1. Who we are
Productify ("Productify", "we", "us", "our") operates the marketplace at productifynow.com for digital goods and GPU/system rentals. If you have questions about this policy, contact us at privacy@productifynow.com.
2. Information we collect
- Account data — name, email, password hash, role (buyer/seller/admin), phone number (optional), avatar.
- Google sign-in data — if you use Google, we receive your email, name and profile picture from Google via Emergent-managed OAuth.
- Listings & content — product descriptions, GPU node specifications, uploaded images, and any files you transfer during a GPU rental session.
- Waitlist and provider applications — what you enter in the renter waitlist or provider application: name, email or preferred contact, role, region, workload or hardware details, availability and any notes. We use it only to run the closed beta and contact you about it. We don't ask for ID documents or bank details in these forms. To have an entry deleted, email privacy@productifynow.com.
- Transactions — cart contents, order totals, payment provider, timestamps, region. Card and bank details are handled by our payment providers (Stripe, PayPal, Razorpay) — we never store your card number.
- Technical data — IP address, device, browser, cookies, log data, approximate location for region-based checkout. We don't currently use a third-party analytics or session-recording tool; if we add one, we'll update this notice first.
3. Why we use it (legal bases)
- Contract — to create your account, fulfil orders, host and deliver digital goods, provision GPU access, process payments and issue receipts.
- Legitimate interests — fraud prevention, seller verification, marketplace safety, service improvement.
- Consent — marketing communications, optional cookies, uploading identity documents for seller verification.
- Legal obligation — tax records, responding to lawful requests, DPDP/GDPR/CCPA compliance.
4. Sharing
We share the minimum data needed with:
- Payment providers — Stripe, PayPal, Razorpay for processing purchases (region-based selection).
- Infrastructure — Emergent Object Storage for hosting uploaded files; Google (only if you sign in with Google).
- Sellers/buyers — buyers see the seller's display name; sellers see the buyer's name for fulfillment.
- Legal & safety — courts, regulators or law-enforcement where required by law.
We do not sell your personal information. We do not "share" it for cross-context behavioural advertising as defined by the CCPA/CPRA.
5. International transfers
Productify serves a global audience. Data may be transferred to, and processed in, jurisdictions other than your own — including India, the US and the EU. Where we transfer personal data outside your region, we rely on the Standard Contractual Clauses (EU/UK), the DPDP Act transfer rules (India), and equivalent safeguards.
6. Retention
Account and transactional data are retained while your account is active and for up to 7 years after closure to comply with tax and financial-record obligations. Uploaded images and workspace files are retained until you delete the listing or your account. Session cookies expire in 7 days.
7. Your rights
7.1 European Economic Area & United Kingdom (GDPR / UK GDPR)
You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. You may lodge a complaint with your national supervisory authority (e.g., Ireland's DPC, the UK's ICO).
7.2 California residents (CCPA / CPRA)
You have the right to know what personal information we collect, delete it, correct it, opt out of sale/share, and limit use of sensitive personal information. To exercise, email privacy@productifynow.com with subject "California Rights Request". We do not sell personal information; a "Do Not Sell or Share My Personal Information" link is not applicable but requests are honored regardless.
7.3 India (Digital Personal Data Protection Act, 2023 & IT Rules 2011)
You have the right to (a) obtain a summary of your personal data being processed, (b) request correction, completion, updating and erasure, (c) nominate another person to exercise your rights on your behalf in case of death or incapacity, and (d) grievance redressal. See §10 for our Grievance Officer.
7.4 Australia (Privacy Act 1988 — APPs)
You may request access to and correction of your personal information under APP 12 and APP 13. Complaints can be made to the Office of the Australian Information Commissioner (OAIC).
8. Security
We hash passwords with bcrypt, store session tokens in httpOnly Secure cookies with SameSite=None, encrypt data in transit (HTTPS), and restrict administrative access. No system is perfect — please choose a strong password and enable two-factor authentication where offered.
9. Children
Productify is not directed at children. We do not knowingly collect personal information from anyone under 16 (EU), under 13 (US COPPA), or from a child as defined under the Indian DPDP Act without verifiable parental consent. If you believe a child has provided data, contact us for prompt deletion.
10. Grievance & Data Protection Officer
Under India's DPDP Act 2023 and IT Rules 2011, you may contact our Grievance Officer:
Grievance Officer: To be appointed on launch.
Email: grievance@productifynow.com. Response within 24 hours; resolution within 15 days.
Data Protection Officer (EU/UK GDPR): dpo@productifynow.com.
11. Changes
We will post any material changes here and, where required, notify you by email. Continued use of Productify after a change constitutes acceptance.