Privacy Policy
This Privacy Policy describes how HS Codes Classifier ("Service", "we", "us") collects, uses, and protects your personal information when you use our website at boring-saas-infra.pages.dev, our REST API, our Model Context Protocol (MCP) server, and our Google Sheets add-on.
By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Who We Are
HS Codes Classifier is an independently operated service providing AI-powered HS (Harmonized System) code classification. The Service is operated by Oleksandr Loboda, a sole proprietor based in Ukraine.
Contact: support@boring-saas-infra.pages.dev
2. Information We Collect
2.1 Information you provide directly
- Email address — when you subscribe to the Pro plan, we collect your email address for account management and transactional communications.
- Product descriptions — the text you submit to the API for classification. These may contain business information about the products you are importing or exporting.
- Payment information — payments are processed by our third-party payment processor, Suby (suby.fi). We do not store your card number, bank account, or cryptocurrency wallet private keys. See section 4 for details.
2.2 Information collected automatically
- Log data — IP address, browser type, operating system, referring pages, and timestamps of your requests.
- Usage data — the number and type of API calls, feature usage, and error logs.
- Cookies and analytics — we use Google Analytics 4 (see section 5) to understand how the Service is used.
2.3 Information we do NOT collect
- We do not collect or store your full credit card number, CVV, or bank credentials.
- We do not store private keys for cryptocurrency wallets.
- We do not collect data on children under 18 (the Service is not directed to minors).
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service.
- Process your classification requests and return HS codes.
- Process subscription payments and manage your account.
- Send transactional emails (receipts, account notifications, service updates).
- Monitor and analyze usage to improve the Service.
- Detect, prevent, and address technical or security issues.
- Comply with legal obligations.
We do not sell your personal information to third parties.
4. Third-Party Service Providers
We share limited information with the following service providers to operate the Service:
| Provider | Purpose | Data shared |
|---|---|---|
| OpenAI (privacy) | AI classification of product descriptions | Product description text |
| Suby (suby.fi) | Payment processing (Merchant of Record) | Email, subscription details, payment metadata |
| Cloudflare (privacy) | Hosting, CDN, security | IP address, request metadata |
| Google Analytics (privacy) | Usage analytics | Anonymized usage data, cookies |
Each provider is bound by its own privacy policy and, where applicable, by data processing agreements with us.
5. Cookies and Tracking
We use cookies and similar technologies for:
- Analytics — Google Analytics 4 sets cookies to measure traffic and usage patterns. You can opt out using the Google Analytics Opt-out Browser Add-on.
- Functionality — to remember your preferences and maintain session state.
You can control cookies through your browser settings. Disabling cookies may affect some features of the Service.
6. Data Retention
- Product descriptions — cached for up to 30 days to improve performance. After that, they are deleted.
- Account and payment records — retained as long as your account is active and for a reasonable period thereafter, as required by tax and accounting laws.
- Log data — retained for up to 90 days.
7. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate data.
- Deletion — request deletion of your personal data (subject to legal retention requirements).
- Objection — object to certain types of processing.
- Portability — request your data in a machine-readable format.
To exercise these rights, contact us at support@boring-saas-infra.pages.dev. We will respond within 30 days.
8. International Data Transfers
Our service providers (OpenAI, Cloudflare, Suby, Google) may process data in countries outside your own, including the United States and the European Union. These providers maintain safeguards such as Standard Contractual Clauses to protect your data.
9. Security
We implement reasonable technical and organizational measures to protect your information, including:
- HTTPS encryption for all traffic.
- API keys stored securely with limited access.
- Access controls on our internal systems.
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
10. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, contact us and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact Us
Questions about this Privacy Policy or our data practices? Contact us at:
Email: support@boring-saas-infra.pages.dev
Website: https://boring-saas-infra.pages.dev