Privacy Policy

We take the protection of personal data seriously. This Privacy Policy explains how Manuel Centrone ("Anthecom", "we", "us") collects, uses and protects personal data in connection with Anthecom, the platform at anthecom.com that builds, hosts and runs online stores with artificial intelligence (the "Service").

1. Who this policy covers

This policy applies to merchants who create an account or use the Service, and to visitors of anthecom.com.

If you are a visitor or customer of a store built with Anthecom (a store on an anthecom.com address or on its own domain), this policy does not apply to you: the store owner is the controller of your personal data, and we process it only on their behalf, as described in section 5. Please read the privacy policy of that store, linked in its footer, and contact the store for any request about your data.

2. Who is responsible for your data

The controller of the processing described in this policy is:

• Manuel Centrone, 20024 Garbagnate Milanese (MI), Italy
• Email: support@anthecom.com

3. What data we collect

3.1 Account data. Your email address and password (stored only in hashed form by our authentication provider). If you sign in with Google, we receive your email address, name and profile picture as Google shares them; we never see your Google password.

3.2 Plan and billing data. Your plan, subscription status, renewal dates and AI credit usage. Payments are handled by Fungies: we never receive or store your card details.

3.3 Store and business data. What you create and upload: store descriptions and prompts, store content and settings, products, prices, images, product links you import, pages, discounts and markets, and the seller details you enter for your store's legal pages.

3.4 Connected services. If you connect Stripe, PayPal, Airwallex, Adyen or AliExpress, the identifiers, access tokens and API keys needed to use them on your behalf. API keys are stored encrypted.

3.5 AI interaction data. The instructions you give to the AI and the results it returns, so that we can apply them to your store.

3.6 Support requests. When you write to us through the contact page or by email: your name, email address, message and, if you have an account, your plan and stores, so we can answer you.

3.7 Technical data. Our servers record basic technical information, such as IP address, browser and pages requested, to run and secure the Service. We don't use analytics or advertising trackers on anthecom.com.

3.8 Your customers' data (processed on your behalf). To run your stores we process personal data of your stores' visitors and customers: orders, names, email addresses, phone numbers, shipping addresses, reviews, newsletter sign-ups and visit statistics. We process this data as your processor, as described in section 5, and not for our own purposes.

4. How we use your data and on what legal basis

• To provide the Service: create your account, generate, edit and host your stores, run the checkout and send the emails of your stores (performance of a contract).
• To manage your subscription and keep accounting and tax records (performance of a contract and legal obligation).
• To answer your support requests (performance of a contract and legitimate interest).
• To keep the Service secure, prevent fraud and abuse, review stores and enforce our Terms of Service (legitimate interest and legal obligation).
• To tell you about your account, billing, security and changes to the Service (performance of a contract).
• To send you news and offers about Anthecom, only with your consent, which you can withdraw at any time.

Artificial intelligence. To generate and edit stores, your prompts, store content, imported product data and images are sent to Anthropic, which provides the Claude AI models. We don't use your prompts, your store content or your customers' data to train AI models, and under its commercial terms Anthropic does not use data received through its API to train its models. We may use aggregated and anonymised data about how the Service is used to run, secure and improve it. Don't include other people's personal data in your prompts.

5. Your customers' data: our role as processor

For the personal data of your stores' visitors and customers, you are the controller and we are your processor. We process that data only to provide the Service to you and following your instructions, under the data processing terms in section 9 of our Terms of Service.

As the controller, you are responsible for informing your customers (your store has its own privacy and cookie policy, which you must complete with your details), for having a legal basis for the processing, for collecting any consents required, and for answering your customers' requests. If one of your customers contacts us directly, we will refer them to you and help you as required.

6. How store data is handled

• Orders and customer details are used to process and manage orders and to send order, shipping and review emails on the store's behalf.
• Visit statistics are counted with an anonymous daily identifier: a one-way code made from the visitor's IP address, the store and the day. The IP address itself is never stored, and the identifier changes every day. Visit data is deleted after about 13 months.
• The cart and some preferences of store visitors are saved only in their own browser.
• Payments in stores are processed by the payment providers the store owner connects (Stripe, PayPal, Airwallex or Adyen), under accounts that belong to the store owner. We never receive or store full card details.

7. Who we share data with

We use service providers that process data on our behalf, each bound by data processing terms and allowed to use the data only to provide their service to us:

• Supabase: database, authentication and file storage (servers in the EU, Ireland).
• Vercel: hosting of the website and stores.
• Anthropic: AI processing (Claude models).
• Resend: delivery of the emails of Anthecom and of the stores.
• ImprovMX: forwarding of the emails sent to our support address.
• AliExpress: when you use the product import and search features.

Fungies sells our subscriptions as merchant of record and processes your payment and billing data as an independent controller, under its own privacy policy. If you connect them, Stripe, PayPal, Airwallex and Adyen receive what they need to process your store's payments, under their own privacy policies.

We may also disclose data when required by law or by an authority, to protect our rights or the safety of others, or in case of a sale or transfer of the business, with appropriate safeguards. We never sell your personal data.

We may add or replace service providers as the Service evolves; we will update this list and, if a change materially affects how your data is processed, tell you in advance.

8. International transfers

Some of our providers are based in, or process data in, the United States or other countries outside the European Economic Area. These transfers are protected by the EU-U.S. Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses, together with additional measures where needed.

9. Security

We protect personal data with appropriate technical and organisational measures, including encryption in transit, encryption of API keys at rest, hashed passwords, access controls and limited access to data. No system is completely secure, so we can't guarantee absolute security. If a personal data breach occurs, we will notify the merchants affected and, where the law requires it, the competent authority and the people involved, without undue delay.

10. How long we keep data

• Account data and stores: while your account is active. When you close your account we delete them within 30 days, except backups, which are overwritten on a rolling basis.
• Billing and accounting records: as long as the law requires (up to 10 years).
• Support requests: up to 2 years after the last message.
• Store visit statistics: about 13 months.
• Technical logs: for a short time, usually a few weeks.
• Your customers' data: as long as you keep it in your store; it is deleted when you delete it, delete the store or close your account.

You can ask us to delete your data at any time by writing to support@anthecom.com; we act on verified requests within 30 days, except for data we must keep by law.

11. Cookies

anthecom.com uses only cookies that are strictly necessary for the Service to work, such as login cookies, and no analytics or advertising cookies. Details are in our Cookie Policy.

12. Your rights

Under the GDPR you can ask to access your data, correct it, delete it, restrict or object to its processing (including for direct marketing), and receive it in a portable format. Where we rely on your consent, you can withdraw it at any time, without affecting the processing done before. Write to support@anthecom.com: we will answer within one month. You also have the right to lodge a complaint with a data protection authority, such as the Italian Garante per la protezione dei dati personali (garanteprivacy.it) or the authority of the country where you live or work.

If you are a customer of a store built with Anthecom, please send your request to the store, which is the controller of your data.

Outside the European Union, you may have similar rights under the laws of your country: contact us and we will help you exercise them.

13. Children

The Service is a business tool for adults and is not directed at children. We don't knowingly collect data of people under 16. If you think we have, write to support@anthecom.com and we will delete it.

14. Changes to this policy

We may update this policy when our practices, the Service or the law change. We will tell you about significant changes by email or in the dashboard before they take effect, and we update the date at the top of this page.

15. Contact

Manuel Centrone, 20024 Garbagnate Milanese (MI), Italy. Email: support@anthecom.com. You can also reach us through the contact page at anthecom.com/contact.