Privacy Policy

1. Introduction

CommerceSpy ("CommerceSpy", "we", "us", or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you access or use our website, platform, and related services (collectively, the "Service").

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

CommerceSpy is the data controller responsible for processing personal data under this Privacy Policy.

For privacy-related questions or requests, please contact us through our contact page or designated privacy contact details available on our website.

3. Personal Data We Collect

Account Information

When you create an account, we may collect:

• Name
• Email address
• Organization or company name (if provided)
• Authentication credentials
• Account preferences

Usage Information

When you use the Service, we may collect:

• URLs submitted for analysis
• Reports generated through the Service
• Search history
• Feature usage
• Timestamps and activity logs

Technical Information

We may automatically collect:

• IP address
• Browser type and version
• Device information
• Operating system
• Session identifiers
• Referral URLs
• Security and diagnostic information

Communications

If you contact us, we may collect:

• Contact details
• Support requests
• Feedback
• Communications exchanged with us

4. How We Use Personal Data

We use personal data to:

• Provide and operate the Service
• Authenticate users and manage accounts
• Generate ecommerce intelligence reports
• Deliver requested analyses and outputs
• Improve functionality and performance
• Detect abuse, fraud, and security threats
• Provide customer support
• Communicate service-related notices
• Comply with legal obligations
• Enforce our Terms of Service

5. Legal Bases for Processing (GDPR)

Where GDPR applies, we process personal data on one or more of the following legal bases:

Contract Performance

Processing necessary to provide the Service you requested, including:

• Account creation
• Authentication
• Report generation
• Customer support

Legitimate Interests

Processing necessary for our legitimate interests, including:

• Product improvement
• Security monitoring
• Abuse prevention
• Service analytics
• Business operations

Consent

Where required by law, we rely on consent for:

• Analytics cookies
• Marketing communications
• Optional tracking technologies

You may withdraw consent at any time.

Legal Obligations

Processing necessary to comply with applicable laws and regulations.

6. Artificial Intelligence Processing

CommerceSpy uses automated technologies, including artificial intelligence systems, to analyze publicly available information and generate insights.

These systems assist in producing reports and recommendations but are not intended to make legally significant decisions about individuals.

Users remain responsible for evaluating and validating outputs before relying on them.

7. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service.

Strictly Necessary Cookies

These cookies are required for:

• Authentication
• Session management
• Security functions
• Basic site functionality

Analytics Cookies

With your consent, we may use analytics technologies to:

• Understand product usage
• Improve features
• Measure performance

You may manage cookie preferences through our cookie banner or browser settings.

8. Sharing of Personal Data

We do not sell personal data.

We may share data with trusted service providers that help us operate the Service, including providers of:

• Cloud hosting
• Authentication services
• Analytics services
• Customer support tools
• Artificial intelligence infrastructure
• Security monitoring

These providers are contractually required to protect personal data and process it only on our instructions where applicable.

We may also disclose information when required by law or to protect legal rights.

9. International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA).

Where such transfers occur, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions
• Other lawful transfer mechanisms

10. Data Retention

We retain personal data only as long as necessary for the purposes described in this Privacy Policy.

Retention periods may vary depending on:

• Active account status
• Legal obligations
• Security requirements
• Dispute resolution needs

When data is no longer required, it is deleted, anonymized, or securely archived.

If you request account deletion, we will delete or anonymize personal data unless retention is required by law or legitimate business purposes.

11. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Delete personal data
• Restrict processing
• Object to processing
• Withdraw consent
• Request data portability
• Request human review where applicable under law

We will respond to valid requests within applicable legal timeframes.

12. Right to Lodge a Complaint

If you believe your personal data has been processed unlawfully, you may contact us directly.

You may also lodge a complaint with your local data protection authority or supervisory authority within the European Union.

13. Security

We implement technical and organizational measures designed to protect personal data, including:

• Encryption in transit
• Access controls
• Authentication safeguards
• Monitoring and logging
• Database security controls
• Role-based permissions

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Children's Privacy

The Service is not intended for individuals under the age of 18.

We do not knowingly collect personal data from children.

If we become aware that personal data from a child has been collected, we will take reasonable steps to delete it.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Material changes will be communicated through the Service or by other reasonable means.

Continued use of the Service after changes become effective constitutes acknowledgment of the updated Privacy Policy.

16. Contact

For privacy-related questions, requests, or complaints, please contact us through the contact page available on the CommerceSpy website.