Security you can ask about.

BerryPath is built for European webshops that need clear product advice without unclear data handling. This page explains what we do, what we do not claim, and where to ask for details.

European setup Operated for EU-based teams, with European hosting as the default setup.

Purpose-bound data Flows, product feeds and media are used to run your account and recommendations.

DPA available Ask for the processing agreement and current subprocessor overview before signing.

Public status A public status page shows availability monitoring for the service.

Trust approach

Plain answers beat vague badges.

BerryPath keeps security copy intentionally clear. We do not publish certification claims or compliance badges unless we can substantiate them.

The product is run with practical safeguards: limited access, account protection, careful provider choices and documentation you can review.

Account access

Protected app sessions and optional two-step sign-in help guard dashboard access.

Workspace boundaries

Your advice flows, product data and media belong to your own customer workspace.

Human follow-up

Questions about data, contracts or security go to a person who can answer clearly.

What we cover.

The essentials for teams reviewing BerryPath before adding a Flow widget to their webshop.

Hosting

The service is operated for European webshops. We keep hosting and infrastructure choices focused on reliability, privacy expectations and practical support.

Data

You decide which product data, flow content and media you add. We use that data to run the app, publish the Flow widget and show recommendations.

Privacy

The Flow widget is designed to work without third-party advertising trackers from us. Website analytics and checks that protect forms and accounts are explained in the privacy statement.

Security safeguards

We use access controls, secure sessions, optional two-step sign-in, monitoring and operational backups. We keep claims specific so you can ask follow-up questions.

DPA and subprocessors

Subprocessors are limited to services needed for hosting, email delivery, payments, abuse prevention, analytics and service operation. The current overview is shared with the DPA or on request.

Status

The public status page is the place to check availability. We also use support and changelog communication when customers need more context.

Found something or need a review?

Send a short message with your question, procurement checklist or security concern. We will reply with the practical next step.

Contact us · Open status page