Privacy policy

This policy explains what Boni Teknoloji A.S. ("we", "us") collects through getpimlet.com and the Pimlet app, why, and what you can do about it. Pimlet is for businesses; we do not knowingly collect data from children.

What we collect

• Public store data. To produce a catalog audit report we read the publicly available product data of a Shopify store (titles, descriptions, product types, SKUs, weights, prices, images). This is business data the store already shows to everyone.
• Contact details. Your email address and anything you write to us. If we email a brand about its report, we use a business contact address the store publishes.
• Orders. When you buy a report, Paddle collects your payment details, billing details and tax information. We do not see or store your card number. We receive the details needed to deliver the report and keep records: your email, name or company, country, order number and amount.
• App account data. If you sign in to the app: your email, your company name, the product data you add or import, the suggestions you accept or reject, and the usage needed to run the service (such as AI request counts).
• Technical data. Our hosting provider keeps ordinary server logs (such as IP address and browser type) for security and reliability. We do not use advertising or third-party tracking cookies.

Why we use it

• To produce and deliver your report and to run the app.
• To take payment, prevent fraud, handle refunds and keep tax records.
• To reply to you and to tell you about Pimlet.
• To improve Pimlet, using aggregated findings rather than your identity.

We do not sell your data and we do not use it for advertising.

Marketing email

If we email you about Pimlet, each message says who we are, includes our postal address and has a working unsubscribe link or a plain way to ask us to stop. We honor those requests promptly.

AI processing

In the app, product data you provide is sent to an AI provider (Anthropic) to draft suggestions. Internal figures such as cost and margin are never placed in text meant for your customers. We do not use your data to train AI models; the provider's own API terms govern how it handles the data it receives.

Who handles your data

These providers act on our behalf:

• Paddle: payments, tax and receipts (also acts as merchant of record).
• Supabase: database and sign-in, hosted in the United States.
• Vercel: website hosting.
• Anthropic: AI drafting inside the app.
• Our email service provider: sending and receiving email.

We may also share data when the law requires it, or to protect our rights. We are based in Türkiye; the data described here is stored with the providers above, mainly in the United States.

How long we keep it

Report files and order records are kept for as long as we need them to support you and to meet tax and accounting rules. App data is kept while your account is active. You can ask us to delete it sooner (see below).

Your choices

You can ask us to show, correct or delete the personal information we hold about you, or to stop emailing you. If you live in California or another place with privacy laws, you have the rights those laws give you, and we will not treat you worse for using them. Email hello@getpimlet.com. We may need to confirm it is you.

Changes

If we change this policy, we update the date above. For significant changes we will tell people who have an account.

Contact

Boni Teknoloji A.S., ITU ARI 8 Teknokent Sariyer Istanbul Turkiye. hello@getpimlet.com