Privacy Policy

At Customiser LTD ("Customiser," "we," "us," or "our"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

By using Customiser's services, you agree to the collection and use of information in accordance with this Privacy Policy. Please read this policy carefully to understand our practices regarding your data.

1. Information We Collect

1.1 Information You Provide to Us

We collect information that you voluntarily provide when using our services:

• Account Information: Name, email address, company name, job title, phone number, and password
• Profile Information: Professional details, preferences, and settings
• Business Documents: Manufacturing documents, procurement data, specifications, and related files you upload
• Payment Information: Billing details, payment method information (processed by third-party payment processors)
• Communications: Messages, feedback, and support requests you send to us
• Survey Responses: Information you provide in surveys or questionnaires

1.2 Information Collected Automatically

When you access our services, we automatically collect certain information:

• Usage Data: Pages visited, features used, time spent on pages, click patterns
• Device Information: Device type, operating system, browser type and version, screen resolution
• Log Data: IP address, access times, referring URLs, error logs
• Cookies and Similar Technologies: Session cookies, preference cookies, analytics cookies
• Location Data: General geographic location based on IP address

1.3 Information from Third Parties

We may receive information from third-party sources:

• Business partners and integration providers
• Marketing and analytics platforms
• Publicly available sources (e.g., company websites, professional networks)
• Third-party authentication services (if you choose to use them)

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Service Provision

• Process and structure your manufacturing documents
• Provide document comparison and analysis features
• Enable traceability and audit capabilities
• Facilitate data export and integration with third-party systems
• Maintain and improve service performance

2.2 Account Management

• Create and manage your account
• Authenticate your identity and prevent fraud
• Process payments and manage subscriptions
• Communicate important account updates

2.3 Communication

• Respond to your inquiries and support requests
• Send service-related notifications and updates
• Provide product updates and feature announcements
• Send marketing communications (with your consent)

2.4 Analytics and Improvement

• Analyze usage patterns and trends
• Improve and optimize our services
• Develop new features and functionality
• Conduct research and testing

2.5 Legal and Security

• Comply with legal obligations and regulatory requirements
• Enforce our terms and conditions
• Detect, prevent, and address fraud and security issues
• Protect our rights, property, and safety

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our services under our Terms and Conditions
• Legitimate Interests: Processing for our legitimate business interests, such as improving services, security, and analytics
• Consent: Processing based on your explicit consent (e.g., marketing communications)
• Legal Obligation: Processing required to comply with legal or regulatory requirements

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our platform:

• Cloud hosting and infrastructure providers
• Payment processors and financial services
• Email and communication platforms
• Analytics and performance monitoring tools
• Customer support and CRM systems

4.2 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your data.

4.3 Legal Requirements

We may disclose your information when required by law, legal process, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

5. Data Security

We implement robust security measures to protect your information:

• Encryption: Data is encrypted in transit using TLS/SSL and at rest using industry-standard encryption
• Access Controls: Strict access controls and authentication mechanisms limit data access to authorized personnel
• Security Monitoring: Continuous monitoring for suspicious activity and security threats
• Regular Audits: Periodic security assessments and penetration testing
• Employee Training: Regular security awareness training for all employees
• Incident Response: Documented procedures for responding to security incidents

While we implement strong security measures, no system is completely secure. We cannot guarantee absolute security of your data. Please use strong passwords and keep your account credentials confidential.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained while your account is active and for a reasonable period thereafter
• Business Documents: Retained according to your subscription and retention settings
• Usage Data: Typically retained for 24-36 months for analytics purposes
• Financial Records: Retained for the period required by tax and accounting regulations
• Legal Hold: Data may be retained longer if required for legal proceedings or investigations

Upon account deletion, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access and Portability

You have the right to access your personal data and request a copy in a structured, commonly used format.

7.2 Correction

You can update or correct your account information at any time through your account settings or by contacting us.

7.3 Deletion

You have the right to request deletion of your personal data, subject to legal obligations that may require retention.

7.4 Objection and Restriction

You can object to certain processing activities or request restriction of processing in specific circumstances.

7.5 Withdraw Consent

Where processing is based on consent, you can withdraw your consent at any time.

7.6 Marketing Communications

You can opt out of marketing emails by clicking the unsubscribe link in any marketing email or updating your preferences.

7.7 Cookies

You can control cookie preferences through your browser settings. Note that disabling certain cookies may affect functionality.

To exercise any of these rights, please contact us at team@customiser.ai. We will respond to your request within 30 days.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer data internationally, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure your data receives adequate protection.

9. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.

10. Third-Party Links and Services

Our services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for basic site functionality and security
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how users interact with our services
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

You can manage cookie preferences through your browser settings or our cookie consent tool.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Sending an email to the address associated with your account
• Posting a prominent notice on our website
• Updating the "Last updated" date at the top of this policy

We encourage you to review this Privacy Policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Your California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (note: we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at team@customiser.ai.

14. Complaints and Regulatory Authority

If you have concerns about our data processing practices, please contact us first. We are committed to resolving any complaints promptly and fairly.

If you are in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (supervisory authority).