may update this Policy. If changes are material, we’ll notify you (e.g., via the dashboard or email). Continued use after the effective date means you accept the update.

15) Contact

Questions or privacy requests: info@instorecheck.com