1. Introduction
Tradift Ltd (“Tradift”, “we”, “us” or “our”) provides an online commerce platform that lets businesses build, run and grow online stores, through our website, merchant dashboard and mobile application (together, the “Services”).
This Privacy Policy explains how we collect, use, share and protect personal information when you use the Services as a merchant, a member of a merchant’s staff, or a visitor to our website. It also explains the choices and rights you have.
When a shopper buys from a store that runs on Tradift, the merchant decides what information the store collects and how it is used. We process that information on the merchant’s behalf, and the merchant’s own privacy policy applies to it. Shoppers with questions about their information should contact the store directly.
Our commitments:
- Your information belongs to you. We collect only the information we need to provide and improve the Services.
- We do not sell your personal information.
- We protect your information. We share it only as this Privacy Policy describes, with providers bound to protect it.
2. Information we collect
Information you provide
- Account information, such as your name, email address, phone number, business name, country and password.
- Store information, such as the products, images, pages, discounts, orders, customers and settings you add to your store.
- Communications with us, including support requests and your conversations with Harlie, our AI assistant.
- Billing information. Payments are processed by our payment providers and by the Apple App Store and Google Play. We do not store full card numbers.
Information we collect automatically
- Device and usage information, such as your device type, operating system, app version, language, time zone, IP address, the pages and screens you view, and the features you use.
- Information from cookies and similar technologies on our website and dashboard (see section 8).
Information from others
- If you sign in with Apple or Google, we receive the details that provider shares with us, such as your name and email address.
- Our payment and app store providers tell us the result of a payment.
3. How we use your information
We use personal information to:
- provide, operate and maintain the Services, including your store and account;
- process payments and subscriptions;
- provide Harlie’s features when you ask it to help with your store;
- communicate with you about your account, orders, payments and changes to the Services;
- provide customer support;
- understand how the Services are used, so that we can improve them;
- send you marketing communications, where the law allows, and measure the effectiveness of our own advertising;
- detect and prevent fraud, abuse and security incidents; and
- comply with our legal obligations and enforce our terms.
Where the law requires a legal basis, we rely on the performance of our contract with you, our legitimate interests in operating and improving the Services, compliance with legal obligations, and your consent where we ask for it.
4. Artificial intelligence
Harlie uses artificial intelligence models through Amazon Bedrock, within our Amazon Web Services (AWS) infrastructure, to answer your requests and to help manage your store. Harlie processes only the information needed to complete what you ask. Your content and your conversations are not used to train artificial intelligence models.
5. How we share your information
We share personal information only as described below:
- Service providers. We work with providers that perform services for us, such as cloud hosting and storage, content delivery and security, payment processing, email and messaging, customer support, analytics, error monitoring and artificial intelligence. They may use your information only to provide their services to us. They are bound by contract to protect it with safeguards at least as strong as the protections in this Privacy Policy.
- Apple and Google. When you buy a subscription or credits in our mobile app, or sign in with Apple or Google, the purchase or sign-in is handled by that company under its own terms and privacy policy.
- Advertising and measurement partners. We measure the results of our own advertising with advertising partners. Where we share information for this purpose, it is limited, protected (for example, contact details are hashed before they are sent), and subject to the choices in section 6.
- Apps and integrations you choose. If you install an app or connect a service to your store, that provider receives the information you authorise, and its own privacy policy applies.
- Legal reasons. We may disclose information where the law requires it, or to protect the rights, safety and property of Tradift, our users or the public.
- Business transfers. If Tradift is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.
A list of our current service providers is available on request at [email protected].
6. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain uses of it, and to withdraw your consent where we rely on it. You can exercise these rights at no charge.
- Access and correction. You can view and update most of your information in your dashboard or the mobile app.
- Account deletion. You can delete your account in the mobile app (Settings, Account, Delete account) or by contacting us from the email address on your account.
- Marketing emails. You can unsubscribe at any time using the link in any marketing email.
- Notifications. You can turn off push notifications in your device settings.
- Cookies. You can manage cookies in your browser settings.
To make a request, contact us at [email protected]. We will respond within the time the law requires. If you are not satisfied with our response, you may complain to your local data protection authority.
