Legal
Privacy policy
Last updated: October 2, 2026
This policy explains what Produkto collects when you visit getprodukto.com, book a demo or use the Produkto app at app.getprodukto.com, why we collect it, and what you can ask us to do with it.
Who we are
Produkto is run by Kelian van Tulder, based in Madrid, Spain. Kelian is the data controller for the personal data described here. Questions about privacy go to kelian@getprodukto.com.
What we collect
- When you book a demo: your name, email address and anything you write in the booking form. Bookings run through Calendly.
- When you send us a note or email: your name, email address and the message.
- When you use the app: your account email, your brand name, your store URL, and the brand details you confirm during setup.
- When you pay: payments are handled by Stripe. We see your name, email, billing country and the last four digits of your card. We never see or store your full card number.
- Technical data: like any website, our hosting providers receive your IP address and browser details when you load a page, and keep short-lived server logs.
What we don't collect
The website uses no advertising or analytics trackers and sets no marketing cookies. The app uses a login cookie so you stay signed in, and nothing else.
Produkto never asks for access to your store's admin, orders or customers. To measure your catalog, it reads the product information your store already publishes, such as product names, descriptions and prices.
Why we use it
- To run your demo and reply to you. Legal basis: our legitimate interest in answering people who contact us.
- To provide the app you signed up for, including scans and your dashboard. Legal basis: our contract with you.
- To bill you and keep the records tax law requires. Legal basis: contract and legal obligation.
- To keep the service secure and working. Legal basis: legitimate interest.
We don't sell your data, and we don't use it for advertising.
Who processes it for us
We use a small number of service providers, each only for the job listed:
- Netlify hosts the website.
- Hetzner hosts the app and its database, on servers in Germany.
- Calendly handles demo bookings.
- Stripe handles payments.
- Google Workspace handles our email. Google Fonts serves the website's typeface.
- OpenAI and Apify are used to generate buyer questions and to collect AI answers during scans. What we send them is product information and questions about it, not your personal details.
Some of these providers are based in the United States. Where data leaves the European Economic Area, it is covered by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it
- Demo and contact details: up to 24 months after our last conversation, unless you become a customer or ask us to delete them sooner.
- Account and scan data: for as long as your account is open, and deleted within 30 days of closing it. Backups roll off within a further 14 days.
- Billing records: as long as Spanish tax law requires, currently up to 6 years.
Your rights
You can ask us to show you the personal data we hold about you, correct it, delete it, export it, or stop or limit how we use it. You can also object to any use based on legitimate interest. Email kelian@getprodukto.com and we'll reply within 30 days.
If you're in California, you have similar rights under the CCPA, including the right to know and delete what we hold. We don't sell or share personal information as the CCPA defines those terms.
If you think we've handled your data badly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, or the authority where you live.
Security
The site and app are served over HTTPS. Each customer's account only shows its own store's data. Access to the servers is limited to Kelian and protected by key-based login.
Children
Produkto is a business tool and isn't meant for anyone under 16. We don't knowingly collect their data.
Changes
If we change this policy, we'll update the date at the top. If a change affects how we use data you've already given us, we'll email customers before it takes effect.