Privacy Policy

1. Data we collect

• Account data: your name, email address, and password (passwords are stored only as secure, salted hashes, never in plain text).
• Store connection data: your WooCommerce store URL and API credentials, your AI provider and API key, store name, and output language. All credentials and API keys are encrypted at rest.
• Product content: product titles, descriptions, images, SKUs, categories, tags, attributes, and existing SEO fields that you send for optimization, together with the AI-generated proposals and version history we store so you can review, publish, and roll back changes.
• Billing data: subscription and payment information, processed by our payment provider. We do not receive or store full card numbers.
• Technical data: essential cookies for your login session and active profile, plus standard server logs (such as IP address and request metadata) used for security and reliability.

2. How we use your data

• To provide, operate, and maintain the Service.
• To generate AI optimization proposals from your product content.
• To process subscriptions and payments.
• To provide customer support and send service related messages.
• To secure the Service and prevent abuse.

We do not sell your personal data, and we do not use your product content to train any AI models.

3. Where your data is stored and service providers

Your account, store connection, and product data are stored in our own database on our own hosting infrastructure. We do not use a third-party database or backend provider for this data.

To deliver specific features, we rely on a small number of trusted third-party providers who process only the limited data needed for their function:

• An AI provider, used to generate the optimization proposals. The product content you choose to optimize is sent to this provider to produce the proposals. When you use the WooOptimize plugin with your own AI provider API key, that key is passed through our backend in memory only and is not stored on our servers.
• A payment provider, used to process subscriptions. We do not receive or store full card numbers.
• An email provider, used to deliver account and transactional emails.

Each provider acts under its own terms and security measures and receives only the data needed for its specific function. Some providers may process data outside the European Economic Area, in which case appropriate safeguards such as Standard Contractual Clauses apply. We can provide the current list of these providers on request.

4. Data retention

We keep your account and store data for as long as your account is active. Product content and proposals are retained so your version history and rollback remain available. You can delete individual data from within the app, and you can request deletion of your account and associated data at any time by contacting us.

5. Security

All connection credentials and API keys are encrypted at rest using authenticated encryption (AES-256-GCM), and all data in transit is protected with TLS. Access to production data is restricted to what is necessary to operate the Service.

6. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, to restrict or object to processing, and to withdraw consent. To exercise any of these rights, contact us at info@freddimedia.nl. You also have the right to lodge a complaint with your local data protection authority.

7. Cookies

We use only essential cookies that are required to keep you signed in and to remember your active store profile. We do not use advertising cookies.

8. Children

The Service is not intended for individuals under the age of 16, and we do not knowingly collect their data.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service.

10. Contact

For any questions about this Privacy Policy or your data, contact us at info@freddimedia.nl.