Privacy Policy

1. Introduction

PerfSell("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketplace analytics platform.

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data We Collect

2.1 Account Information

• Email address
• Name (optional)
• Company name (optional)
• Profile picture (optional)

2.2 Marketplace and Sales Channel Data

When you connect your marketplace or sales channel accounts (such as Amazon, Mirakl-powered marketplaces, Cdiscount, ManoMano, Veepee, Groupon or Shopify), we import and store:

• Order information (order IDs, amounts, dates, status, taxes, fees, refunds)
• End-customer information from orders where the platform provides it and where it is needed for order management: name, email address, phone number, city, postal code and country. This includes our Shopify integration, which retrieves Shopify protected customer data with the merchant's authorisation. We do not store street addresses, and we do not store any end-customer identifier beyond what the platform returns on the order itself.
• You can delete every piece of data we imported from a connected sales channel at any time, from the app, in one click. For Shopify we also honour Shopify's own erasure requests: a customer redaction request erases that customer's personal data from your orders, and a shop redaction request erases your store's data entirely.
• Product catalog data (SKUs, barcodes, titles, prices, stock levels, unit costs)
• API credentials and access tokens (encrypted and stored securely)

2.3 Usage Data

• Log data (IP addresses, browser type, pages visited)
• Analytics data (feature usage, performance metrics)

3. How We Use Your Data

We use your data to:

• Provide and maintain our analytics services
• Generate reports and insights about your marketplace performance
• Send you service-related communications
• Improve our platform and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract: Processing necessary to provide our services to you
• Legitimate Interest: To improve our services and ensure security
• Consent: For marketing communications (which you can withdraw anytime)
• Legal Obligation: To comply with applicable laws

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Hosting (Vercel), database (Supabase), payments (Stripe), email (Resend)
• Legal requirements: When required by law or to protect our rights
• Business transfers: In case of merger, acquisition, or sale of assets

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 30 days for backup purposes, and anonymized/aggregated data may be retained indefinitely for analytics.

7. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("Right to be Forgotten")
• Restriction: Request limitation of processing
• Portability: Receive your data in a structured format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, use the account settings in the app or contact us at privacy@perfsell.com.

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for sensitive data
• Access controls and authentication
• Regular security audits
• Multi-tenant data isolation

9. International Data Transfers

Your data may be transferred to and processed in countries outside the EEA. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

10. Cookies

We use essential cookies for authentication and security. Analytics cookies may be used with your consent to improve our services.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the platform. Your continued use after such changes constitutes acceptance of the updated policy.

12. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority (e.g., CNIL in France).