Privacy policy
The short version
We keep the minimum needed to run TradeCatalog, we don’t sell data, ad measurement runs only if you separately allow it, analytics scripts run only on our public pages and only if you say yes, and you can export or delete your data yourself at any time.
Who is responsible
- For your own login and billing details, Happy Webs Limited (Manchester, UK) is the data controller.
- For the customer details a supplier adds (names, contact emails, prices, orders), the supplier is the controller and we process that data for them, only to run the service.
What we hold
- Your name and email, and which workspaces you belong to.
- If you add a passkey, its public credential, label, device type and creation date, so we can check sign-ins and let you remove it. The private key stays with your device, security key or passkey provider. We do not receive your fingerprint, face scan or device PIN.
- What suppliers put in: products, prices, customer names and contact emails, orders, and a log of who changed what.
- A security log of sign-ins and changes, with the IP address, country and browser they came from, so a business can see who did what and we can spot misuse. IP addresses and browsers are removed after 90 days.
- Support conversations you start with us.
- Billing details are held by Stripe; we only see your plan status, not card numbers.
Why
To provide the service you signed up for (contract), to keep it secure and working (legitimate interest), and to meet tax and accounting rules (legal obligation). We send emails only about your account, prices and orders, never marketing without asking.
Who else sees it
- Cloudflare: hosting, database, email sending, cookieless visit counts, and Workers AI, which reads the pages of price lists you choose to read with AI (scans, photos or a PDF’s text), and the file and sheet names, headings and a few sample values of a price list you import, to suggest how to match its columns.
- Stripe: subscriptions, payments and tax.
- LinkedIn: only after a separate LinkedIn opt-in, its Insight Tag uses cookies on public marketing pages to receive page addresses, clicks, referrer, IP address, browser and device details and visit times. LinkedIn may match this to your LinkedIn account to measure advertising and provide aggregate audience insights. It never runs on sign-in, signup, upload tools, catalogue, order or account pages. Our server can also send your ad click reference, first paid Pro invoice reference, payment date, net-of-tax amount and currency. We do not send name or email fields, catalogue data or buyer orders. Earlier permission for invoice reporting alone does not enable the browser tag; we ask again for that wider scope.
- OpenAI: if you allow ad measurement, the ChatGPT click reference, first paid Pro invoice reference, payment date, net-of-tax amount and currency. We do not send names, emails, catalogue data or buyer orders for this measurement.
- Meta (Facebook and Instagram): only after a separate Meta opt-in, its Pixel uses cookies on public marketing pages to receive public page addresses, click and browser references, referrer, IP address, browser and device details and visit times. Meta may match these to your Meta accounts and combine them with its other data to measure and improve ads and personalise ads and content on and off Meta. It never runs on sign-in, signup, upload tools, catalogue, order or account pages. Our server can report a completed supplier registration and the first paid Pro invoice reference, date, net amount and currency, with your consented browser references and signup browser/IP details. We do not send names, email or phone fields, catalogue content or buyer orders. Automatic advanced matching and automatic event collection are disabled. Your references and browser/IP details are cleared within 38 days, including delayed event delivery.
- TypeSafe: its Jev model, which helps us sort product text that our safety check has flagged, and the names of new businesses, into a prohibited goods category for a person to review. We send it only product and business text, never customer or buyer details.
- Google Analytics and Microsoft Clarity: how visitors use our public pages (which pages, clicks and scrolling, with text and form fields masked), only if you accept. Scripts never run on catalogue, order or account pages.
If you allow analytics, we remember safe campaign labels for 30 days and connect your Google Analytics browser reference to the workspace you create. Our server can report the first paid Pro invoice reference, payment date, net amount, currency and campaign labels to Google Analytics. This does not include names, emails, catalogue details or buyer orders. Change your cookie choice below to stop future analytics payment reporting. Browser and ad click references are cleared from our acquisition records after 37 days, or on withdrawal; the nightly cleanup can take up to one extra day. We keep the business’s source and invoice reconciliation totals for our own reporting. Google Analytics event retention is two months.
Each business’s catalogue, prices, customers and orders are kept in their own database, placed in the Cloudflare region nearest that business (Western Europe for UK businesses). These providers may process data outside the UK under approved safeguards. We share nothing else unless the law requires it.
AI apps you connect
If you connect ChatGPT, Codex or another AI app, that provider receives the TradeCatalog information you request through it. This can include products, agreed prices, customer contact details, orders, supplier news and support messages, limited by your workspace memberships. Its own privacy policy governs the copy it receives. We do not send payment credentials, API secrets or platform support privileges.
You choose read access or permission to prepare changes. Consequential changes require a separate signed-in review. Proposed actions expire after 15 minutes; we remove their stored details and results during the next half-hourly cleanup after 24 hours from expiry. Normal order and activity records remain under the retention rules below. Disconnect at Connected apps to revoke access and pending approvals.
Cookies
Cookies keep you signed in, remember which customer account you’re ordering for, and save your chosen language and subscription currency. The language preference is saved for a year. On our public pages we ask before setting analytics cookies (Google Analytics and Microsoft Clarity); if you say no, none are set. Advertising measurement has a separate choice. If you allow it, a first-party cookie remembers your ChatGPT, LinkedIn or Meta reference for up to 30 days. Each advertising service has its own separate opt-in. We link it to a workspace you create and its first successful paid Pro invoice. Your choice is remembered for a year. Turning it off clears our first-party click cookies, unloads the LinkedIn and Meta tags and stops future conversion submissions. LinkedIn controls its own cookies and data already received; see its privacy and cookie policies below. No advertising pixel runs before consent, including when JavaScript is disabled. The invoice reference lets us reconcile payments, refunds and renewals with Stripe; renewals are not new customers. The workspace record is removed when the workspace or its signup login is deleted. The click reference itself is cleared within 38 days, including a short allowance for delayed payment events.
LinkedIn privacy policy · LinkedIn cookie policy and cookie lifetimes
Meta privacy policy · Meta cookie policy
If we emailed you about TradeCatalog
We occasionally email businesses that sell to the trade, one at a time, to introduce TradeCatalog. We use only a business email address published on your own website or a trade directory, with your name and business if they appear there. We use it to tell you about TradeCatalog because it’s relevant to your business (legitimate interests), and we keep a note of the email and any reply for up to 12 months. Reply “unsubscribe” or email support@tradecatalog.app and we’ll never email you again and delete your details, keeping only what’s needed to make sure of that.
How long
While your workspace exists. When you delete a workspace or login it is removed at once; database backups roll off within 90 days. Demo workspaces are deleted after 3 hours. Billing records are kept as long as tax law requires.
Your rights
You can see, correct, export and delete your data from the app, or ask us at support@tradecatalog.app. If you’re a supplier’s customer, ask that supplier first. You can complain to the Information Commissioner’s Office (ico.org.uk).
See also the terms of service.