Privacy Policy

Last updated: October 17, 2026

WISEPIM B.V. ("WISEPIM", "we") runs wisepim.com and the WISEPIM app. This policy explains what personal data we collect on the website, in the free tools and in your account, why, on which legal basis, how long we keep it and what you can do about it. For the product data you upload to the app, we act as your processor; that is covered by the Data Processing Agreement below.

Your Data, Your Control

You keep full ownership of the product and order data you upload
We never sell personal data, and we never use your product or order data to train AI models
Product information is stored to help you improve it and to run the features you use
You can export or delete your data whenever you want

What We Collect

Account data when you create an account: name, email, company name, industry, website, preferred language and your answers in onboarding
Product and order data when you upload or connect it; order data only if you turn on performance insights
Free tool input when you use a free tool, such as an amount, a country or marketplace, a product title or an EAN or HS code (see "Free tools")
Your email address, language and the consent text you agreed to when you ask for a result by email, a rate alert, a guide or a report
Usage data when you visit the website or use the app: pages viewed, tools used, clicks, device and browser type, and approximate location from your IP address
Technical data needed to run the service: IP address (hashed where we use it for rate limits), security and error logs

What We Don't Collect

Personal data of your end customers from your shop platforms
Payment card or bank details: payments are handled by our payment provider Mollie
What you type into the free tools, in analytics: analytics only records that a tool was used

Free Tools

Most free tools (margin, VAT, fee, unit price and similar calculators, the barcode and SKU generators) run entirely in your browser. What you type stays in the page and its link; we do not receive it. Some tools need our servers to answer:

HS code finder, category finder and EAN lookup: we receive the product text or code you enter, answer, and do not store it with anything that identifies you. We count requests per hashed IP address to prevent abuse.
Shared and saved results: if you choose to share or save a result, we store the tool's input and result under a random link, without your name.
Results by email and rate alerts: we store your email address, language and the consent text you agreed to, and send what you asked for. Alerts use double opt-in: nothing is sent until you confirm.
Product data audit and guides by email: we store your email, the store URL you entered and the request, and send the report or file.

Cookies and Similar Technology

We ask before we set anything that is not needed for the site to work. You choose in the cookie banner, and you can change or withdraw your choice at any time through Cookie Settings in the footer.

Name	Purpose	Category	Lifetime
consent (cookie)	Remembers your cookie choice	Necessary	180 days
__session, __project (cookies)	Keep you signed in and in your workspace	Necessary	7 days
__theme, locale (cookies)	Remember the light or dark mode and the language you chose	Necessary	1 year
wp_signup_attr (cookie)	Carries your sign-up choices through a Google or LinkedIn sign-in	Necessary	10 minutes
PostHog (ph_* cookie and local storage)	Website and product analytics	Analytics	1 year
Google Analytics 4 (_ga* cookies), via Google Tag Manager	Website analytics	Analytics	Up to 2 years
Google Ads (_gcl_* cookies), via Google Tag Manager	Measuring ad conversions	Marketing	90 days
wisepim:exp:* (local storage)	Shows you the same version of a page during a test	Analytics	Until cleared; this visit only without consent
wisepim:visitor:profile and tool history (local storage)	Remembers which free tools you used and what they told us about your business (see "Your tool profile")	Analytics	90 days after last use; this visit only without consent

consent (cookie): Purpose: Remembers your cookie choice; Category: Necessary; Lifetime: 180 days
__session, __project (cookies): Purpose: Keep you signed in and in your workspace; Category: Necessary; Lifetime: 7 days
__theme, locale (cookies): Purpose: Remember the light or dark mode and the language you chose; Category: Necessary; Lifetime: 1 year
wp_signup_attr (cookie): Purpose: Carries your sign-up choices through a Google or LinkedIn sign-in; Category: Necessary; Lifetime: 10 minutes
PostHog (ph_* cookie and local storage): Purpose: Website and product analytics; Category: Analytics; Lifetime: 1 year
Google Analytics 4 (_ga* cookies), via Google Tag Manager: Purpose: Website analytics; Category: Analytics; Lifetime: Up to 2 years
Google Ads (_gcl_* cookies), via Google Tag Manager: Purpose: Measuring ad conversions; Category: Marketing; Lifetime: 90 days
wisepim:exp:* (local storage): Purpose: Shows you the same version of a page during a test; Category: Analytics; Lifetime: Until cleared; this visit only without consent
wisepim:visitor:profile and tool history (local storage): Purpose: Remembers which free tools you used and what they told us about your business (see "Your tool profile"); Category: Analytics; Lifetime: 90 days after last use; this visit only without consent

Before you choose, and if you reject analytics: PostHog runs without cookies or stored identifiers, the WISEPIM keys above are kept for your current visit only and then removed, and Google tags set no cookies. Under Google Consent Mode, Google tags can still send signals without cookies or identifiers so that Google can model visits and conversions.

