Privacy Policy

Table of contents

Data controller

The data controller responsible for your personal data is:

Reqser.com AG
Website: www.reqser.com
Contact: www.reqser.com/contact

Data we collect

We collect the following categories of personal data:

Account information: When you create an account, we collect your name, email address, and password. If you purchase a subscription, we collect billing information necessary to process payment.

Shop and platform data: When you connect your online shop, we collect your shop domain, shop name, and an access token required to communicate with your shop’s API. We access all relevant data necessary to either create complete language versions of your shop content or to complete and update existing language data. This includes product content, translations, themes, locales, and market settings as authorized by the permissions you grant during installation. We do not access any personal data of your shop’s customers.

Translation content: We process the text content from your shop (product descriptions, page content, theme strings, etc.) in order to provide translation services. This content is sent to third-party translation providers for processing.

Usage data: We automatically collect technical information such as your IP address, browser type, operating system, pages visited, and usage patterns to maintain and improve our Services.

Customer data: We do not collect, store, or process any personal data of your shop’s customers. Our Services operate exclusively at the shop and content level. No customer names, addresses, order details, or other personally identifiable information from your shop’s customers is accessed or stored by us.

How we use your data

We use the collected data for the following purposes:

• To provide, operate, and maintain our language data and content optimization Services
• To authenticate your identity and manage your account
• To connect to your online shop and synchronize language data, including creating, completing, and updating content across all language versions
• To process your shop’s content through third-party language and AI services for translations, image descriptions, metadata generation, and other content enhancements
• To process payments and manage subscriptions
• To communicate with you about your account, updates, and support inquiries
• To monitor usage, detect issues, and improve the quality of our Services
• To comply with legal obligations

Legal basis for processing

We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

• Contractual necessity (Art. 6(1)(b) GDPR): Processing is necessary to perform our contract with you, including providing translation services, managing your account, and connecting to your store.
• Legitimate interests (Art. 6(1)(f) GDPR): We process data for our legitimate interests, such as improving our Services, ensuring security, and preventing fraud, provided these interests are not overridden by your rights.
• Consent (Art. 6(1)(a) GDPR): Where required, we obtain your consent before processing data, such as for optional analytics cookies. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c) GDPR): We process data when required to comply with applicable laws, regulations, or legal proceedings.

Third-party services

To provide our Services, we share data with the following categories of third-party providers:

Language and AI service providers: Your shop’s content is sent to third-party language and AI service providers for translation, content generation, and other processing tasks. These providers process the content solely for the purpose of delivering our Services and are bound by their respective data processing agreements.

E-commerce platforms: We integrate with third-party e-commerce platforms to access and update your shop’s content. By connecting your shop to our Services, you authorize us to access the data necessary to provide our language and content optimization features. Without this access, our Services cannot function.

Payment processors: Subscription payments are processed by third-party payment providers. We do not store your full credit card details on our servers.

Hosting and infrastructure: Our Services are hosted on servers within the European Union. We use industry-standard security practices to protect your data.

Data retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

• Account data: Retained for the duration of your active account. Upon account deletion, your data is removed within 30 days, except where retention is required by law.
• Shop connection data: When you uninstall our app from your store or disconnect the integration, we delete your shop’s access token and connection data within 48 hours.
• Translation data: Cached translations are retained to improve service performance. When a shop is disconnected, associated translation data is deleted.
• Log data: Server logs and usage data are retained for up to 90 days for security and troubleshooting purposes, then automatically deleted.
• Billing data: Financial records are retained for the legally required period (typically 10 years under Swiss and EU commercial law).

Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS/SSL), secure storage of access tokens, regular security reviews, and access controls limiting data access to authorized personnel only.

While we strive to protect your data, no method of electronic storage or transmission over the Internet is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

Your rights

Under the GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: You may request deletion of your personal data, subject to legal retention requirements.
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances.
• Right to data portability: You may request to receive your data in a structured, machine-readable format.
• Right to object: You may object to the processing of your data based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at www.reqser.com/contact. We will respond to your request within 30 days.

You also have the right to lodge a complaint with a supervisory data protection authority if you believe your data has been processed unlawfully.

Cookies

Our Website uses cookies and similar technologies to ensure proper functionality and to improve your experience:

• Essential cookies: Required for the Website to function properly, such as session cookies for authentication. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings.

You can manage cookie preferences through your browser settings. Disabling essential cookies may impair the functionality of our Services.

International data transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), particularly when using third-party language and AI service providers or when connecting to e-commerce platforms hosted outside the EEA. In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on adequacy decisions, to protect your data in accordance with GDPR requirements.

Children’s privacy

Our Services are designed for business use. We do not knowingly collect personal data from children under 16. If we become aware that personal data from a child under 16 has been provided to us without appropriate consent, we will take steps to delete such data promptly.

Changes to this policy

We reserve the right to update this Privacy Policy at any time. When we do, we will revise the updated date at the bottom of this page. We encourage you to review this policy periodically to stay informed about how we protect your data. Continued use of our Services after any changes constitutes your acceptance of the updated policy.

Contact us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

www.reqser.com/contact