Privacy Policy

Effective date: 17 October 2026

This Privacy Policy explains how Productised.ai ("Productised", "we", "us", or "our") collects, uses, and protects personal information when you visit our website or use our platform.

Who we are

Productised is operated by PRODUCTISED LIMITED, a company registered in New Zealand (New Zealand Business Number 9429042033851), of Suite 12, Level 1, 130 St Georges Bay Road, Parnell, Auckland 1052, New Zealand.

Productised is a platform for building AI-powered products, such as diagnostics, scorecards and advisors, that our customers share with their own audience.

For privacy enquiries, contact us at privacy@productised.ai.

Our two roles

We are the controller of personal information about our own customers and users (the people who sign up for Productised), and about visitors to our website.

We are a processor of personal information that our customers collect from their own audience through the products they build on Productised (their "Leads"). Each customer decides what their products ask and what happens to the answers, so the customer is the controller of that information and we process it on their behalf and on their instructions. If you used a product built on Productised, the business that published it is responsible for your information. Please contact them first; we will help them respond.

Business customers can sign our Data Processing Agreement, which sets out these terms under Article 28 of the GDPR.

What information we collect

Account information — When you sign up, we collect your name, email address, and business details necessary to create and manage your account and workspaces.

Product and workspace data — We store the AI products you build on our platform, including prompts, conversation designs, workflow configurations, page content, and knowledge you upload.

Lead data (as a processor) — When someone uses a customer's product, we store what they share in the AI conversation, voice recordings if they use the speak button, the AI-generated result, and, if the product asks for them, their name and email address. We also store the referral source of the visit. The customer controls what their product collects.

Website and usage data — We collect server logs, page views, and analytics events to operate and improve our website and platform. See "Website analytics and advertising" below.

Payment information — Billing and payment processing is handled by Stripe. We do not store your full card details.

Claude connector data — If you connect your Productised workspace to Claude through our connector, conversation context (including your product data and lead responses) is processed through your own Claude session. This is equivalent to you viewing that data yourself inside Claude. See Anthropic's Privacy Policy for how Anthropic handles conversation data.

How we use your information, and our legal bases

  • To provide the platform you signed up for — creating your account, running your products, sending service emails, and billing you. Legal basis: performance of our contract with you.
  • To keep the platform secure and working — preventing abuse and fraud, monitoring errors, and verifying sign-ups. Legal basis: our legitimate interests in running a secure service.
  • To understand and improve how the platform is used — product-usage analytics for signed-in customers. Legal basis: our legitimate interests.
  • To send you product updates and marketing — only where you have opted in, or where the law allows us to contact existing customers. You can unsubscribe at any time. Legal basis: consent, or our legitimate interests.
  • To measure and advertise our own services on our website — see below. Legal basis: consent.
  • To meet legal obligations — such as tax and accounting records. Legal basis: legal obligation.

We process Lead data only to provide the platform to the customer who collected it, under that customer's instructions.

We do not sell your personal information or your audience's information to third parties.

AI processing

AI-generated outputs are produced using third-party AI providers, mainly Anthropic's Claude. Prompts, conversation content and answers are sent to these providers to generate replies and results. Some supporting features use OpenAI, including turning voice recordings into text and our customer knowledge search ("Brain").

These providers process the data under their commercial API terms, which do not allow them to use it to train their AI models. Customers can add their own Anthropic API key to a workspace, in which case that workspace's AI conversations run on the customer's own Anthropic account.

Public product pages tell visitors that their answers are processed by AI.

Where your information is stored

Our platform is hosted in the United States: the application on Fly.io (Virginia) and the database on Supabase (Amazon Web Services, us-east-1). Files are stored on Cloudflare R2.

When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland to the United States, we rely on the EU-US Data Privacy Framework where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses. New Zealand, where our company is based, is recognised by the European Commission as providing adequate protection.

Who we share information with

We share personal information only as needed to run the platform, with service providers ("sub-processors") who are bound by contract to protect it:

  • Hosting and storage — Fly.io, Supabase, Cloudflare
  • AI providers — Anthropic, OpenAI, and providers of knowledge search and web research inside products
  • Email and notifications — Postmark (including new-lead notifications to customers) and Novu
  • Payments — Stripe
  • Analytics and support — including Grain, which stores data in Frankfurt, Germany, and receives an account identifier and usage events only, never your audience's answers or lead details

The full, current list, with what each provider sees and where it is located, is on our Sub-processors page.

We may also disclose information if required by law, or as part of a merger, sale or transfer of our business, in which case the information remains protected by this policy.

Website analytics and advertising

Our marketing website (productised.ai) uses cookies and similar technologies, including Google Tag Manager, the Meta Pixel, Kissmetrics, Plerdy, Vercel Analytics, Grain, and the Gist and Answerly chat widgets. These help us understand how visitors use our site and measure our advertising. You can manage your choices with the cookie banner on our website.

The public pages of products built on Productised do not carry our website's advertising tags. They use cookieless page analytics (Simple Analytics), and load a small number of services needed to run the page, such as bot protection, fonts and icons. Customers may add their own tracking to their products, and are responsible for telling their visitors about it.

Full details are in our Cookie Policy.

How long we keep information

  • Account and workspace data — for as long as your account is active. When an account is closed, you may export your data first, and we then delete it within 30 days, except where we must keep records by law (for example, billing records for tax purposes).
  • Lead data — until the customer deletes it, deletes the product or workspace, or closes their account. Customers can delete individual leads at any time, and can set an automatic retention period for each workspace under Settings → Data retention.
  • Backups — deleted data is removed from backups as they are overwritten in the normal cycle.
  • Website analytics — according to each provider's settings, as described in our Cookie Policy.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict how we use it, and to withdraw consent at any time where we rely on consent.

You can make a request by emailing privacy@productised.ai or through our data request form. We respond within one month. If your request concerns a product built on Productised, we will pass it to the business that published that product.

If you are in the EU or UK, you also have the right to complain to your local data protection authority. In New Zealand, you can complain to the Office of the Privacy Commissioner.

California residents: see our CCPA Privacy Notice for additional rights.

Security

We protect personal information with measures including encryption in transit and at rest, server-side access checks on every account's data, separation between workspaces, and restricted access to production systems. See our Security page for details.

Children

Productised is a business service and is not directed at children. Customers must not use their products to collect information from children under 16.

Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or by a notice in the platform. The effective date at the top of this page reflects the most recent version.

Contact us

For any privacy questions or requests, contact us at privacy@productised.ai, or write to PRODUCTISED LIMITED, Suite 12, Level 1, 130 St Georges Bay Road, Parnell, Auckland 1052, New Zealand.