Your Tool Profile

If you accept analytics cookies, your browser keeps a short profile of what the free tools told us about your business, so the site and a new WISEPIM account can start from it.

It holds conclusions, not what you typed: for example "sells on bol.com", "ships from Belgium" or "101 to 1,000 products", each with the tool it came from. Product titles you checked stay in your browser unless you choose "Bring the products you checked" when you sign up.
We use it to suggest a useful next tool or page on our website. These suggestions are shown in your browser only.
When you create an account, we store it with your account to pre-fill onboarding (such as your industry, store URL or markets) and to suggest a first step. Every pre-filled answer says where it came from, and you can change it.
If you left your email in a free tool from the same browser, we link that request to your new account. We never link by email address alone.
If you accepted analytics and leave your email in a free tool, we keep this profile with that request. If you later sign up with Google or LinkedIn using the same email, also on another device, your account starts from it. This only works with an email Google or LinkedIn has verified; an email sign-up is never matched on the address alone.
If you agreed to product emails when you signed up, we use a few properties from the profile, such as the tools you used, your marketplaces, country and catalog size, to tailor those emails. We also add them to your user profile in our product analytics. Your store URL and email address are never part of these properties.
Without analytics consent, the profile lasts for your visit only and is never linked to an account.
You can see and clear it at any time in Cookie Settings. This is limited profiling to tailor the product to you; it has no legal or similarly significant effect, and you can object to it at any time.

Why We Use Your Data, and the Legal Basis

Purpose	Legal basis (GDPR article 6)
Providing your account, the app and the free tools you use	Contract (6.1.b), or steps you asked for before a contract
Sending a result, file or alert you asked for	Contract (6.1.b) for a one-off send; consent (6.1.a) for alerts and follow-up emails
Newsletter and product updates	Consent (6.1.a); withdraw any time through the unsubscribe link
Website and product analytics, A/B tests, your tool profile and linking it to your account	Consent (6.1.a) through the cookie banner
Ad conversion measurement	Consent (6.1.a) through the cookie banner
Security and abuse prevention (bot checks, rate limits, error logs)	Legitimate interest (6.1.f) in keeping the service safe
Invoicing and tax records	Legal obligation (6.1.c)

Providing your account, the app and the free tools you use: Legal basis (GDPR article 6): Contract (6.1.b), or steps you asked for before a contract
Sending a result, file or alert you asked for: Legal basis (GDPR article 6): Contract (6.1.b) for a one-off send; consent (6.1.a) for alerts and follow-up emails
Newsletter and product updates: Legal basis (GDPR article 6): Consent (6.1.a); withdraw any time through the unsubscribe link
Website and product analytics, A/B tests, your tool profile and linking it to your account: Legal basis (GDPR article 6): Consent (6.1.a) through the cookie banner
Ad conversion measurement: Legal basis (GDPR article 6): Consent (6.1.a) through the cookie banner
Security and abuse prevention (bot checks, rate limits, error logs): Legal basis (GDPR article 6): Legitimate interest (6.1.f) in keeping the service safe
Invoicing and tax records: Legal basis (GDPR article 6): Legal obligation (6.1.c)

How Long We Keep Data

Data	Kept for
Account data	As long as your account exists. When you delete your account in Settings, you're signed out right away and have 14 days to cancel. After that we delete your account, the projects you own and the free tool data linked to it, except the invoices tax law requires us to keep
Product data	The term of your subscription, then the export window in the Data Processing Agreement, then deleted
Your tool profile in your browser	90 days after you last used a tool; this visit only without consent
Email and requests from the free tools (results, guides, reports, alerts)	24 months after your last activity, such as a new request or an unsubscribe. Longer only while you still receive an alert or guide updates you signed up for. Once linked to your account, they follow your account
Unconfirmed alerts	30 days, then deleted
Product data audit files	12 months, then the files are deleted
Shared tool results	12 months after the link was last opened. Results saved to your account follow your account
Analytics events	As long as the retention set in PostHog and Google Analytics allows (Google Analytics: at most 14 months)
Invoices	7 years, as Dutch tax law requires
Security and error logs	Only as long as needed to fix problems and investigate abuse

