Privacy Policy

Last updated: 2025

1. Who We Are

Autoreta is a product of Cubelet LTD (United Kingdom). We act as a controller and processor of personal data depending on the context of processing. This policy explains how we collect, use, share, and protect personal data when you use our Services.

2. What We Collect

  • Account data: name, email, authentication identifiers, billing details.
  • Usage data: device info, record data, IP address, browser type, and interactions with the Services.
  • Customer content: product data, chat transcripts, and files you upload.
  • Integrations data: data retrieved from authorised third-party platforms (e.g., Shopify, WooCommerce).

3. How We Use Data

  • Provide, operate, maintain, and improve the Services.
  • Personalise experiences, including AI-generated responses and recommendations.
  • Ensure security, prevent abuse, and troubleshoot issues.
  • Process payments and manage subscriptions.
  • Comply with legal obligations and enforce our Terms.

4. Legal Bases

We rely on the following legal bases under UK GDPR: performance of a contract, legitimate interests, consent (where required), and compliance with legal obligations.

5. Sharing of Data

We share personal data with trusted processors that help us deliver the Services (e.g., cloud hosting, analytics, payments, authentication, and e-commerce integrations). We require such parties to process data only per our instructions and to implement appropriate security measures.

6. International Transfers

Where data is transferred outside the UK, we use appropriate safeguards such as UK IDTA/Addendum or standard contractual clauses, as applicable.

7. Data Retention

We retain personal data for as long as necessary to provide the Services and for legitimate business or legal purposes. Retention periods vary by data category and context.

8. Your Rights

  • Access, rectification, erasure, restriction, and portability.
  • Object to processing based on legitimate interests.
  • Withdraw consent at any time where consent is relied upon.
  • Lodge a complaint with the UK Information Commissioner's Office (ICO).

9. Security

We implement technical and organisational measures to protect personal data. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

10. Cookies and Tracking

We use cookies and similar technorecordies for functionality, analytics, and to respect your consent preferences. See your browser settings and our consent tools to manage choices.

11. Children

The Services are not directed to children under 16, and we do not knowingly collect personal data from them.

12. Changes

We may update this Privacy Policy from time to time. Material changes will be notified via the site or email.

13. Contact

Contact us at [email protected]. If you are in the UK, you may also contact the Information Commissioner's Office (ICO).

14. GDPR (EU/UK) Notices

For users located in the United Kingdom or the European Economic Area, we process personal data in accordance with UK GDPR and EU GDPR. Our processing bases include performance of a contract, legitimate interests, consent (where required), and legal obligations. You have the rights of access, rectification, erasure, restriction, portability, and objection. Where consent is the basis, you may withdraw consent at any time.

15. California Privacy Notice (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) provides the following rights:

  • Right to know what personal information is collected, used, shared, or sold.
  • Right to delete personal information held by us and our service providers.
  • Right to opt out of the sale or sharing of personal information.
  • Right to correct inaccurate personal information.
  • Right to opt out of the sale or sharing of personal information for cross-context behavioral advertising.
  • Right to limit the use and disclosure of sensitive personal information (if applicable).
  • Right to non-discrimination for exercising your rights.

Categories collected may include identifiers (e.g., name, email), commercial information (billing), internet or network activity (usage/analytics), and in some cases inferences to improve product functionality. We collect these from you, your devices, and authorised integrations, for purposes described in this policy. We disclose data to service providers for business purposes such as hosting, analytics, payments, authentication, and e-commerce integrations.

We do not sell personal information for money. Some analytics or advertising technorecordies may constitute "sharing" under California law. You can manage preferences via our consent tools (cookie banner) or submit a request using the contact below.

To exercise your rights, email [email protected].We will verify your request and respond within the timeframes required by law. You may designate an authorised agent to submit requests on your behalf.

16. Do Not Sell or Share My Personal Information

California residents may opt out of the sale or sharing of personal information. Submit a request to[email protected], and manage cookies/trackers via the consent banner on our site.

Loading chat...