Privacy Policy

1. Introduction

1.1. This Privacy Policy explains how Proofen B.V. ("we", "us", "our"), operating the ITADpricing platform, collects, uses, and protects your personal data.

1.2. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection law.

1.3. Proofen B.V. is the data controller for the personal data processed through this Service. We are registered in Rotterdam, the Netherlands.

2. What Data We Collect

2.1. Account information. When you create an account, we collect your name, email address, and company name.

2.2. Usage data. We collect information about how you use the platform, including pages visited, features used, search queries, and upload activity.

2.3. Uploaded files. When you upload CSV files for pricing, we process the contents of those files. These typically contain device model names, storage capacities, grades, and quantities.

2.4. Payment data. Payment processing is handled by Stripe. We do not store your credit card details. We receive confirmation of payment status from Stripe.

3. What We Do Not Collect

3.1. Our web crawler (ITADpricing Bot) collects publicly available product pricing data from e-commerce platforms. We do not collect any personal data of individuals from these sources.

3.2. We do not collect personal data of end consumers, sellers, or buyers from the platforms we monitor.

4. How We Use Your Data

4.1. To provide the Service. Your account information is used to authenticate you and deliver the platform features you have subscribed to.

4.2. To improve the platform. Usage data helps us understand which features are most valuable and where we can improve the user experience.

4.3. For billing. Account and payment information is used to manage your subscription and process payments.

4.4. To communicate with you. We may send you service-related emails, such as billing confirmations, security alerts, and product updates. You can opt out of non-essential communications at any time.

5. Lawful Basis for Processing

We process your personal data under the following legal bases (GDPR Article 6):

• Account and billing data: necessary for the performance of our contract with you (Art. 6(1)(b))
• Service usage data and logs: legitimate interests in operating and improving the Service (Art. 6(1)(f))
• Marketing communications: your consent, which you may withdraw at any time (Art. 6(1)(a))
• Legal obligations such as financial records: compliance with EU and Dutch law (Art. 6(1)(c))

6. Data Storage

6.1. Your data is stored on Supabase, which hosts our database in the European Union.

6.2. We take appropriate technical and organizational measures to protect your data, including encryption in transit and at rest.

7. Third Parties

7.1. Stripe. We use Stripe for payment processing. Stripe processes your payment data in accordance with their own privacy policy. Stripe is certified under PCI DSS Level 1.

7.2. Supabase. We use Supabase for database hosting and authentication. Supabase stores data in EU-based infrastructure.

7.3. Resend (email delivery). Used to deliver transactional emails including price alert notifications. Resend processes your email address only to deliver messages. See resend.com/privacy.

7.4. We do not sell your data to third parties. We do not share your personal data with third parties for marketing purposes.

8. Data Retention

8.1. Account data. We retain your account information for as long as your account is active. If you request account deletion, we will erase your personal data within 30 days.

8.2. Uploaded files. Files uploaded for pricing are processed in real time and are not stored long-term. Processed results may be cached temporarily to improve performance.

8.3. Usage data. Aggregated, anonymized usage statistics may be retained indefinitely for analytical purposes.

8.4. Financial records. Financial and billing records are retained for 7 years in accordance with Dutch bookkeeping obligations (Article 2:10 BW).

9. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access. You may request a copy of the personal data we hold about you.
• Right to rectification. You may request correction of inaccurate or incomplete data.
• Right to erasure. You may request deletion of your personal data.
• Right to data portability. You may request your data in a structured, machine-readable format.
• Right to object. You may object to processing of your data for specific purposes.
• Right to restrict processing. You may request that we limit how we use your data.
• Right to lodge a complaint. You have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

To exercise any of these rights, contact us at info@proofen.nl. We will respond within 30 days.

10. Cookies

10.1. We use essential cookies to maintain your authentication session. These are required for the Service to function.

10.2. We use Plausible Analytics and Vercel Analytics for website analytics. Both are privacy-friendly and cookieless. They do not set cookies or collect personal data under GDPR, and no consent is required for these tools.

10.3. We do not use advertising or tracking cookies. For more details, see our Cookie Policy.

11. Data Protection Officer

11.1. As a small company with fewer than 250 employees, we are not required to appoint a Data Protection Officer (DPO) under Article 37 of the GDPR.

11.2. For any data protection inquiries, please contact us directly at info@proofen.nl.

12. Changes to This Policy

12.1. We may update this Privacy Policy from time to time. We will notify registered users of material changes by email.

12.2. The "Last updated" date at the top of this page indicates when the policy was most recently revised.

13. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at:

Proofen B.V.
KVK: 93127788
Rotterdam, Netherlands
Email: privacy@itadpricing.com
Website: itadpricing.com