Privacy Policy

Who we are

Certisheet ("we", "us") is a self-serve service that generates Safety Data Sheets (SDS) and GHS compliance documents for small product brands. This policy explains what personal data we collect and how we use it.

What we collect

Account data: your name, email address, company/store name, and store URL when you sign up or submit our contact form.

Product content: product names, ingredient lists and percentages, packaging details, and the SDS documents you generate — you upload this so we can produce your sheets.

Payment data: payments are handled entirely by PayPal. We never see or store your card number; we receive only a payment reference and status.

Usage data: standard server logs (IP address, browser type, pages visited) kept for security and troubleshooting. Vercel Web Analytics provides aggregate traffic measurement, and optional Google Analytics measures page visits and product events when you consent.

Cookies and local storage: essential storage keeps you signed in and preserves campaign attribution. Google Analytics storage remains disabled until you choose Allow analytics in our consent notice. We do not use advertising personalization cookies.

How we use your data

To deliver the service: generate your SDS documents, sync with marketplaces you connect, and alert you to compliance issues.

AI guidance: when you explicitly request an AI analysis, we send the current product record, your question and automated findings to OpenAI to produce advisory structured output. The request is configured not to be stored by the model provider for later retrieval.

Support and service communication: to respond to your requests and send transactional emails (receipts, delivery notices).

Security and legal compliance: to protect accounts, prevent abuse, and meet legal obligations.

We do not sell your personal data, and we do not use your product formulations to train models for other customers' sheets.

Analytics preferences: you can decline optional analytics in the consent notice. Your choice is stored in this browser and can be cleared by deleting this site's local storage.

Sharing

We share data only with providers needed to run the service, including Vercel for hosting and aggregate web analytics, Google Analytics when you consent, PayPal for payment processing, transactional email providers, and OpenAI when you request AI analysis. Each processes data to provide its contracted service.

We may disclose data if required by law or to protect our rights, and in connection with a business transfer (with notice).

Retention and deletion

We keep your account and product content while your account is active. If you ask us to delete your account, we delete your product content and personal data within 30 days, except records we must keep for tax or legal reasons (e.g., payment references).

Your rights

You may request access to, correction of, export of, or deletion of your personal data at any time. Depending on where you live (e.g., EU/UK GDPR or California CCPA), you may also have rights to object to or restrict processing. To exercise any right, email support@certisheet.com or reach us from your account settings.

Security

We use encryption in transit (HTTPS), encrypted secrets storage, and access controls. No method of transmission or storage is perfectly secure, but we work to protect your data to industry standards.

Changes to this policy

If we change this policy, we will update this page and the "last updated" date. Material changes affecting how we use your data will be announced in the app or by email.

Contact

Questions about this policy? Email support@certisheet.com — we answer within a few business days.