Privacy Policy

The site and the Collaudo app are built and operated by WMIE S.R.L., an Italian limited liability company:

• Registered office: Via Dante Alighieri 93, 09128 Cagliari (CA), Italy
• VAT / tax code: IT04014830923 · REA: CA-356487
• Share capital: €10,000.00 fully paid
• Certified email (PEC): wmie@legalmail.it · privacy contact: privacy@wmie.it

For this website and your account, WMIE S.R.L. is the data controller. For the store data the app processes on your behalf, you (the merchant) are the controller and WMIE is the data processor — that relationship is governed by the Data Processing Agreement.

• Store data. The Shopify data reachable through the API scopes you explicitly grant at install: products, prices, inventory, and whatever each automation you set up needs.
• Prompts. The plain-English instructions you write to describe an automation.
• Account details. Your email address and the contact details you give us, including what you submit through the partner and template forms on this site.
• Site usage data. With your consent only, analytics and marketing cookies measure how this website is used — see the Cookie Policy.

• Contract (art. 6(1)(b) GDPR): store data, prompts, and account details — processing them is what running your automations means.
• Consent (art. 6(1)(a)): analytics, marketing, and functional cookies on this site. Nothing in those categories runs until you accept it, and you can withdraw at any time from “Cookie settings” in the footer.
• Legitimate interest (art. 6(1)(f)): keeping the site and the app secure, preventing abuse, and answering the messages you send us.
• Legal obligation (art. 6(1)(c)): tax and accounting records we are required to keep as an Italian company.

Each store gets AWS infrastructure in the EU region. Your store data is processed in the EU.

We use a short list of providers to run the site and the app:

• Amazon Web Services — hosting and compute for the app, EU region.
• Vercel — hosting for this website and its media files.
• Resend — transactional email (password resets, notifications).
• Google — Tag Manager and the analytics/marketing tags it loads, only after your consent (see the Cookie Policy).

Merchants can request the current sub-processor list with contractual details at any time via privacy@wmie.it.

Collaudo serves merchants worldwide, but store data stays on EU infrastructure. Where a provider processes data in the United States (Google, and Vercel or Resend for site-level data), the transfer relies on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework and, where needed, on Standard Contractual Clauses.

Your prompts are used to generate the automation code you asked for. The generated code runs only in your store's environment. We do not sell your data.

Automations that write to your store are held in dry-run mode until a human approves them. The dry-run report, a list of every change the automation proposes, is kept as an audit trail.

When you uninstall the app or terminate your account, we delete your data, including your store's environment. Records we must keep by law (invoices, tax records) are retained for the statutory period. Your cookie consent choice is stored for 6 months, after which the banner asks again; analytics cookie lifetimes are listed in the Cookie Policy.

Under the GDPR you can ask us for access to your data, have it corrected or erased, receive a copy in a portable format, restrict or object to processing, and withdraw any consent you gave (for cookies, use “Cookie settings” in the footer — withdrawing is as easy as accepting). Write to privacy@wmie.it; we answer within 30 days. You can also lodge a complaint with your local supervisory authority — in Italy, the Garante per la protezione dei dati personali.

This site sets no analytics or marketing cookies until you accept them from the consent banner (Google Consent Mode v2, all signals denied by default). What each cookie does, who sets it, and for how long is documented in the Cookie Policy.

If we change this policy in a way that matters (new purposes, new providers), we update this page and its date. The current version is always at this address.