The Tradift mobile app does not track you across apps and websites owned by other companies, and it does not access your device’s advertising identifier.
7. How long we keep your information
We keep personal information for as long as your account is active and as needed to provide the Services. We also keep it as long as necessary to comply with our legal, tax and accounting obligations, resolve disputes and enforce our agreements.
When you ask us to delete your account, your store is closed. After a 30-day period, during which you may cancel the request, we delete or anonymise your personal information, unless the law requires us to keep it. Copies in our backups are removed in the normal course of our backup cycle.
8. Cookies and similar technologies
We use cookies and similar technologies on our website and dashboard to keep you signed in, remember your preferences, keep the Services secure, understand how the Services are used, and measure our advertising. You can control cookies through your browser settings. Some features may not work without them.
9. Google user data
If you connect your Google account to Tradift, for example to list your products on Google, we access your Google account only with your consent and only for the permissions you approve on Google’s consent screen.
We access your Google account email address, your Google Merchant Center account, and Google’s site verification service. We use this access to set up your Merchant Center account, to verify that your store address belongs to you, and to send your product catalogue to Google so your products can appear in Google’s free listings.
We store the credential Google gives us for this access in encrypted form, together with your Google account email address. We do not store any other Google user data. We do not sell Google user data, and we do not share or transfer it to any third party — including data brokers, advertisers and analytics providers — except to Google itself in the course of providing the service, or where the law requires it. We do not create aggregated, anonymised or derived copies of Google user data, so the same rules cover every form of it we hold.
You can disconnect your Google account from Tradift at any time on the Google sales channel Settings page. When you disconnect, we return the permission to Google and delete the stored credential. You can also remove Tradift’s access at any time at myaccount.google.com/permissions.
9.1 How we protect Google user data
Security procedures are in place to protect the confidentiality of your Google user data, and we use encryption to protect it.
- Encrypted in transit. All traffic between your browser, Tradift and Google travels over HTTPS with TLS. Your Google credential is exchanged server to server and never passes through your browser.
- Encrypted at rest. The access and refresh tokens Google issues are stored as cipher text in our database, encrypted with AES. The encryption key is held in the server environment, separately from the database, and is never written into our source code.
- Access is limited. Only the Tradift systems that run your Google sales channel can decrypt your credential. Access by our staff is restricted to authorised personnel who need it to operate or support the service.
- Least data, least permission. We request the smallest set of Google permissions the feature needs, and we store only your Google account email address and your credential. We do not copy your Google account data into any other system.
Tradift’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not use it to train artificial-intelligence or machine-learning models.
9.2 How long we keep Google user data, and how it is deleted
We keep your Google user data only for as long as your Google account stays connected to your Tradift store, because the credential is what keeps your products up to date on Google. We do not keep it for any other purpose, and there is no separate archive or backup copy that outlives the account.
- When you disconnect. Pressing Disconnect on the Google sales channel Settings page returns the permission to Google and deletes your stored credential, your Google account email address and your store’s site-verification files from our database immediately, in the same action.
- When you close your Tradift store. Deleting your Tradift account deletes the Google user data held for it.
- When you ask us. You may request deletion of your Google user data at any time by emailing [email protected] from the address on your account. We complete the deletion within 30 days and confirm it to you by email.
- When a credential stops working. If you remove Tradift’s access at Google, the stored credential no longer works and we delete it.
Removing your Google account from Tradift does not delete the products already in your own Google Merchant Center account, because that account belongs to you and not to Tradift. You can delete those products in Merchant Center, and Google removes listings that stop being refreshed after thirty days.
10. Security
We use technical and organisational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure. If you believe your account has been compromised, please contact us immediately.
11. International transfers
We and our service providers may process your information in countries other than the one in which you live, including the United States. Where the law requires it, we put appropriate safeguards in place, such as standard contractual clauses.
12. Children
The Services are intended for businesses and are not directed to anyone under 16. We do not knowingly collect personal information from children.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version with a new “Updated” date. If we make significant changes, we will tell you by email or through the Services.
14. Contact us
If you have questions about this Privacy Policy or how we handle your information, contact us at [email protected].