Last updated: 3 October 2026 · Terms of Service
Also available in: Italiano · Română
LabelCheck is a service of Nicodemo & Signa Company Srl, Strada Lucian Blaga nr. 21, ap. 16, Arad, Romania, VAT RO15617609 ("we"). We are the data controller for the personal data described in this policy. Contact: info@cosmetifull.com.
We do not ask for, and you should not upload, special categories of personal data. The materials you submit are product documents; any personal data they may incidentally contain (for example the name of a Responsible Person on a label) is processed only as part of the analysis you requested.
LabelCheck analyses are generated by an artificial intelligence system. The content you submit is processed through the API of our AI provider (Anthropic) to produce your results. The feedback you send us goes through the same API: your messages and their attachments to prepare an automatic reply, your messages to sort them. Under the commercial terms that govern our use of that API, the content submitted is not used to train the provider's models. Results are informational and can contain errors: they assist the professional review, they do not replace it and they do not certify compliance.
The data processing terms of these providers are public: the Cloudflare Data Processing Addendum, the Anthropic Data Processing Addendum and the AWS Data Processing Addendum are incorporated into the service agreements that bind them to us.
These providers act as processors under agreements consistent with Art. 28 GDPR. Where processing involves transfers outside the EEA, they take place under appropriate safeguards (adequacy decisions or Standard Contractual Clauses).
From each analysis we keep a record of metadata, without the content of the label: the types of issue found, their severity and the legal provision behind them, which mandatory particulars are present or missing, the score, the markets, the languages, the type of file uploaded and whether a technical sheet was attached. Under the same rules we also count how often a finding is contested, marked as resolved or reopened: the action, the day, the dimension, the severity and the legal provision, never the text you write. The record is linked to a one-way code derived from your email address: it is therefore pseudonymised data, not anonymous data, and you keep your rights over it. From these records we derive aggregated knowledge, which we use only where it covers at least 20 analyses from at least 5 accounts, to make the checks more accurate, to grow cosmetiFULL's knowledge base and, in the future, to publish sector-level analyses. The content of labels, product names, your identity and anything that could identify your company stay out of it.
You can opt out with one click: in your cosmetiFULL account preferences, switch off "Contribute to cosmetiFULL's knowledge", and from that moment we derive nothing more from your analyses. This applies to analyses carried out from 3 October 2026; the complete rules are in Article 19 of the platform Privacy Policy.
You have the right to access, rectify and erase your personal data, to restrict or object to its processing, and to data portability. Write to info@cosmetifull.com and we will respond within the time limits set by the GDPR. You can also lodge a complaint with a supervisory authority: our lead authority is the Romanian ANSPDCP (dataprotection.ro), or the authority of your own country.
LabelCheck uses only strictly necessary technical storage: a session token to keep you signed in and local preferences such as language and theme. We use no advertising cookies, no third-party analytics and no tracking, which is why the site shows no cookie banner.
Since 27 August 2026 there is also a technical cookie, cf_lingua, which remembers the language you chose and applies it across every module of the suite: without it each module would restart from the default language, because browser storage is not shared between different addresses. It holds two letters (the language code), lasts one year, identifies nobody and never leaves us. It does not require consent because it serves a service you asked for by choosing the language, but we tell you anyway.
Data is encrypted in transit, access to your analyses is limited to your account (and, for company accounts, your company's members), passwords are stored hashed, and administrative access is restricted and logged.
If we change this policy, we will update the date above; for substantial changes we will notify you in the app. The English version of this policy is the reference version.