1. Our commitment
Your privacy is important to us. It is Tradift's policy to respect your privacy regarding any information we may collect from you across our website, https://www.tradift.com, and other sites we own and operate.
2. What we collect
We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used.
3. How long we retain it
We only retain collected information for as long as necessary to provide you with your requested service. What data we store, we’ll protect within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use or modification.
4. Sharing information
We don’t share any personally identifying information publicly or with third-parties, except when required to by law.
5. External sites
Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.
6. Your choices
You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services.
7. Google user data
If you connect your Google account to Tradift, for example to list your products on Google, we access your Google account only with your consent and only for the permissions you approve on Google’s consent screen.
We access your Google account email address, your Google Merchant Center account, and Google’s site verification service. We use this access to set up your Merchant Center account, to verify that your store address belongs to you, and to send your product catalogue to Google so your products can appear in Google’s free listings.
We store the credential Google gives us for this access in encrypted form, together with your Google account email address. We do not store any other Google user data. We do not sell Google user data, and we do not share or transfer it to any third party — including data brokers, advertisers and analytics providers — except to Google itself in the course of providing the service, or where the law requires it. We do not create aggregated, anonymised or derived copies of Google user data, so the same rules cover every form of it we hold.
You can disconnect your Google account from Tradift at any time on the Google sales channel Settings page. When you disconnect, we return the permission to Google and delete the stored credential. You can also remove Tradift’s access at any time at myaccount.google.com/permissions.
7.1 How we protect Google user data
Security procedures are in place to protect the confidentiality of your Google user data, and we use encryption to protect it.
- Encrypted in transit. All traffic between your browser, Tradift and Google travels over HTTPS with TLS. Your Google credential is exchanged server to server and never passes through your browser.
- Encrypted at rest. The access and refresh tokens Google issues are stored as cipher text in our database, encrypted with AES. The encryption key is held in the server environment, separately from the database, and is never written into our source code.
- Access is limited. Only the Tradift systems that run your Google sales channel can decrypt your credential. Access by our staff is restricted to authorised personnel who need it to operate or support the service.
- Least data, least permission. We request the smallest set of Google permissions the feature needs, and we store only your Google account email address and your credential. We do not copy your Google account data into any other system.
Tradift’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not use it to train artificial-intelligence or machine-learning models.
7.2 How long we keep Google user data, and how it is deleted
We keep your Google user data only for as long as your Google account stays connected to your Tradift store, because the credential is what keeps your products up to date on Google. We do not keep it for any other purpose, and there is no separate archive or backup copy that outlives the account.
- When you disconnect. Pressing Disconnect on the Google sales channel Settings page returns the permission to Google and deletes your stored credential, your Google account email address and your store’s site-verification files from our database immediately, in the same action.
- When you close your Tradift store. Deleting your Tradift account deletes the Google user data held for it.
- When you ask us. You may request deletion of your Google user data at any time by emailing [email protected] from the address on your account. We complete the deletion within 30 days and confirm it to you by email.
- When a credential stops working. If you remove Tradift’s access at Google, the stored credential no longer works and we delete it.
Removing your Google account from Tradift does not delete the products already in your own Google Merchant Center account, because that account belongs to you and not to Tradift. You can delete those products in Merchant Center, and Google removes listings that stop being refreshed after thirty days.
Disclaimer
Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions about how we handle user data and personal information, feel free to contact us.