Placeholder — not legal advice. Replace with counsel-reviewed text before launch.
A German version is needed before launch; counsel to confirm which language version prevails.
Privacy Policy
Last updated: [PLACEHOLDER: date]
In short: We collect what we need to run the marketplace: your account, your purchases, and what you type into Aisle Match. Match descriptions are sent to Anthropic (to rank products) and Voyage AI (to find similar products), kept for 90 days and then anonymised. Analytics only run if you agree. Payments are handled by Stripe on the seller's account. The database is hosted in the EU. You can export or delete your data at any time.
1. Who is responsible
Controller: [PLACEHOLDER: legal entity name], [PLACEHOLDER: address], [PLACEHOLDER: privacy email]. Data protection officer: [PLACEHOLDER: name and contact, or "not appointed" with the reason].
When you buy a product, the developer who sells it receives your order details and is a separate controller for them. Their privacy notice is linked on the product page.
2. What we process, why, and on which legal basis
| What | Why | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| Account data: email, name, handle, avatar, language, login provider ID (GitHub or Google) | To run your account and sign you in | Art. 6(1)(b) contract | Until you delete your account |
| Purchases: product, price, licence keys (hashed), downloads and activations, invoices | To deliver what you bought, handle refunds and prevent fraud | Art. 6(1)(b) contract; Art. 6(1)(c) legal obligation for tax records | [PLACEHOLDER: 7 years for tax-relevant records under § 132 BAO, confirm] |
| Aisle Match descriptions, clarifying answers, filters, picks and your feedback | To find matching products and improve Match | [PLACEHOLDER: Art. 6(1)(b) or (f), counsel to decide] | 90 days, then anonymised |
| Requests you post (the public "wanted" board) | To show your request and notify you when someone builds it | Art. 6(1)(b) contract | Until you delete it |
| Reviews and replies | To show verified reviews | Art. 6(1)(b) contract | Until you delete them or your account |
| Developer data: seller details, Stripe account ID, plan, revenue totals | To list and sell products, show DSA seller information, calculate fees | Art. 6(1)(b) contract; Art. 6(1)(c) DSA trader traceability | [PLACEHOLDER: period after account closure] |
Referral visits (?via= link, 30-day cookie) | To credit developers for buyers they send | [PLACEHOLDER: consent or legitimate interest, counsel to decide] | 30 days |
| Usage analytics (pages viewed, clicks) | To understand how Aisle is used | Art. 6(1)(a) consent | [PLACEHOLDER: retention in PostHog] |
| Error reports (browser, page, error details) | To find and fix bugs | Art. 6(1)(f) legitimate interest | [PLACEHOLDER: retention in Sentry] |
| Security logs, IP-based rate limits | To protect Aisle from abuse | Art. 6(1)(f) legitimate interest | [PLACEHOLDER: retention] |
| Emails (receipts, keys, notifications, newsletter) | To send transactional mail; newsletter only if you subscribe | Art. 6(1)(b) contract; Art. 6(1)(a) consent for the newsletter | [PLACEHOLDER: retention of send logs] |
3. Aisle Match and AI processing
In short: don't put personal data into Match; what you type goes to Anthropic and Voyage AI.
- What you type into Aisle Match is converted into a vector by Voyage AI (embeddings) and sent together with candidate listings to Anthropic (Claude) to rank products and write the short "why" for each pick.
- We send only your description, your answer to a clarifying question and filters, not your name or email. Please don't include personal or confidential information in your description.
- Identical descriptions may be answered from a 24-hour cache.
- Descriptions are stored with the results for 90 days, then anonymised. If you are signed in and save a result, it stays in your library until you delete it.
- Match is an aid for finding products; it doesn't make decisions with legal or similarly significant effects about you (Art. 22 GDPR).
- Developers use Anthropic for the listing assistant and Aisle uses it for automated code review of uploaded products; those flows contain listing and code data, not buyer data.
- [PLACEHOLDER: confirm each provider's data-use terms (no training on API data), retention and region, and record them here.]
4. Who receives your data
We use these service providers. Most act as processors on our behalf under a data processing agreement; Stripe acts partly as an independent controller.
| Provider | Purpose | Location / transfer safeguard |
|---|---|---|
| Supabase | Database, sign-in, file storage | EU region [PLACEHOLDER: region, e.g. Frankfurt] |
| Vercel | Website hosting | [PLACEHOLDER: region and safeguard, e.g. EU-US Data Privacy Framework or SCCs] |
| Stripe | Payments on the developer's Stripe account, Aisle's own billing, fraud prevention | [PLACEHOLDER: Stripe Payments Europe, Ltd. (Ireland) and safeguard for US transfers] |
| Anthropic | Aisle Match ranking, listing assistant, code review | USA [PLACEHOLDER: safeguard] |
| Voyage AI | Embeddings for Aisle Match and search | USA [PLACEHOLDER: safeguard] |
| PostHog | Product analytics (only with consent) and feature flags | EU (eu.i.posthog.com) [PLACEHOLDER: confirm] |
| Sentry | Error monitoring | [PLACEHOLDER: region and safeguard] |
| Resend | Sending email | [PLACEHOLDER: region and safeguard] |
| Upstash | Rate limiting and caching | [PLACEHOLDER: region] |
| Inngest | Background jobs (emails, scans, payments processing) | [PLACEHOLDER: region and safeguard] |
| Railway | Security scanner for uploaded products (developer files only) | [PLACEHOLDER: region and safeguard] |
| Developers you buy from | Fulfilling your purchase (order details, email, country) | Varies; see the product page |
We don't sell your data. Authorities receive data only where the law requires it.
5. Transfers outside the EU
Some providers above are based in the USA. Transfers rely on [PLACEHOLDER: EU-US Data Privacy Framework certification and/or Standard Contractual Clauses; verify per provider].
6. Cookies and similar technologies
- Necessary: sign-in session, security, language preference. No consent needed.
- Referral cookie: remembers which developer link brought you here, for 30 days. [PLACEHOLDER: counsel to decide whether this requires consent under § 165(3) TKG 2021.]
- Analytics (PostHog): only after you agree in the cookie banner. You can withdraw consent at any time in [PLACEHOLDER: link to cookie settings].
- [PLACEHOLDER: full cookie list with names and lifetimes.]
7. Your rights
You can ask for access, correction, deletion, restriction, data portability, and object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. Export and deletion are self-service in your account settings; for everything else write to [PLACEHOLDER: privacy email].
You can complain to a supervisory authority; in Austria that is the Datenschutzbehörde (dsb.gv.at).
8. Developers' customers
If you are a developer: buyer data you receive through Aisle is yours to process as an independent controller. If you use the Aisle SDK for licence validation, [PLACEHOLDER: describe the data the SDK sends and the processing agreement].
9. Security
Licence keys and API keys are stored only as keyed hashes, never in plain text. Downloads use short-lived signed links. [PLACEHOLDER: summary of further technical and organisational measures.]
10. Changes
We'll announce material changes to this policy by email or in the app before they take effect.