Draft — last edited 2026-08-16
This policy explains what data Purpy ([legal entity name, registration number, and registered address to be inserted], "Purpy", "we") collects when you use the Purpy control panel or visit purpy.eu, why, and what your rights are. Purpy is a business-to-business competitor price monitoring service for Romanian beverage retailers; it is not a consumer product, and we do not knowingly collect data about your own end customers.
| What | Why |
|---|---|
| Account details you or your administrator provide (business/seller name, login access code) | To create and secure your account, and to identify your workspace so your catalog and reports are kept separate from other clients' |
| The product catalog you upload (product names, sizes, your prices) | To match your products against competitor listings and build your price comparison reports — this is the core service |
| Publicly available competitor pricing data we collect from monitored retailer websites | To compare it against your catalog. This is not personal data about a person; it is public product/pricing information |
| Usage and job logs (what actions were run, when, and their outcome) | To operate the service, diagnose problems, and secure the platform |
| Payment and subscription status | Billing is handled entirely by our payment processor (see "Third parties" below) — we do not receive or store your card details ourselves |
We use a small number of specialist providers to run the service. Each is described here because GDPR requires us to; none of them are permitted to use your data for their own purposes.
| Provider | Purpose | What they see |
|---|---|---|
| Lemon Squeezy | Payment processing and billing (they are the merchant of record for your subscription) | Your billing contact details and payment information — Purpy never receives or stores raw card numbers |
| Google (Gemini API) | A secondary, automated check on product matches the rule engine is uncertain about — never the primary matching step | The specific product title/price pairs sent for that check, not your whole catalog |
| Backblaze B2 | Encrypted offsite backup storage | An end-to-end encrypted backup file only — Backblaze cannot read its contents without the decryption key, which never leaves our control |
| Google Fonts | Web fonts for this site's typography | Your browser requests font files directly from Google when you load this page, which exposes your IP address to Google in the way any font-CDN request does |
[International transfer note: Google's services may process data outside the European Economic Area. A legal review should confirm the applicable safeguard — e.g. Standard Contractual Clauses — and this section should name it explicitly.]
The control panel sets one cookie to keep you signed in (a session cookie) and one to remember a CSRF security token that protects your account from forged requests from other websites. Neither is used for advertising or cross-site tracking, and we do not currently run any analytics or advertising trackers on this site or the control panel.
Your catalog and match data are kept for as long as your account is active, plus a limited backup retention window (encrypted backups are kept for a rolling period, currently 14 days, before being superseded). If you close your account, contact us and we will delete your account data outside of what backup retention already governs. [This section needs a concrete answer for how long post-cancellation account data is retained before deletion.]
If you are in the EU/EEA, GDPR gives you the right to access, correct, export, or request deletion of your personal data, and to object to or restrict certain processing. To exercise any of these, contact us at the address below.
Access codes are stored hashed, not in plain text. The service runs over HTTPS. Backups are encrypted before they leave the server, with the decryption key held separately from the backup itself. Administrative access is separately authenticated from client accounts.
We may update this policy as the service changes. Material changes will be reflected here with an updated date at the top of the page.
Questions about this policy or your data: [email protected].