Privacy

How GPSR Audit handles personal data. Last updated 18 October 2026.

Who is responsible

The data controller is PIXELQUALITY - LDA (NIPC 518314952), Rua da Igreja n.º 10, 4490-517 Póvoa de Varzim, Portugal. To exercise a right or ask a question about your data, use the contact form.

What we collect, and why

Free audit

Your answers are scored in your browser. If you enter your email to download the PDF report, we receive and store: your email address, the language of the page, your score, your answers to the ten questions, and the markets you selected. We use them to send you the report, to follow up on it, and to understand how the audit is used. We never sell this data.

Green Claims Scanner

The text you paste is analysed in your browser and is not sent to us. Only if you ask for a rewrite or leave your email do we receive your email address and the related request.

Contact form

Your name, company (optional), email address, the topic and your message, and the page language, so that we can answer you.

Connecting your Amazon account

When you authorise GPSR Audit in Amazon Seller Central, Amazon gives us an authorisation token for the Selling Partner API. We store that token in a restricted database table, together with your seller account identifier, the marketplaces concerned and, if you provide it, your email address. We never see your Amazon password. We read your listings’ compliance attributes to produce your report, and we write compliance attributes only to the listings you approve. You can revoke access at any time from Seller Central (see Support).

Subscriptions and payments

Payments are handled by Stripe. We do not receive or store your card number. We keep your plan, subscription status and the Stripe customer and subscription identifiers, and the billing details you give Stripe, as needed to run your subscription and to meet invoicing and tax obligations.

Technical data

Our hosting provider receives your IP address and browser information when you load a page. We use a short-lived counter (about one minute) tied to your IP address to limit abuse of our forms. We measure traffic with Cloudflare Web Analytics, which does not use cookies to follow you across sites.

Cookies

The public pages set no advertising or tracking cookies. The customer area sets a session cookie so that you stay signed in; it is strictly necessary and is not used for any other purpose.

Legal bases

• Your request or consent — when you ask for the report, send us a message or connect your account.
• Performance of a contract — when you subscribe to a paid plan.
• Legal obligations — invoicing, tax and accounting records.
• Our legitimate interest — securing the service and preventing abuse.

Who receives your data

We use service providers to run the service: Supabase (database, European region), Cloudflare (hosting, DNS, email routing and traffic measurement), Resend (sending emails) and Stripe (payments). Amazon receives only what is needed to process the authorisation and the listing updates you approve. Some of these providers are based outside the European Economic Area; transfers rely on the safeguards they provide, such as the EU–US Data Privacy Framework or standard contractual clauses. We do not sell your data and we do not share it for advertising.

How long we keep it

We keep data only as long as needed for the purpose it was collected for, and for as long as the law requires us to keep accounting and tax records. You can ask us to delete your data at any time, and to remove the stored Amazon authorisation token.

Your rights

You have the right to access, correct or delete your data, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. Write to us through the contact form. You may also lodge a complaint with the Portuguese data protection authority, the CNPD (cnpd.pt), or with the authority of your own country.

Changes

We will update this page when our practices change and show the date of the last update at the top.