Who is responsible for your data
The data controller responsible for your personal data is Podkon, with its registered address at 8 The Green, Ste B, Dover, DE 19901, United States. When this policy says “Podkon”, “we”, “us”, or “our”, it refers to that company. You can reach us at info@podkon.com.
What we collect
We collect the email address you subscribe with and the account details you provide, plus payment information handled by our third-party payment processor (we never store your full card number). We also collect basic, privacy-friendly usage data so we can improve the site.
How we use it
We use your information to deliver your category reports, manage your subscription and billing, provide support, and send service messages about your account.
Cookies and analytics
We use essential cookies to run the site and, with your consent, analytics cookies to understand how it’s used. You can accept or decline non-essential cookies from the banner on your first visit, and change your choice anytime. See our Cookie Policy for details.
Google One Tap sign-in
We offer Google One Tap as a way to sign in. If you use it, Google shares your basic profile information (such as your name and email address) with us so we can create or access your account. One Tap only loads after you consent to non-essential technologies, and your use of Google sign-in is also subject to Google’s own privacy policy. You can always sign in without Google if you prefer.
Who we share data with
We share data only with the service providers (processors) needed to run Podkon:
- Stripe, payment processing and billing.
- Brevo, email delivery for your reports, account messages, and lead handling.
- Google, One Tap sign-in and GA4 analytics.
- Cloudflare and our hosting provider, hosting, content delivery (CDN), and security.
- Meta Pixel, marketing and conversion measurement, only with your consent.
- TikTok, marketing and conversion measurement, only with your consent.
- Etsy’s official API is the source of the listing data in your reports; we do not send it your personal data.
Legal bases for processing (GDPR / UK GDPR)
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
- Contract, to create your account, deliver your reports, and manage your subscription and billing.
- Consent, for analytics and marketing cookies and technologies (GA4, Meta Pixel, TikTok) and for optional features such as Google One Tap. You can withdraw consent at any time.
- Legitimate interests, to secure, maintain, and improve the service and prevent fraud, balanced against your rights.
Data retention
We keep your account and report data while your subscription is active. After you cancel, we keep account data for up to 24 months, and billing and tax records for up to 7 years where required by law. Analytics and marketing data are retained according to each provider’s settings, typically up to 26 months. We delete or anonymize data once it is no longer needed.
International transfers
We may process and store data in countries other than your own, including outside the EEA and the UK. Where we transfer personal data internationally, we use appropriate safeguards, including the European Commission’s Standard Contractual Clauses (and the UK addendum where relevant), to protect it.
Your rights
Depending on where you live, you can access, correct, export, or delete your data, and object to or restrict certain processing. Use our Data Request form or email us, and we’ll respond within 30 days. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection supervisory authority.
Your California privacy rights (CCPA / CPRA)
If you are a California resident, you have additional rights under the CCPA and CPRA.
- Categories we collect, identifiers (such as your email and account details), commercial information (your subscription and billing records), and internet or device activity (privacy-friendly usage and analytics data).
- Right to know and delete, you can request the categories and specific pieces of personal information we hold and ask us to delete it.
- Right to opt out of sale or sharing, we do not sell your personal information for money. Some analytics and marketing technologies (such as Meta Pixel and TikTok) may be considered a “sale” or “sharing” under California law. You can opt out by declining or withdrawing consent in our cookie banner.
- No discrimination, we will not discriminate against you for exercising these rights.
Children’s privacy
Podkon is a business tool intended for adults. It is not directed to children, and we do not knowingly collect personal data from anyone under 16 (or under 13 where that is the applicable minimum age). If you believe a child has provided us data, contact us and we will delete it.
Contact
Questions about your privacy or a data request? Email info@podkon.com.