Privacy Policy

Your name and email address, and the session that keeps you signed in. The products, images, and campaigns you make here. What comes in from the shops, marketplaces, and channels you connect. And a record of your browser or app talking to our servers.

We run your workspace with it, keep it secure, bill your plan, and email you about the service.

If you said yes to cookies when you arrived, we tell Meta and X when you sign up or start a paid plan, so we can see which campaigns work. We do not send your email address itself. It is turned into a one-way code first, which they can only use to check against people they already know. They also get your IP address, your browser, and the campaign you came from. Say no and we send nothing.

We never sell your data, hand it to data brokers, or use it to train AI models. Your catalog and your customers are your business, not a second source of income for us.

Most of our cookies only keep the service working, and blocking them may break parts of it. One is not necessary, so we ask first and never set it if you say no.

You connect a shop, a marketplace, or a channel yourself, and you can disconnect it whenever you want. We ask each platform only for what the feature you switched on needs.

Depending on the connection, that can mean reading your products, stock, and prices, reading and updating your orders, publishing on your behalf, reading and replying to comments, reading how your posts and ads performed, and managing ad campaigns.

We store that access encrypted, use it only for what you turned on, and delete it when you disconnect. Where a platform lets us hand it back, we do.

Signing in tells us your name, email address, and profile picture. The address is how you sign in and where we email you about the service. Your name and picture are what the others in your workspace see.

We store that data encrypted and do not share it with anyone.

We ask for Merchant Center access only when you set up a Google channel or import a feed. With it we list the accounts you can pick from, read the feeds in the one you pick, and publish the feed we keep up to date for you, refreshed daily and removed when you unpublish. Importing a feed copies its products into your project. We do not touch your orders, your Google Ads campaigns, or any account you did not pick.

We store that access encrypted, do not share it with anyone, and hand it back to Google when you disconnect. You can also withdraw it yourself in your Google account settings.

We never sell Google data, pass it on for advertising, or train AI models on it. ProductByte's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your data passes through the companies that help us run ProductByte. We also share it where the law requires.

Which ones depends on the features you use: Cloudflare, Stripe, OpenAI, Replicate, and FAL, plus the integrations you switch on yourself, such as signing in with Google or Apple and connections like Google Merchant Center, WooCommerce, Shopify, Bol, Meta, TikTok, X, Bluesky, and Spotler.

Some of those companies sit outside Europe, mostly in the United States. Your data travels there under the safeguards European law requires, such as an adequacy decision or Standard Contractual Clauses.

Account and billing records for as long as Dutch law requires, everything else until you delete it. Delete your account and you have 30 days to change your mind, or ask us and we erase it sooner.

Your connection to ProductByte is encrypted, and so is everything we store. The credentials connecting ProductByte to your shops and channels are encrypted again on top of that, and never appear in the app or our logs.

See what we hold, correct it, delete it, take it elsewhere, or tell us to stop using it in a particular way.

Export it yourself under Account, Privacy, Data export, and we email you the file. For anything else write to info@productbyte.com.

Email info@productbyte.com and we will look into it. You can also complain to your national privacy regulator, which in the Netherlands is the Autoriteit Persoonsgegevens.

ProductByte is responsible for the data described here and follows the EU GDPR and Dutch privacy law. Molenmaker 33, 2761ME Zevenhuizen, Netherlands. KvK 98942719. BTW NL003112540B37. Email us at info@productbyte.com.

ProductByte is built for businesses. It is not aimed at children.

We can use your data because we cannot give you the service without it (Article 6(1)(b)). Otherwise it is a legal obligation (Article 6(1)(c)), an interest of ours that does not override yours, such as security and fraud prevention (Article 6(1)(f)), or your consent, which you can withdraw at any time (Article 6(1)(a)).