Skip to content
GSAi
Log in
Back to Home

Privacy Policy

How GSAi protects and uses your data

Last updated: September 14, 2025

Data We Collect

  • Account information: Name, email address, encrypted password
  • Search data: Product searches you perform and search history
  • Supplier results: Information we find and save for your searches
  • Usage analytics: Which suppliers you view and interaction patterns
  • Security data: Login attempts and IP addresses for fraud prevention
  • Payment data: Billing details are processed securely by Stripe (we don't store card numbers)

How We Use Your Data

  • Search functionality: Find and display relevant wholesale suppliers
  • Account management: Login authentication, email verification, password resets
  • Service improvement: Analyze search patterns to enhance our AI algorithms
  • Communication: Send verification, billing, and support emails via SendGrid
  • Security: Prevent fraud and monitor suspicious account activity

Data Sharing & Protection

  • Third-party providers: Stripe (billing), SendGrid (emails), APIs like SERP/Qogita (supplier/product data), Google Analytics (processed by Google) and PostHog (usage analytics, hosted in the EU). Analytics only run if you accept them — see 'Cookies & Analytics Consent' below. PostHog also records how pages are used — clicks, scrolling and navigation. These recordings are configured to mask on-screen text, form entries and element attributes, so they show how the page was used rather than the content of your account, your searches or supplier pricing. These services process information strictly on our behalf.
  • Supplier websites: We scrape public information. We do not share your account or your individual searches with suppliers.
  • No selling of personal data: We never sell your personal information or your individual search history. We do use search data in aggregate — counts of what is being searched for and how often, with nothing that identifies you — to produce market reports for our supplier partners, so that they stock what UK sellers are looking for.
  • Encryption: Sensitive data encrypted in transit and at rest.
  • Secure access: Multi-factor authentication and audit logging available.

Your Privacy Rights

  • Delete account: Permanently remove your data anytime.
  • Export data: Download your search history and saved suppliers.
  • Update info: Change your email or password anytime.
  • Communication preferences: Opt out of marketing emails (security alerts always sent).
  • Access requests: Request a copy of all data linked to your account.

Cookies & Analytics Consent

Essential cookies

A small number of cookies are needed to run the service — keeping you signed in, securing forms and remembering your cookie choice. These are always active and cannot be switched off.

Analytics cookies

Google Analytics and PostHog help us see which pages and features are used, so we can improve them. They are never used for advertising. We ask before they start: until you accept, neither is loaded and neither stores anything on your device. If you decline, neither one runs.

Error and performance monitoring

Separately from analytics, we use Middleware.io to record page errors, load times and similar technical signals so we can keep the service working and secure. It does not build a profile of you and does not record your screen; screen recording there stays switched off unless you accept analytics.

Changing your mind

You can change or withdraw your choice at any time using the Cookie Settings link at the bottom of any page. Withdrawing stops the analytics tools and clears the cookies they set.

Data Retention & International Compliance

Data Retention

Account data kept while your account is active. Search history stored for up to 2 years to improve our service. You may request early deletion.

International Users

We comply with GDPR (Europe) and CCPA (California). If data is transferred internationally (e.g., to US providers), we use Standard Contractual Clauses (SCCs) to protect your information.

Children's Privacy & Contact Information

Children's Privacy

Our service is not directed to children under 16. We do not knowingly collect data from children.

Contact Us

You can reach our Data Protection Officer at: info@gsai.uk. We respond to requests within 30 days.

Updates

We may update this policy periodically. We'll notify you of significant changes via email or in-app notifications.