Privacy Policy

Productus (productus.ai) is operated by Elio Keddisseh, an individual acting in his own name, pending the incorporation of Productus as a company in Singapore. In this policy, “we” and “us” mean Elio Keddisseh.

Elio Keddisseh is the data controller for the personal data described here, on a temporary basis. Once the Singapore company exists, it will take over as operator and controller. We will update this page and email every account holder before that happens.

You can reach us about anything in this policy at hello@productus.ai, or by post at 10 Rue de Provence, 31400 Toulouse, France. There is no data protection officer, because the law does not require one for these activities; Elio handles every request personally.

Who this policy covers

This policy covers three groups of people.

• Visitors to productus.ai.
• Account holders: people who sign up to Productus, and the teammates they invite.
• People whose feedback a customer brings into Productus: for example a customer's users who leave a note in the feedback widget, or whose reviews, tickets and emails a customer imports. For this group, our customer decides what is collected and why, and is the data controller. We process that data only on the customer's instructions, as their processor. If you are in this group, contact the customer first; if you write to us instead, we will pass your request to them and help them answer it.

What we collect, and why

Account data. When you sign up we collect your email address, the name your sign-in provider shares with us (Google or GitHub), the name of your workspace and the product context you choose to enter (a product name, a description, your goal, your target users, and any product document you upload for context). We use it to run your account, to send you the emails the service needs (sign-in codes, invitations, confirmations) and to support you. When a teammate invites you, we receive your email address from them. Legal basis: performing our contract with you.

Sign-in and security. You sign in with a code sent to your email, or through Google or GitHub. Sign-in forms and the feedback widget are protected by Cloudflare Turnstile, which looks at your IP address and browser signals to check that a request comes from a person. We also keep short-lived server logs (IP address, the page or endpoint requested, time) to keep the service secure and to fix errors. Legal basis: performing our contract with you, and our legitimate interest in keeping the service secure.

The feedback and revenue data you bring in. This is the heart of the product: feedback text you paste or upload as a CSV, reviews pulled from a connected app store listing, emails you forward to a Productus address, notes left in your feedback widget, and the customer names, emails and revenue figures you enter or upload so that a theme can show the paying customers tied to it. Depending on the source it can include names, email addresses, user identifiers, the page a note was left on, and whatever people wrote. You decide what to bring in; we process it to give you themes and priorities, and to produce the anonymised aggregate statistics described under “How the AI processing works”. For this data our customer is the controller and we are the processor (see “Data we process on your behalf” in the Terms of Service). We never sell it, never use it for advertising, and never share it with other customers.

Connected sources. When you connect an app store listing, we store the credentials you give us in an encrypted vault and use them only to fetch reviews for your workspace.

Usage analytics. We use PostHog, hosted in the European Union, to count how the site and the app are used: pages viewed (with their address, except that invitation and sign-in codes, search terms, email addresses and error messages in it are replaced by a placeholder before anything is sent), buttons clicked (but not the text on them), actions taken in the app, where on a page people click, page loading performance, and browser and device type. We do not record sessions or replay screens, and we never look up your location. How PostHog tells one visit from another depends on the choice you make in the cookie banner. If you have not chosen yet, or if you rejected cookies, PostHog stores nothing in your browser: it computes, on its own servers, a code from your IP address, your browser's user agent and a value that changes every day and is then deleted; it does not keep your IP address, and we do not link these statistics to your account, your name or your email address. If you accepted cookies, PostHog keeps a random identifier in a cookie and in your browser's storage for up to 6 months (Safari limits this to 7 days), so that your visits over time count as one visitor, and from the moment you sign in we link that identifier to your user ID (never to your email address or your name), so we can see which pages lead to sign-ups and what people do after they join. The link starts from the moment you accept; visits before that stay anonymous. Separately, the app counts actions per workspace on our own servers (for example that a workspace imported feedback), without any data from your browser. Legal basis: your consent for the measurement that uses your browser's storage; our legitimate interest in understanding and improving the product for the measurement that stores nothing in your browser and for the per-workspace counts.

Where you came from. If you arrive on productus.ai through a campaign link (a link carrying utm parameters or a ref parameter) and create a workspace during the same visit, we save the campaign details, the referring site and the landing page on the workspace, so we can tell which channels bring real users. These details travel in the page address. If you accepted cookies, a cookie also remembers the first campaign link that brought you here for 90 days, so a workspace you create on a later visit is still counted under that channel; if you did not, nothing is stored in your browser for this. The campaign details are kept only on a workspace you create; the cookie expires on its own. Legal basis: our legitimate interest in knowing which channels bring real users; your consent for the 90-day cookie.

Emails we send you. We only send emails the service needs: sign-in codes, a welcome message, invitations, plan changes, and confirmations when a workspace or an account is deleted. We do not send marketing email today. If we ever start, it will be opt-in and every message will carry an unsubscribe link.

Support. When you write to us, we keep the conversation for as long as we need it to help you and to keep a record of what was agreed.

We make no decision about you by automated means that has legal or similarly significant effects on you.

How the AI processing works

Productus reads feedback with AI models run by two providers.

• Classification and theme naming run on Anthropic's Claude models. Before text is sent, we strip email addresses, card numbers, bank account numbers, phone numbers and IP addresses from it with automated rules. Three steps send text without this stripping: splitting a pasted block of text (up to about 32,000 characters) into separate items, reading the first rows of a CSV to detect which column holds what, and the product context you entered, which is sent as written so the models understand your product. Anthropic does not use this data to train its models and deletes it within 30 days, unless it has been flagged for a breach of Anthropic's usage policy. Anthropic stores API data in the United States, and its processing may run in the United States or in other countries.
• Embeddings (the numeric representation that lets us group similar feedback) are computed by Google's Vertex AI, using the same stripped text, on servers within the European Union. Google does not use this data to train its models.

