Privacy policy
Last updated October 2026.
What we collect
Account details you give us: name, email address, phone number and the business you represent. Operational data you enter: products, orders, customers, vendors and messages. Technical data we log: IP address, browser user agent and sign-in timestamps.
Why we collect it
Account details identify you and let us contact you about the service. Operational data is the product — it is there because you put it there. Technical data is logged for security, so you can see who signed in and from where.
Who we share it with
Nobody, except the infrastructure providers needed to run the service, and only to the extent required. We do not sell data and we do not run advertising.
How long we keep it
Account and operational data is kept while your account is active and for thirty days after cancellation, after which it is deleted. Security logs are kept for twelve months.
Your rights
You can request a copy of your data, correct it, or have it deleted. Write to us and we will respond within thirty days. If you are in a jurisdiction with statutory data rights, those apply in full.
Cookies
We use one session cookie to keep you signed in and a CSRF token cookie to protect form submissions. There are no tracking or advertising cookies.