Privacy Policy
Effective date: 24 April 2026
1. Who we are
The data controller for pricelysis.com is Pricelysis, a brand-protection platform operated from the United Kingdom. For any privacy-related question, correction, deletion request, or data subject access request, email privacy@pricelysis.com. Full corporate contact details are available on request.
2. What we collect and why
-
Audit requests (
/audit): brand name, brand domain, ASINs, keywords, your name, company, and contact email. Used to run the scan and email you the resulting PDF. -
Contact enquiries (
/contact): name, email, company, and message. Used to reply to you. - Account data: email, hashed password, and session data for authenticated users.
- Server logs: IP address, request path, user agent, timestamps. Used for security, abuse prevention, and debugging.
3. Lawful basis
- Legitimate interest — audit and contact form processing; server logs for security.
- Contract — delivering paid services to account holders.
- Consent — non-essential cookies (live chat) and any future marketing email.
4. How long we keep data
Audit submissions: 12 months after delivery, unless you ask us to delete sooner. Contact enquiries: kept while the conversation is active, then deleted on request or after 24 months of inactivity. Account data: kept while your account is active; deleted within 30 days of account closure.
5. Who processes your data on our behalf
| Subprocessor | Purpose | Region |
|---|---|---|
| Fly.io | Application hosting + managed Postgres | US / EU (region-specific) |
| Resend | Transactional email delivery | US |
| Plausible Analytics | Aggregate, cookieless analytics | EU (Germany) |
| Crisp (consent-gated) | Live chat widget, only if you accept cookies | EU (France) |
| Stripe | Payment processing for paid plans | US / EU |
6. International transfers
Some subprocessors are outside the UK. Transfers to the US rely on the UK IDTA / EU adequacy frameworks together with each vendor's standard contractual clauses.
7. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you (Art. 15)
- Correct inaccurate data (Art. 16)
- Have your data erased (Art. 17)
- Restrict processing (Art. 18)
- Receive your data in a portable format (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
Exercise any of these rights by emailing privacy@pricelysis.com. We will respond within one month.
8. Complaints
You can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you think we have handled your data unlawfully. We'd appreciate hearing from you first so we can try to put it right.
9. Cookies
See the Cookies Policy for the full list. In short: strictly necessary cookies only, unless you opt in to the live chat widget.
10. Changes to this policy
We will update this page when practices change and revise the effective date above. Material changes will be flagged at the top of the page for 30 days.