The themes, summaries and priorities you see in Productus are generated by these models from your data. They can be wrong. The “revenue at risk” figure on a theme is the summed current revenue of the paying customers we could match to it: a floor, not a total, and never a prediction. Always read it with the match rate shown next to it.

We may use aggregate, anonymised statistics across all workspaces (how many items fell into each category, how often a suggested category was corrected) to improve classification. No feedback text, no theme names, no names, no email addresses and no embeddings ever leave your workspace for that purpose.

Where your data lives

Your workspace data is stored in Frankfurt, Germany, in a Supabase database, and the application runs on Vercel servers in Frankfurt. Daily backups are kept for 7 days. Usage analytics are stored in Frankfurt by PostHog. Because Vercel and Cloudflare operate worldwide edge networks, a request you make may pass through a location closer to you before it reaches Frankfurt, and the check that you are signed in runs there.

Some processing happens outside the European Union: AI classification by Anthropic, email delivery by Resend (United States) and background job scheduling by Inngest (United States; the messages it carries contain only record identifiers, never feedback text). For every transfer outside the EU we rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, on the EU-US Data Privacy Framework.

Our subprocessors

These are the companies that handle personal data for us. We will update this list and email account holders before adding one, and account holders can object by closing their account.

If you sign in with Google or GitHub, that provider processes your sign-in under its own privacy policy, as an independent controller.

Paid plans are not on sale yet. When they open, a payment provider will be added to this list before the first charge.

Cookies and browser storage

Productus uses cookies or browser storage for analytics only if you accept them in the cookie banner. The feedback widget your customers see sets no Productus cookie and loads no analytics.

Sign-in forms and the feedback widget include Cloudflare Turnstile, a security check that tells people from bots. It runs in its own frame from Cloudflare's domain and may keep a short-lived token in your browser while it works; it is used only for security. The app also keeps a few of your settings in your browser's storage (for example your light or dark theme choice, cards you have dismissed and a widget key shown once). They never leave your browser and are not used for tracking.

The banner offers Accept and Reject side by side, and the site and the app work the same whichever you choose. The choice belongs to the browser you made it in: another browser or device asks again, and a person who shares your browser inherits it until it is changed. You can change it at any time from “Cookie choices” in the footer of productus.ai, or with the button below. We ask again after 6 months, or sooner if what we ask for changes. You can also delete or block cookies in your browser; blocking the sb- cookies signs you out.

How long we keep your data

• Your account and workspace data stay for as long as your account exists. You can delete a workspace, or your whole account, from Settings. Deletion is immediate and permanent: the feedback, the themes, the customers, the revenue figures, the embeddings, the invitations and the stored credentials are erased together, with no grace period and no undo. We send one confirmation email, then hold nothing except the items below. Deleting your account removes you from a workspace that other members still use; that workspace, and the feedback you added to it, stay with them.
• Backups of the database roll over every 7 days, so a deleted workspace disappears from backups within a week.
• Records kept after deletion. We keep a minimal financial audit trail (plan events, keyed to the workspace identifier, with no personal data). Usage analytics recorded before 29 September 2026, and analytics recorded while you had accepted cookies, may carry your user ID, without your email address; deleting your account also asks PostHog to erase them, which PostHog completes in the background, usually within a week; if you want them erased without deleting your account, write to us and we will do it within one month. Other analytics are not linked to you.
• Usage analytics are kept for as long as we need them to understand how the product is used, and deleted on request. Server logs are kept by our hosting provider for a matter of days.
• At our providers. Email content is kept by Resend for 30 days. Text sent to Anthropic is deleted by Anthropic within 30 days.
• Free workspaces with no sign-in for 12 months may be deleted after we have emailed you at least 30 days in advance.
• Emails you send us are kept for as long as we need them to answer you and to keep a record of what was agreed.

Your rights

Under the General Data Protection Regulation you can ask us to access, correct, erase or export the personal data we hold about you, to restrict or object to how we use it, and to withdraw a consent you gave. Write to hello@productus.ai. We answer within one month. You can also complain to the French data protection authority, the CNIL (cnil.fr), or to the authority of the EU country where you live.

Two shortcuts need no email: you can export your whole workspace as CSV files from Settings at any time, and you can delete a workspace or your account from Settings. To erase one person's items from a workspace, write to us and we will do it within 30 days.

If your data reached Productus through one of our customers (their widget, their imports), please ask that customer: they hold your data and we act on their instructions. We will help them respond.

Security

Data is encrypted in transit and at rest. Connected-source credentials are stored in an encrypted vault and are never shown again once saved. Each workspace is isolated from every other, and every request is checked against the workspace it belongs to. Access to production data is limited to the founder, and only for support and operations. No system is perfectly secure; if we ever learn of a breach that affects you, we will tell you and the authorities as the law requires.

Children

Productus is a tool for people who build products, and is not intended for anyone under 18. We do not knowingly collect data from children.

Changes to this policy

When we change this policy in a way that matters, we will email account holders before the change takes effect and update the date at the top. The change of operator described at the top of this page will be announced the same way.

Contact

Elio Keddisseh, 10 Rue de Provence, 31400 Toulouse, France. Email: hello@productus.ai. Phone: +33 6 35 24 83 41. Publication director: Elio Keddisseh. The site is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States, privacy@vercel.com; Vercel publishes no phone number.