Privacy Policy

This policy explains how PIMDeck ("we", "us") handles personal data when you visit pimdeck.com, use the PIMDeck app and API, or contact us. It applies to users worldwide. Where local law gives you additional rights, those rights apply too.

1. Our role

Controller. For account, billing, support, and website data, we decide how and why the data is used, so we are the controller.

Processor. For the business data you put into your workspace (products, inventory, orders, and any customer details in them), you are the controller and we process it only on your instructions to provide the service.

2. What we collect

Account data: name, work email, password (stored hashed by our authentication service), workspace name, and role. If you sign in with Google, we receive your name, email, and profile image from Google.

Business data: the product, inventory, and order data you enter, import, or pull from connected sales channels. This data belongs to you.

Channel credentials: access tokens for the sales channels you connect, stored encrypted and used only to sync with that channel.

Usage and device data: IP address, browser type, sign-ins, actions taken in the app (audit log), and error logs, used to run, secure, and improve the service.

Website data: pages visited and approximate location via Google Analytics (see Cookies below), and anything you send through our contact form.

3. How we use it, and our legal bases

To provide the service (accounts, syncing your catalog to the channels you connect, transactional emails such as invitations, password resets, and stock alerts): performance of our contract with you.

To secure and improve PIMDeck (fraud and abuse prevention, debugging, usage analytics): our legitimate interests.

To answer enquiries and send product updates you asked for: legitimate interests or your consent, which you can withdraw at any time.

To meet legal obligations (tax, accounting, lawful requests): legal obligation.

We do not sell personal data and do not share it for cross-context behavioral advertising.

4. Who we share it with

We use a small set of service providers (subprocessors) bound by contracts that limit their use of the data to the service they provide:

Amazon Web Services and Render: hosting, database, file storage, and background processing.
Zoho (ZeptoMail): sending transactional emails.
Google: website analytics (Google Analytics) and optional Google sign-in.
Web3Forms: delivering messages sent through our contact form.

Sales channels you connect (for example Shopify, Shopee, Lazada, TikTok Shop) receive the minimum data needed to keep your listings and stock in sync. Their own privacy policies govern what they do with it. We only share data with channels you explicitly connect.

We may also disclose data if required by law, to protect our rights or users' safety, or as part of a merger or acquisition, in which case this policy continues to apply.

5. International transfers

We and our providers operate in several countries, including the United States and the Philippines, so your data may be processed outside the country where you live. When we transfer personal data out of the EU/EEA, the UK, or Switzerland, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses (and the UK addendum), together with appropriate security measures.

6. Security

Data is isolated per workspace and encrypted in transit (TLS). Channel credentials and uploaded files are encrypted at rest. Access to production systems follows least privilege. No system is perfectly secure; if a breach affects your personal data, we will notify you and the relevant authorities as required by applicable law without undue delay.

7. Retention

We keep account data while your account is active. Records you delete stay recoverable for 30 days, then are permanently purged. When you close your account we delete or anonymise your data within 90 days, except what we must keep for legal, tax, or accounting reasons. Backups roll off on their normal schedule.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. We honor these requests for all users, wherever they are.

EU/EEA, UK, and Switzerland: you have the rights above under the GDPR, UK GDPR, and Swiss FADP, and you can complain to your local data protection authority.

United States (including California): you can request to know, access, correct, or delete personal data we hold about you, and you will not be discriminated against for doing so. We do not sell or "share" personal information as those terms are defined in state privacy laws, and we do not use sensitive personal information to infer characteristics.

Philippines: you have the rights of a data subject under the Data Privacy Act of 2012 (RA 10173), and you can complain to the National Privacy Commission.

Elsewhere (for example Canada, Australia, Singapore, Brazil): you have the rights your local law provides, and you can contact us to exercise them.

For business data inside a workspace, contact the workspace owner first, since they control it; we will help them respond. To exercise any right, emailhello@pimdeck.com. We reply within 30 days and may need to verify your identity. An authorized agent may make a request on your behalf.

9. Cookies

Essential cookies keep you signed in to the app. They are required for the service to work.

Analytics cookies: pimdeck.com uses Google Analytics, which sets cookies to count visits and see which pages are used. You can block them in your browser settings or with Google's opt-out add-on without affecting the app. We do not use advertising cookies.

10. Children

PIMDeck is a business tool and is not directed at children under 16. We do not knowingly collect their personal data; if you believe we have, contact us and we will delete it.

11. Changes to this policy

We may update this policy as PIMDeck evolves. We will change the date above and, for material changes, email registered users before they take effect.

12. Contact

Questions or requests about privacy: hello@pimdeck.com.