Privacy Policy

Last updated: 25 July 2026 · Terms of Use

1. Who we are

LabelCheck is a service of Nicodemo & Signa Company Srl, Strada Lucian Blaga nr. 21, ap. 16, Arad, Romania, VAT RO15617609 ("we"). We are the data controller for the personal data described in this policy. Contact: info@cosmetifull.com.

2. What data we process

Account data: name, email address, company name and a hashed password, provided when you request access or register.
Content you submit: the label artwork, texts and product documentation you upload for analysis, the analyses saved in your account and your messages in the clarification chat.
Usage and technical data: logs needed to run and secure the service (timestamps, request metadata, error logs) and per-account usage records.
Feedback: messages you send us through the in-app feedback channel.

We do not ask for, and you should not upload, special categories of personal data. The materials you submit are product documents; any personal data they may incidentally contain (for example the name of a Responsible Person on a label) is processed only as part of the analysis you requested.

3. Why we process it (legal bases)

To provide the service (Art. 6(1)(b) GDPR): running your analyses, saving them in your account, operating the chat and translations, managing access.
To secure and improve the service (Art. 6(1)(f), legitimate interest): security logs, abuse prevention, error diagnosis, and the aggregated statistics described in section 6.
To communicate with you (Art. 6(1)(b) and (f)): access approvals, service messages, replies to your feedback.

4. AI processing

LabelCheck analyses are generated by an artificial intelligence system. The content you submit is processed through the API of our AI provider (Anthropic) to produce your results. Under the commercial terms that govern our use of that API, the content submitted is not used to train the provider's models. Results are informational and can contain errors: they assist the professional review, they do not replace it and they do not certify compliance.

5. Who processes data on our behalf

Cloudflare: hosting, storage and security of the application and its data.
Anthropic: AI processing of the content you submit for analysis.
Telegram: internal operational notifications to our own team (for example, that a registration request is waiting); these may include your name, email and company.

The data processing terms of our two main providers are public: the Cloudflare Data Processing Addendum and the Anthropic Data Processing Addendum are incorporated into the service agreements that bind them to us.

These providers act as processors under agreements consistent with Art. 28 GDPR. Where processing involves transfers outside the EEA, they take place under appropriate safeguards (adequacy decisions or Standard Contractual Clauses).

6. Aggregated statistics

We derive aggregated, anonymized statistics from analyses: for example, which types of labelling issues are most frequent, their severity, and the markets and languages where they occur. These statistics never include label content, product names, your identity or anything that could identify your company, and they are only published in aggregate form across many analyses and many accounts. We use them to improve the service and, in the future, for sector-level reporting.

7. How long we keep data

Account data: for the life of your account, then deleted within 90 days of closure.
Analyses and uploaded content: until you delete them or your account is closed, then deleted within 90 days.
Security and usage logs: up to 12 months.

8. Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to its processing, and to data portability. Write to info@cosmetifull.com and we will respond within the time limits set by the GDPR. You can also lodge a complaint with a supervisory authority: our lead authority is the Romanian ANSPDCP (dataprotection.ro), or the authority of your own country.

9. Cookies and local storage

LabelCheck uses only strictly necessary technical storage: a session token to keep you signed in and local preferences such as language and theme. We use no advertising cookies, no third-party analytics and no tracking, which is why the site shows no cookie banner.

10. Security

Data is encrypted in transit, access to your analyses is limited to your account (and, for company accounts, your company's members), passwords are stored hashed, and administrative access is restricted and logged.

11. Changes

If we change this policy, we will update the date above; for substantial changes we will notify you in the app. The English version of this policy is the reference version.