Privacy Policy

Data We Collect

• Account Information: When you license the dataset, request the free sample, ask to hear about the hosted API, or create an API account, we collect your email address and name to manage your access and provide updates.
• Transaction Data: Payments are processed by a third-party payment provider. We do not store your credit card details on our servers. Our payment provider shares confirmation of purchase and basic billing details with us.
• Usage Data: We may collect technical data such as IP addresses and browser types to improve our site performance and prevent unauthorized access.
• API Request Logs: When you use the hosted API, we log each request: the endpoint called, the identifiers of the products or ingredients requested, any search terms or filters, the API key used, the response status, and the time. These logs are retained for up to two years for billing, security, capacity planning, and the Aggregated Usage Insights described below.

How We Use Your Data

• To deliver the dataset files (CSV, JSONL, SQLite, and Image archives).
• To notify you of version updates and “refresh” pricing.
• To send occasional product announcements, such as a new dataset release or a new hosted API feature, to people who requested the sample, asked about the API, or bought a license. Every such email includes an unsubscribe link, and opting out never affects transactional emails about your purchase or account. You can also opt out by emailing [email protected].
• To provision and manage your hosted REST API subscription and keys.
• To comply with legal obligations and prevent fraudulent transactions.
• To produce Aggregated Usage Insights (see below).

Aggregated Usage Insights

We may combine API request logs across all customers into aggregated, anonymised statistics, for example which products, brands, ingredients, or search terms are most frequently looked up over a period of time (“Aggregated Usage Insights”). We may use, publish, license, or sell Aggregated Usage Insights, including to cosmetics brands, manufacturers, and retailers.

Aggregated Usage Insights never identify you, your organisation, your account, your API keys, your end-users, or any individual request, and are only produced from data pooled across multiple customers. We never disclose any customer’s individual query history or per-account usage to a third party.

If you do not want your requests included in Aggregated Usage Insights, email [email protected] from your account email and we will exclude your API keys going forward.

Data Sharing & Security

• No Selling of Personal Data: We never sell, rent, or trade your personal information, your account details, or your individual API usage to third parties. Aggregated Usage Insights, described above, contain no personal information and are the only usage-derived product we offer.
• Service Providers: We share data only with essential partners (such as our payment processor and hosting provider) to maintain service.
• Security: We use industry-standard encryption to protect your account and transaction data.

Your Rights

You may request access to the personal data we hold about you or ask for its deletion at any time by contacting us at [email protected].