Privacy Policy
Last updated: July 22, 2026
This Privacy Policy explains what personal data DTCSuite collects, why, and how you can exercise your rights. It applies to the dtcsuite.com website and the DTCSuite application.
1. Data we collect
Account data (name, email, password hash), workspace and billing data (plan, invoices via Stripe — we never store full card numbers), data you connect (store products, orders, ad accounts), usage data (feature usage, AI-credit consumption, logs) and, with your consent, marketing analytics cookies.
2. How we use data
To provide and secure the Service, sync your connected platforms, generate AI content you request, bill subscriptions, send transactional email (welcome, trial reminders, payment notices), improve the product, and — only with consent — measure marketing performance.
3. Legal bases
We process data to perform our contract with you, to comply with legal obligations, for legitimate interests such as security and product improvement, and on the basis of consent for marketing cookies. You can withdraw consent at any time.
4. Cookies and analytics
Essential cookies keep you signed in and remember your language. Marketing pixels (Meta Pixel, Google Analytics) load only after you accept them in the cookie banner and can be declined without affecting the Service.
5. Sharing and processors
We share data with processors needed to run the Service: hosting (Microsoft Azure), payments (Stripe), email (Resend), AI providers (Anthropic, OpenAI), error monitoring (Sentry) and the platforms you explicitly connect (e.g. Shopify, Meta). We do not sell personal data.
6. International transfers
Where data is transferred outside your jurisdiction, we rely on appropriate safeguards such as standard contractual clauses offered by our processors.
7. Retention and security
We keep data while your account is active and as required by law (e.g. invoicing). Backups are retained for 14 days. Data is encrypted in transit, credentials for connected platforms are encrypted at rest, and access is tenant-isolated at application and database level.
8. Your rights
Depending on your jurisdiction you may have rights to access, correct, export, delete or restrict processing of your personal data, and to lodge a complaint with a supervisory authority. Email us and we will respond within the legally required timeframe.
To exercise your rights or ask privacy questions, contact [email protected].