Privacy

Who we are

VISIONIC AI d.o.o. za usluge, Julija Knifera 7, 10000 Zagreb, Croatia, registered at the Zagreb Commercial Court, #Tt-20/13637-2. We build and run ShelfPro. For anything about your personal data, write to contact@theshelfpro.com.

This website

theshelfpro.com sets no cookies and uses no analytics, advertising or tracking of any kind. Its fonts and images are served from our own server, so visiting it sends nothing to Google or any other third party.

The site runs on a server we rent from Amazon Web Services in Frankfurt, Germany. Like any web server, it has to receive your IP address to answer your browser, but it keeps no record of visits. It only logs technical errors, in a system log that is overwritten automatically as it fills.

When you contact us

If you use the form on the contact page, we receive your name, your email address, your company if you give it, and your message. We use them only to answer you and to follow up on what you asked about. The legal basis is taking steps at your request before a possible contract, and our legitimate interest in answering business inquiries (Article 6(1)(b) and (f) GDPR).

The message is delivered to our mailbox by Resend, an email service run by Plus Five Five, Inc. in the United States, and is then kept in our company email, which Google hosts for us. If you email us directly, only Google is involved.

To stop the form being abused, our server counts how often it is used from each connection. For that it keeps a scrambled, irreversible form of your IP address in memory for one hour; it is never written down and is then forgotten.

The ShelfPro platform

Our customers use ShelfPro to photograph and analyze retail shelves. For the images, analysis results and user accounts in the platform, the customer is the data controller and we process the data on their behalf, under a data processing agreement and only on their instructions (Article 28 GDPR). The platform processes shelf images and their metadata, recognition results, corrections made by the customer's operators, and the accounts of the people the customer gives access.

Shelf photography

The photographs are taken in shops, of shelves and the products on them. They are meant to show products, not people, but a shopper or a member of staff may appear in one by accident. Such photos are used only to analyze the shelf. Access to them is limited to the customer who commissioned them and to us as their processor, and they are deleted with the rest of the customer's photographs at the end of the retention period.

The ShelfPro Capture app

The Android app used by field staff collects:

• Shelf photographs taken in the app, with the store, the time they were taken and the user who took them.
• Precise location: the phone's GPS position is saved with each photo, to confirm which store it was taken in — only if the user allowed location access. The app works without it, and never uses location in the background.
• Account data: the user's name and email address, set up by their organization.
• New-product captures: a product's photo, barcode, proposed name and any notes the user adds.

The app does not access the phone's photo library, contacts or advertising ID, and contains no advertising. Data is encrypted in transit. It is processed by Google (Firebase and Google Cloud) as our sub-processor; barcode scanning uses Google ML Kit on the device, which may send diagnostic and usage information to Google. We do not sell data or share it with anyone else.

How long we keep data

• Shelf photographs are deleted automatically at the end of the retention period agreed with the customer: 365 days unless agreed otherwise. Analysis results derived from them are kept as part of the customer's reporting.
• Platform accounts are kept until the customer removes the user or asks us to delete them.
• Inquiries are kept for as long as we need them to answer and follow up, and deleted within two years of our last contact, unless they lead to a contract, in which case we keep the correspondence for as long as the law requires.

Who processes it, and where

Platform data is stored and processed in the European Union. We use these service providers, each bound by a data processing agreement:

• Google (Firebase and Google Cloud) for the platform and the Capture app, and Google Workspace for our company email.
• Amazon Web Services for this website, on a server in Frankfurt, Germany.
• Resend (Plus Five Five, Inc.) to deliver contact-form messages. Resend processes them in the United States. The transfer is covered by Resend's certification under the EU-U.S. Data Privacy Framework and by the EU standard contractual clauses in its data processing agreement.

Where Google processes data outside the European Economic Area, its data processing terms provide the safeguards the GDPR requires. We do not sell personal data, and we do not share it with anyone else.

Your rights

Under the GDPR you may ask us for access to your personal data, and for its correction, erasure, restriction or portability, and you may object to how we process it. Write to contact@theshelfpro.com and we will answer within a month. If we hold your data on behalf of a customer, we will pass your request to them and help them answer it.

You may also complain to the Croatian data protection authority, the Agencija za zaštitu osobnih podataka (AZOP), azop.hr.

Deleting your account and data

ShelfPro accounts are created by your organization, not in the app. To have your account and the data linked to it deleted, ask your organization's ShelfPro administrator, or email contact@theshelfpro.com from the address you sign in with. We delete the account, the photographs you took and your new-product captures within 30 days. Aggregated analysis results that no longer identify you may be kept as part of your organization's reporting.

Changes to this notice

When what we do with personal data changes, we update this page and the date on it. This version is from 5 November 2026.