Privacy Policy

StorePeek ("we", "us") is responsible for your personal data as the data controller under the General Data Protection Regulation (GDPR).

[Your legal name or company name]
[Street and number, postcode, city, Netherlands]
Chamber of Commerce (KvK): [KvK number]
Email: [email protected] · Phone: +31 6 19252532

• Account details: your email address, when you signed up, your plan, and basic activity such as when you last used StorePeek and how many audits you've run.
• Audits: the web addresses of the stores you audit and the results (issues found, scores and summaries). To run an audit we take screenshots of the store's public pages; these are deleted as soon as the analysis is finished.
• Free checks without an account: the store's web address, the results and your IP address. We use the IP address to limit how many free checks one person can run.
• Questions you ask the AI about a report: sent to our AI provider to get an answer. We don't store the text of your questions.
• Payments: handled by Stripe. We never see or store your card details. We keep your Stripe customer reference, your plan and the status of your subscription.
• Agency branding: if you're on the Agency plan, the business name and logo you add to your reports.
• Messages to us: anything you send us by email or tell us by phone.
• Technical data: like every website, our servers log requests, including IP addresses, to keep the service secure and fix problems.

• To provide StorePeek (performance of our contract with you): creating your account, sending sign-in links, running audits, monthly re-checks, reports and share links you create, and handling your subscription.
• To keep StorePeek safe and working (legitimate interest): preventing abuse of free checks, blocking misuse, and finding and fixing errors.
• To understand how people use the site: which pages are visited and how visitors find us, so we can improve StorePeek. With analytics cookies only if you allow them (your consent); otherwise only anonymous visit counts without cookies (legitimate interest).
• To meet legal obligations: keeping payment and invoice records as required by Dutch tax law.
• To tell you about StorePeek, only if you've agreed to it. You can unsubscribe from any marketing email at any time.

We only share data with the services we need to run StorePeek. They process it on our behalf and may not use it for their own purposes.

• Railway: hosts StorePeek and its database, on servers in the EU.
• Google: Gemini AI analyses the screenshots of the store you audit and answers your questions about reports; Google PageSpeed measures the store's loading speed.
• Resend: sends our emails, such as sign-in links and monthly check reports.
• Stripe: payments and subscriptions.
• Cloudflare: delivers our website securely and protects it against attacks.
• Google Analytics: which pages are visited, how visitors arrived, and their device type and approximate location. It only sets cookies if you allow it.
• Sentry: error reports when something breaks, so we can fix it. These don't include your IP address.

Some of these companies are based in the United States. Where data leaves the European Economic Area, it's protected by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We may also share data if the law requires it.

Share links are public by design: anyone with a report's share link can view that report, but not your email address or account. You can turn a share link off at any time.

Needed for the site to work: your browser stores a sign-in token so you stay signed in, briefly remembers the store address you typed while you sign in, and remembers your cookie choice. We don't ask permission for these.

Analytics cookies, only with your permission: if you click Allow, Google Analytics sets cookies (named _ga) to recognise returning visitors and see how people use StorePeek. If you don't, it sets no cookies and can only count anonymous visits, without recognising you. We don't use cookies for advertising.

You can change your mind at any time with Cookie settings at the bottom of every page. Withdrawing your permission removes the analytics cookies.

• Your account and audits: for as long as you have an account. When you delete your account, we erase it and everything in it.
• Payment and invoice records: 7 years, because Dutch tax law requires it.
• Free check data and server logs: only as long as needed to prevent abuse and fix problems.
• Analytics data (if you allowed it): up to 14 months in Google Analytics, then deleted automatically.
• Launch list sign-ups: until we launch and have told you about it, and for the launch-day draw if you entered.
• Emails you send us: as long as needed to help you, and then deleted.

Under the GDPR you can ask us to:

• show you the personal data we hold about you, or send it to you in a portable format;
• correct it if it's wrong;
• delete it, which also deletes your account;
• restrict how we use it, or object to how we use it.

You can delete your account and everything in it yourself, in your dashboard under Account. For anything else, email [email protected] from the address you sign in with, and we'll respond within one month. If you're unhappy with how we handle your data, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Our site is only available over an encrypted connection. Sign-in links work once and expire after 15 minutes, and we store sign-in tokens in a form that can't be read back. Access to customer data is limited to the StorePeek team.

StorePeek is a tool for businesses and isn't meant for anyone under 16. We don't knowingly collect data from children.

If we make important changes, we'll update the date at the top and, if you have an account, tell you by email.