Privacy Policy

1. Introduction

ProductDoctor ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data when you use the ProductDoctor service available at app.productdoctor.app.

2. Data We Collect

Account data

When you register, we collect your email address and name. This is used to manage your account and send transactional emails.

Product data

CSV and XLSX files you upload for auditing. This data is processed to generate quality scores and AI improvement suggestions. Files are retained for up to 30 days after an audit session, then automatically deleted.

Usage data

Pages visited, features used, and audit sessions — collected via PostHog analytics to help us understand how the product is used and improve it. This data is anonymised where possible.

Payment data

All payment information (credit card numbers, billing addresses) is handled entirely by Paddle, our payment processor. ProductDoctor does not store or process card data directly.

3. How We Use Your Data

• To provide and operate the Service.
• To generate audit scores and AI-powered improvement suggestions for your product content.
• To send transactional emails (account verification, password reset, billing notifications).
• To analyse usage patterns and improve the product (using anonymised data).
• To detect and prevent fraud and abuse.

4. Third-Party Services

We use the following third-party services to operate ProductDoctor:

• Paddle — payment processing and subscription management (Merchant of Record).
• OpenAI — AI-powered product content improvements. Product data is sent to OpenAI's API for processing and is subject to OpenAI's data usage policy.
• Vercel — frontend hosting.
• Railway — backend hosting.
• PostHog — product analytics.
• Sentry — error tracking and performance monitoring.

We only share your data with these services to the extent necessary to operate the Service and never sell your personal data to third parties.

5. Data Retention

Account data is retained while your account is active. Product data from audit sessions is retained for up to 30 days after the session, then automatically deleted. You may request earlier deletion by contacting us. When you delete your account, all associated data is deleted within 30 days.

6. Data Security

We use industry-standard security measures: HTTPS encryption in transit, encrypted storage at rest, access controls, and regular security reviews. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security but take reasonable steps to protect your data.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your data (right to be forgotten).
• Export your audit results at any time from the dashboard.
• Delete your account from account settings.

To exercise these rights, contact us at support@productdoctor.app.

8. Cookies

We use session cookies for authentication and PostHog analytics cookies to understand product usage. We do not use third-party advertising cookies. You can disable cookies in your browser settings, though this may affect Service functionality.

9. Children

The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact

For privacy-related questions or requests, contact us at support@productdoctor.app.