Privacy Policy

1. Information we collect

Personal data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you, including:

• Email address
• First name and last name
• Company name and role
• Usage data

Usage data

Usage data is collected automatically when using the Service. This may include your device's Internet Protocol address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, time spent on those pages, unique device identifiers, and other diagnostic data.

2. Tracking technologies and cookies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our Service.

• Essential cookies: Required for authentication and core functionality.
• Functionality cookies: Remember your preferences such as login details and theme settings.
• Analytics cookies: Help us understand how the Service is used so we can improve it. We use PostHog to understand how people use the dashboard. It may record sessions; we mask everything you type into forms.

3. How we use your data

We may use your personal data for the following purposes:

• To provide and maintain our Service.
• To manage your account and registration.
• To process transactions and send related information, including purchase confirmations and invoices.
• To contact you by email regarding updates, security alerts, or support.
• To provide you with news, special offers, and general information about our services (with your consent).
• For data analysis, identifying usage trends, and improving our Service.

4. Third-party service providers

We use trusted service providers to run ExportApollo. Each one only gets the data it needs for its job and may only use it to provide that service to us:

• Hosting and storage: our servers, databases, file storage and encrypted backups.
• Network and security: domain name system, traffic delivery and protection against attacks.
• Payments: card payments and billing. We do not store your full card number.
• Email delivery: sign-in codes, receipts and list notifications.
• Customer support: live chat and the account details our team needs to help you.
• Order fulfilment: preparing the lists you order.
• Product analytics: PostHog (US hosting) records how the dashboard is used, including session recordings with form inputs masked, so we can improve the product.
• Sign-in: signing in with a third-party account such as Google, if you choose to.

Each provider has its own privacy policy governing its use of your data. A list of the providers we use is available on request.

5. Data sharing

We may share your personal information in the following situations:

• With service providers: To monitor and analyze use of our Service and process payments.
• For business transfers: In connection with any merger, sale of company assets, or acquisition.
• With your consent: For any other purpose with your explicit consent.
• Legal requirements: If required by law or in response to valid requests by public authorities.

6. Data retention

We retain your personal data only for as long as necessary for the purposes described in this policy:

• Account data: Retained while your account is active and for a reasonable period after deletion for legal compliance.
• Transaction records: Retained for up to 7 years for tax and accounting purposes.
• Usage data: Generally retained for a shorter period unless used to improve security or functionality.

7. Your privacy rights (GDPR/CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to deletion: Request that we delete your personal data. You can delete your account from the Settings page.
• Right to portability: Request your data in a structured, machine-readable format.
• Right to object: Object to the processing of your personal data for certain purposes.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Data security

The security of your personal data is important to us. We use commercially acceptable means to protect your data, including encryption in transit (TLS) and at rest. However, no method of transmission over the Internet or electronic storage is 100% secure.

9. Children's privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.

10. Changes to this privacy policy

We may update our Privacy Policy from time to time. When we make material changes, we will notify you through a prominent notice within the Service and require you to accept the updated policy before continuing to use the Website. We will update the "Last updated" date at the top of this Privacy Policy.

11. Contact us

If you have any questions about this Privacy Policy, you can contact us by email at [email protected].