Privacy Policy

1. Who we are

The data controller is Product Enrichment LTD, a company registered in England and Wales, trading as ProductBox (company number ________). We process personal data in accordance with the UK GDPR and the Data Protection Act 2018.

• Registered office: — street address —, — city, postcode —, United Kingdom
• Email: support@productbox.net
• Phone: +44 __ ____ ____

2. What we collect

• Account data — your email address, password (stored as a salted hash) and account settings.
• Uploaded lists — the product files you upload, stored so your jobs can run and so you can re-export results.
• Billing data — credit purchases and usage on your account. Card payments are handled by our payment processor (Revolut); we never see or store card numbers.
• Usage data — standard server logs (IP address, timestamps, requests) kept for security and debugging.

3. How we use it

Solely to provide the Service: running your enrichment jobs, maintaining your product library, billing, support, and transactional email (verification, password reset, job completion). We do not sell, rent or share your lists or your personal data with third parties for marketing.

4. Where processing happens

Enrichment queries public product information (manufacturer pages, retailers, product databases). Product names from your list — never your identity, prices or internal codes beyond what is needed to match a product — are used in these lookups. Translation and text generation use third-party AI providers under data-processing terms that prohibit training on your data.

Some of our processors (hosting, AI and payment providers) operate outside the UK. Where personal data leaves the UK we rely on adequacy regulations or the UK International Data Transfer Agreement / Addendum with those providers.

5. Retention and deletion

• Uploaded files and job results are kept while your account is active so you can re-export at any time.
• You can delete individual product lists, or your whole account, at any time — email us and we remove your files, library and personal data within 30 days, except billing records we must keep for tax law.

6. Your rights

Under the UK GDPR you may request access, correction, export or deletion of your personal data, and you may object to or restrict processing. Write to support@productbox.net and we will respond within 30 days. You may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or, if you are in the EU, with your local supervisory authority.

7. Cookies

We use a single session cookie to keep you logged in. No advertising or cross-site tracking cookies are set.

8. Changes

If this policy changes materially we will notify you by email or in the app before the change takes effect.