Privacy policy
What personal data we collect, why, and the choices you have.
Draft for review. This page will be finalised before PriceSynergy opens to new customers.
Last updated 12 October 2026.
Who we are
TODO: registered company name ("PriceSynergy", "we") is the controller for the personal data described in this policy. Contact us at privacy@pricesynergy.io or TODO: registered office address.
Where our customers use PriceSynergy to process their own marketplace data, we act as their processor under our data processing agreement, and the customer's own privacy notice applies.
What we collect
| Data | Why | Lawful basis |
|---|---|---|
| Name, work email, company, phone (optional) when you sign up or book a demo | To create your account, provide the service and reply to you | Contract; legitimate interests |
| Sign-in details from Microsoft or Google (name, email, account ID) | To sign you in securely | Contract |
| Billing contact, address and VAT number. Card and bank details are handled by Stripe and GoCardless, not stored by us | To take payment and issue invoices | Contract; legal obligation |
| How you use the app (pages, actions, audit log) | To run, secure and improve the service | Legitimate interests |
| Website analytics (pages visited, how you found us) through HubSpot cookies | To understand and improve our marketing | Consent |
| Emails about your account, trial and onboarding | To help you get set up and keep you informed | Contract; legitimate interests |
Who we share it with
We use these service providers, under contracts that protect your data:
- Microsoft (Azure): Hosting, databases, storage and sending email (UK)
- Stripe: Card payments and invoices (UK, EU and US)
- GoCardless: Direct Debit payments (UK and EU)
- HubSpot: Website analytics (with consent), demo requests and customer relationship management (EU and US)
- Google: Sign in with Google (when you choose it) (Global)
- Anthropic: Answering questions typed into the Ask feature. Only the question and field names are sent, never product data (US)
Where data leaves the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum. We don't sell personal data.
How long we keep it
Account data for as long as your account is open and 30 days after it closes, then it's deleted. Invoices and billing records for 6 years, as UK tax law requires. Demo requests for up to 2 years if you don't become a customer.
Your rights
You can ask to access, correct, delete or move your data, object to or restrict how we use it, and withdraw consent at any time (for cookies, use Cookie settings at the bottom of any page). Email privacy@pricesynergy.io. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Security
Data is hosted on Microsoft Azure in the UK and encrypted in transit. Marketplace API keys are encrypted at rest. See our security page.
Changes
We'll update this policy when our practices change and show the date at the top.