Privacy Policy

This Privacy Policy explains how Coding Warehouse Limited ("we", "us", "our") collects, uses and protects your personal data when you visit our website or use the Itemise app (the "Service"). We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Coding Warehouse Limited is the data controller responsible for your personal data. We are a company registered in England and Wales (company number: 11913265), with our registered office at:

Coding Warehouse Limited
1007 London Road
Leigh-On-Sea
Essex
SS9 3JY
United Kingdom

If you have any questions about this policy or your data, contact us at hello@itemise.co.

What data we collect

Contact

When you get in touch with us (for example by email), we collect your name (if you provide it), your email address, and the contents of your message.

Photos and content you submit in the app

When you use Itemise, you upload photos of clothing and items so the Service can generate listing content. To do this, your photos are sent to our AI provider, OpenAI, for processing.

We do not store your photos on our own servers. We pass them to OpenAI to generate your listing and do not keep a copy ourselves. Your generated listing drafts are stored on your device.

Once your photos reach OpenAI, they are handled under OpenAI's own terms and privacy policy, which are outside our control. OpenAI states that data submitted through its API is not used to train its models and is retained only temporarily for abuse monitoring before deletion; however, we cannot guarantee how OpenAI handles your data beyond what they set out in their own policies.

Account data

When you create an Itemise account, we collect your email address, identifiers from your sign-in provider, and usage information such as how many listings you have generated and your listing balance. We use this to operate your account, apply your free sign-up listings and credit the listing packs you buy.

Technical and usage data

Like most websites and apps, we may automatically collect limited technical information such as your device type, browser, approximate location (derived from your IP address) and how you interact with the Service. We use this to keep the Service secure and working properly.

Analytics

We use PostHog (hosted in the EU) to understand how Itemise is used, such as screens and pages viewed, buttons tapped, features used, and inputs you provide to generate listings (such as descriptive hints), linked to your account where you are signed in. Session recordings are captured with all text input and all photos masked: recordings never contain your photo content or anything you type. We may use PostHog in the same way on our website as well as in the app.

Ad attribution

We use AppsFlyer in the app to measure which of our adverts (for example on TikTok or Meta) led people to install Itemise, sign up and buy a listing pack. AppsFlyer receives technical device information, an app-specific AppsFlyer ID, your Itemise user ID and pack purchases (forwarded by RevenueCat). On iPhone, it receives your device's advertising identifier (IDFA) only if you allow tracking when the app asks. On Android, it receives your device's advertising ID, which you can reset or delete in your phone's settings (Settings → Google → Ads, or Settings → Privacy → Ads). AppsFlyer passes attribution results to the ad networks we advertise with, so they can measure and improve our adverts. Itemise does not show adverts.

How we use your data and our lawful basis

• To respond to your enquiries, based on our legitimate interests in communicating with you and supporting the Service.
• To provide the Service (analysing your photos and generating listings), based on the performance of a contract with you and our legitimate interests in operating the app.
• To keep the Service secure and improve it, based on our legitimate interests in running a safe, reliable product.
• To understand how the Service is used (analytics, as described above), based on our legitimate interests in understanding and improving our product.
• To measure our advertising (ad attribution, as described above), based on our legitimate interests in knowing which adverts work. On iPhone, your device's advertising identifier is only used with your consent.
• To prevent fraud and abuse, based on our legitimate interests in preventing abuse of free sign-up listings and keeping the Service fair for everyone.
• To comply with legal obligations, where the law requires us to retain or disclose information.

Who we share your data with

We do not sell your personal data. We share it only with trusted service providers (processors) who help us run the Service, including:

• OpenAI: analyses the photos you submit to generate listing content.
• PostHog: provides product analytics and masked session recordings, hosted in the EU.
• RevenueCat: processes in-app purchases of listing packs made through the App Store or Google Play and keeps purchase records on our behalf.
• AppsFlyer: measures which of our adverts led to installs, sign-ups and purchases, and passes those results to the ad networks we advertise with.
• Our hosting and infrastructure providers: host the website and app services.
• Apple and Google: where you download Itemise or buy listing packs through the App Store, TestFlight or Google Play. They process those payments under their own terms.

These providers act on our instructions and are bound to protect your data. We may also disclose data if required by law or to protect our legal rights.

Fraud prevention

When you delete your account, we retain a minimal record (your email address, sign-in provider identifiers, and usage counts) to prevent abuse of free sign-up listings (for example, repeatedly creating new accounts to claim free listings). This record is not used for any other purpose.

International transfers

Some of our providers (such as OpenAI, RevenueCat and AppsFlyer) are based outside the UK, including in the United States. Where your data is transferred outside the UK, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses to ensure it remains protected. Analytics data processed by PostHog is hosted in the European Union, which the UK recognises as providing adequate protection.

How long we keep your data

• Photos you submit: not retained after your listing is generated.
• Account data: kept while your account is active. When you delete your account, your data is deleted except for the minimal fraud-prevention record described above and usage records (such as generation counts, processing costs and generated listing titles) retained for service accounting and abuse prevention. See how to delete your account.
• Other data: kept only as long as necessary for the purposes described above or to meet legal requirements.

Cookies

Our website does not use advertising or third-party tracking cookies. If you accept cookies via the banner on our website, PostHog analytics sets first-party cookies and uses local storage to recognise repeat visits and measure how the site is used. If you decline, analytics runs without storing anything on your device. We still count visits, but cannot recognise you between pages or visits. We remember your choice itself in your browser's local storage; clear your browser data to be asked again. We load web fonts from Google Fonts, which means your IP address is shared with Google to deliver those fonts. Any essential cookies used by our providers are limited to making the Service function.

Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate or incomplete data
• Ask us to erase your data ("right to be forgotten")
• Restrict or object to how we process your data
• Request portability of the data you provided to us
• Withdraw consent at any time, where we rely on consent

To exercise any of these rights, email hello@itemise.co. We will respond within one month.

Complaints

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We'd appreciate the chance to address your concerns first, so please do get in touch with us.

Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure, however, so we cannot guarantee absolute security.

Children

Itemise is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be communicated where appropriate.