Privacy Policy — ShopPolicy
Last updated: 27 July 2026
Who we are
ShopPolicy (shoppolicy.eu) is operated by [Sašo Špacapan s.p., address — to be completed on registration], established in Slovenia. Contact for all privacy matters: hello@shoppolicy.eu.
What we process, and where it lives
- Your shop answers (shop name, URL, country, contact email, product types, platforms, payment methods, carriers, return window, tools): used to generate your documents. They are stored in your own browser (localStorage) so your form stays filled — we keep no copy in any database, and you can remove them by clearing your browser data.
- Document generation: your answers are sent to Anthropic (our AI processor) to fill our document templates. Generated documents are returned to your browser and are not stored on our servers — they are regenerated on demand.
- Purchases: payment is handled by Stripe on their hosted checkout. We never see your card details; we receive your email address and a transaction reference, which we use to issue your unlock and send your receipt email (via Resend).
- Free-tier limits: we process your email address and IP address transiently to enforce the one-free-document limit and protect the service from abuse.
- Hosting logs: our hosting provider (Vercel) keeps short-lived technical request logs.
Legal bases
- Contract (Art. 6(1)(b) GDPR): generating your documents, processing your purchase, delivering your unlock email.
- Legitimate interests (Art. 6(1)(f) GDPR): abuse prevention and service security (rate limiting).
- Legal obligations (Art. 6(1)(c) GDPR): tax and accounting records for purchases.
Processors and transfers
We use Anthropic (AI generation), Stripe (payments), Resend (email), and Vercel (hosting) as processors. Some are established outside the EEA (United States); where personal data is transferred, we rely on adequacy decisions (including the EU–US Data Privacy Framework where applicable) or Standard Contractual Clauses.
How long we keep data
- Shop answers: in your browser only, until you clear them.
- Generated documents: not stored by us.
- Purchase and receipt records: as long as statutory tax and accounting retention requires.
- Unlock authorizations expire 30 days after purchase.
Cookies and local storage
We set no advertising or analytics cookies. We use your browser's local storage strictly to keep your answers and unlock state on your device.
Your rights
You have the GDPR rights of access, rectification, erasure, restriction, portability, and objection. Contact us at hello@shoppolicy.eu. You may also lodge a complaint with a supervisory authority — in Slovenia, the Information Commissioner (IP RS), or the authority of the EU country where you live or work.
ShopPolicy is a template-based document generator, not a law firm. Generated documents are informational and not legal advice.