Privacy Policy

Last updated: 26 March 2026

Introduction

Comprice is a brand of SmittStudio OÜ (registry code 17442469). We operate the web service comprice.ai — a B2B price intelligence platform for e-shops. This privacy policy explains how we collect, use, disclose and protect your data when you use our service.

We are committed to protecting your privacy and comply with the General Data Protection Regulation (GDPR) and Estonian data protection law.

What data we collect

1. Account and registration data

When you request a trial or create an account, we collect:

  • Name
  • Email address
  • Company name
  • Website URL
  • Phone number (optional)

2. Business data

When you use the service, we collect:

  • Product catalog data you submit via the API
  • API authentication keys (encrypted)
  • E-shop URL and business data
  • Price and stock data submitted via feeds

3. Usage data

We automatically collect:

  • API request logs (endpoint, timestamp, response status)
  • Limit and quota usage
  • Feature usage statistics
  • IP addresses and request metadata

4. Communication

We retain:

  • Email correspondence with our support team
  • Notification settings and history
  • Account-related communication

How we use your data

We process your data on the following legal bases:

Legitimate interest (providing the B2B service)

We use your data to:

  • Provide and operate the Comprice service
  • Process product data and produce comparison reports
  • Monitor API usage and enforce limits
  • Improve the service and develop new features
  • Ensure security and prevent abuse
  • Meet legal obligations

Consent (marketing and demos)

With your explicit consent, we:

  • Send demo access details
  • Share product updates and feature announcements
  • Provide customer support

You can withdraw consent at any time by contacting us.

Data sharing and disclosure

We do not sell your data

We do not sell, rent or trade your personal or business data to third parties.

Service providers

We share data only with trusted service providers necessary to operate our service:

  • Vercel (USA) — web hosting and delivery
  • Hetzner (Germany) — server infrastructure
  • Google reCAPTCHA — spam protection on the demo form
  • Google Analytics (GA4) — website usage analytics
  • Google Ads — ad campaign conversion measurement
  • CookieHub — cookie consent management
  • Resend — transactional email delivery

All service providers are GDPR-compliant and process data under strict data processing agreements.

Legal requirements

We may disclose your data where required by law, court order or a government authority, or to protect our rights and security.

Business transfer

In the event of a merger, acquisition or asset sale, your data may be transferred. You will be notified of any such change.

Data security

We apply industry-standard security measures:

  • API keys stored encrypted
  • TLS/SSL encryption for all data exchange
  • Server access restricted to SSH key authentication
  • Regular security audits and updates
  • Services bound to localhost only
  • Firewall protection (UFW, fail2ban)

Despite our efforts, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

Data retention

We retain your data as follows:

  • Account data: until a deletion request or 12 months after account deactivation
  • API usage logs: 90 days
  • Price history data: 90 days
  • Product catalog data: for the duration of the active partnership
  • Email correspondence: 24 months or until a deletion request

You can request earlier deletion by contacting us.

Your rights under GDPR

As an EU data subject you have the right to:

  • Access: request a copy of your personal data
  • Rectification: correct inaccurate or incomplete data
  • Erasure: request deletion of your data (the "right to be forgotten")
  • Restriction: restrict the processing of your data
  • Portability: receive your data in a structured, machine-readable format
  • Objection: object to processing based on legitimate interest
  • Withdraw consent: where processing is based on consent

To exercise these rights, contact us at andres@comprice.ai. We respond within 30 days.

Cookies and tracking

We use cookies and similar tracking technologies to analyse our website and measure advertising. We ask for your consent to use cookies on your first visit.

Analytics cookies

Google Analytics (GA4) — collects anonymised website usage data (pages visited, session duration, traffic source). The data is used to improve the service. See Google's privacy policy.

Advertising cookies

Google Ads — measures the performance of ad campaigns (conversions). The data is used only to assess advertising effectiveness, not to build personal profiles of users. See Google's privacy policy.

Necessary cookies

Google reCAPTCHA — to block spam on the demo request form.

Managing consent

You can change your cookie preferences at any time via the cookie management button on our website. Analytics and advertising cookies activate only with your consent. Authentication happens through API key headers — cookies are not used for it.

Third-party links

Our service may contain links to third-party websites. We are not responsible for their privacy practices. We recommend reviewing their privacy policies.

International data transfers

Your data is stored primarily on servers in Germany (Hetzner) and may be processed in the USA (Vercel). These transfers are protected by:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Service provider compliance with GDPR and the EU-US Data Privacy Framework

Children's privacy

Comprice is a B2B service not intended for persons under 18. We do not knowingly collect children's data.

Changes to this policy

We may update this privacy policy from time to time. Changes are published on this page along with an updated date. Continued use of the service after changes means you accept them.

Contact us

For privacy questions, concerns or to exercise your rights:

SmittStudio OÜ (reg. 17442469)
Email: andres@comprice.ai
Service: comprice.ai
Location: Estonia (EU)

If you are not satisfied with our response, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate or your local supervisory authority.

This privacy policy is effective as of 11 February 2026.