Our Privacy Commitment
- We will never sell your personal information.
- We will never share your data with data brokers.
- We collect only what's necessary to provide our service.
- You can delete your account and all data at any time.
1. Introduction
The Product Report ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website theproductreport.org and use our services.
This policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.
2. Data controller information
For the purposes of data protection laws, The Product Report is the data controller responsible for your personal data. You can contact us at:
- Email: privacy@theproductreport.org
- Website: theproductreport.org/contact
3. Information we collect
3.1 Information you provide directly
| Category | Examples | Purpose |
|---|---|---|
| Account | Email, name, hashed password | Authentication |
| Payment | Card via Stripe, billing address | Subscriptions & payments |
| Preferences | Saved products, reading history | Personalisation |
| Communications | Support inquiries, feedback | Respond to requests |
3.2 Information collected automatically
| Category | Examples | Purpose |
|---|---|---|
| Usage | Pages, features, search queries | Improve our service |
| Device | Browser, OS, screen size | Compatibility |
| Log | IP, access times, referrers | Security & analytics |
3.3 Information we do NOT collect
- Your browsing history outside our service
- Precise location data (GPS)
- Device fingerprinting for advertising
- Third-party advertising tracking pixels
- Social media activity
- Health information beyond product preferences
4. Legal bases for processing (GDPR)
We process your personal data under the following legal bases:
- Contract performance: To provide our services you've subscribed to.
- Legitimate interests: To improve our services and prevent fraud.
- Consent: For marketing communications (you can withdraw at any time).
- Legal obligation: To comply with applicable laws.
5. How we use your information
- Provide services: Display reviews, process subscriptions.
- Personalisation: Remember your preferences and saved products.
- Communication: Send service updates, respond to inquiries.
- Improvement: Analyse usage to enhance the service.
- Security: Detect and prevent fraud and unauthorised access.
- Legal compliance: Fulfil legal and regulatory obligations.
6. Subscription terms
Subscription billing
- Web annual plan: $99.99/year. First-time members receive a 30-day free trial.
- Payment card: Required at checkout. For first-time trials, no payment is due until day 30 unless you cancel first; returning members are billed at checkout.
- Cancellation: Web memberships can be canceled online from your account or subscription page.
- Mobile purchases: App Store and Google Play subscriptions are managed through the applicable store account settings.
- Refunds: Handled according to the payment processor and applicable law.
7. Data sharing and third parties
We do not sell your personal information. We share data only with service providers who help us operate:
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | USA |
| Vercel | Website hosting | USA |
| Google (OAuth) | Single sign-on | USA |
| Mixpanel | Product analytics | USA |
| Sentry | Error monitoring | USA |
All third-party providers are contractually obligated to protect your data and use it only for the specified purposes.
7.1 Essential cookies
We use essential cookies required for our service to function, including authentication, session, and security cookies.
7.2 Analytics cookies
With your consent, we may use analytics cookies to understand how you use our service. You can opt out at any time through our cookie consent banner.
7.3 No advertising cookies
We do not use advertising or tracking cookies. We do not participate in ad networks or retargeting programs.
8. Data retention
- Active account: As long as your account is active.
- After cancellation: 30 days after you cancel (in case you change your mind).
- After deletion request: Deleted within 30 days, except where required by law.
- Payment records: 7 years (tax and legal compliance).
- Security logs: 90 days.
9. Your privacy rights
9.1 Rights for all users
- Access: Request a copy of your personal data.
- Correction: Update or correct inaccurate information.
- Deletion: Request deletion of your account and data.
- Portability: Receive your data in a machine-readable format.
- Opt-out: Unsubscribe from marketing communications.
9.2 Additional rights for EU/EEA residents (GDPR)
- Restriction: Request that we limit processing.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: Withdraw consent at any time.
- Lodge complaint: File with your local supervisory authority.
California Privacy Rights (CCPA)
- Right to know what personal information is collected.
- Right to know if personal information is sold or disclosed.
- Right to opt out of the sale of personal information.
- Right to non-discrimination for exercising privacy rights.
We do not sell your personal information.
9.3 How to exercise your rights
Contact us at privacy@theproductreport.org. We respond within 30 days (or 45 days for CCPA requests).
10. Data security
- Encryption in transit: All data is transmitted over HTTPS/TLS 1.3.
- Encryption at rest: Sensitive data is encrypted in our databases.
- Access controls: Strict role-based access to personal data.
- Password hashing: Passwords are hashed using bcrypt.
- Regular audits: Periodic security reviews and updates.
11. International data transfers
Our services are hosted in the United States. For EU/EEA users, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection for international data transfers.
12. Children's privacy
Our service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
13. Changes to this policy
We may update this Privacy Policy. We will notify you of material changes by posting the updated policy, sending an email, or displaying an in-app notice.
14. Contact us
- Email: privacy@theproductreport.org
- General inquiries: support@theproductreport.org
- Website: theproductreport.org/contact