Privacy policy

1. Controller

Pricebreeze, Krinis, Nikaia 184 54, Greece.

Contact for privacy matters: the email address on the Contact page.

2. What we process

Account data: email address, password hash (managed by our authentication provider), workspace name and role.

Store connection data: your WooCommerce store URL and API keys. Keys are encrypted at the application level on top of database encryption and are used only to read and write products.

Price list data: the files you upload and the rows extracted from them, including product names, codes and wholesale prices. These are commercially sensitive and are private to your workspace.

Usage and technical data: import history, audit log of changes, error reports (with sensitive values removed), cookieless traffic measurement, and, only if you consent, Google Analytics on the public pages of the site.

3. Why and on what basis

To provide the service you signed up for (performance of a contract), to keep the service secure (legitimate interest), to meet accounting and tax obligations (legal obligation), and, with your consent where required, to send product notifications you can switch off at any time. We do not send marketing notifications inside the app.

4. Where your data is

Database, file storage and processing run in data centres in the European Union. Our processors include our hosting, database and storage providers, our error monitoring provider (EU region), our AI provider for reading price lists, and Paddle.com Market Ltd, our merchant of record for payments. Price list content is sent to the AI provider only for extraction and is treated as data, never as instructions.

5. Retention

Original files and undo sets are kept for 12 months. Account data is kept for as long as you have an account. After cancellation the workspace is read-only for six months and then deleted. You can request full deletion at any time from Settings; it runs within seven days.

6. Your rights

You have the right to access, correct, export and delete your data, to restrict or object to processing, and to lodge a complaint with the Hellenic Data Protection Authority. Write to us and we respond within 30 days.

7. Cookies

Strictly necessary cookies keep you signed in, keep the service secure and remember your language. Analytics cookies load only if you accept them on the banner, only on the public pages of the site, and never inside the application. The full list, with retention periods, is on the Cookie policy page, where you can also change or withdraw your choice at any time.