Account data: Kept for: As long as your account exists. When you delete your account in Settings, you're signed out right away and have 14 days to cancel. After that we delete your account, the projects you own and the free tool data linked to it, except the invoices tax law requires us to keep
Product data: Kept for: The term of your subscription, then the export window in the Data Processing Agreement, then deleted
Your tool profile in your browser: Kept for: 90 days after you last used a tool; this visit only without consent
Email and requests from the free tools (results, guides, reports, alerts): Kept for: 24 months after your last activity, such as a new request or an unsubscribe. Longer only while you still receive an alert or guide updates you signed up for. Once linked to your account, they follow your account
Unconfirmed alerts: Kept for: 30 days, then deleted
Product data audit files: Kept for: 12 months, then the files are deleted
Shared tool results: Kept for: 12 months after the link was last opened. Results saved to your account follow your account
Analytics events: Kept for: As long as the retention set in PostHog and Google Analytics allows (Google Analytics: at most 14 months)
Invoices: Kept for: 7 years, as Dutch tax law requires
Security and error logs: Kept for: Only as long as needed to fix problems and investigate abuse

Who Receives Data

We do not sell personal data. We use these providers, each under a data processing agreement, and only for the purpose listed:

Google Cloud: hosting, databases and file storage
Google Cloud: Google sign-in and the Google connections you turn on
AI service providers: AI translation, content enrichment and web research on the product content a feature needs
Google: Tag Manager, Analytics 4, Ads and reCAPTCHA
PostHog: product and website analytics
Sentry: error logging
Cloudflare: content delivery and the Turnstile bot check
Resend: transactional email, such as results, alerts and account emails
Loops: product and marketing email you opted in to
Mollie: payments

Where a provider processes data outside the EU, the transfer relies on an adequacy decision (such as the EU-US Data Privacy Framework) or the European Commission's standard contractual clauses.

Your Rights

Access your personal data
Correct inaccurate data
Delete your data (the "right to be forgotten")
Take your data with you (data portability)
Download your personal data and delete your account yourself in Settings under Data & Privacy (deletion becomes final after 14 days); you can also exercise any right by email to the address below
Object to processing, including the profiling described under "Your tool profile"
Withdraw consent at any time: cookie consent through Cookie Settings in the footer, everything else by email to the address below
Complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

Data Protection

Data encrypted in transit and at rest
Regular security audits and vulnerability testing
Strict access controls and authentication
EU-based data centers for European customers
Data processing agreements available on request

AI & Industry Data

Our AI features run on proprietary datasets, not your data. We maintain and regularly update our industry datasets from over 400 sources, including partner data that is hard to find elsewhere. Your product and order data is never used to train our models.

Where We Process Your Data

We host and store your account and product data in the European Union. Some providers listed under "Who receives data" process data outside the EU; those transfers rely on an adequacy decision or the European Commission's standard contractual clauses.

Changes to This Policy

We update this policy when our processing changes and show the date at the top. We announce material changes by email to account holders.

Contact Our Privacy Team

For privacy questions or to exercise your rights, email WISEPIM B.V. at:

info@wisepim.com

Data Processing Agreement

How we process your data on your behalf, the security measures we maintain, and the subprocessors we rely on to run WISEPIM.

Version 2 · Last updated: October 2026

When you use WISEPIM, you stay in control of your data. You are the data controller and WISEPIM acts as your processor: we only process the product data and account information you entrust to us, only to provide the Services and only on your instructions. This Data Processing Agreement explains the technical and organisational measures we maintain to protect your data, the subprocessors we engage, and where your data is processed. It forms part of, and should be read together with, this Privacy Policy. A signed, standalone version is available on request.

Your role and ours

You are the data controller. You decide what data you upload to WISEPIM and how it is used.
WISEPIM is your processor. We process your data only on your documented instructions and only to deliver the Services to you.
We never use your product or order data to train AI models, and we never sell it or repurpose it for our own ends.
Our people are bound by confidentiality obligations and only access your data when needed to operate or support the Services.
We engage subprocessors only under data protection terms no less protective than those we offer you, and we give you prior notice of any addition or replacement so you can object on reasonable grounds.

We review this policy regularly and update it when our processing or the law changes.