Privacy Policy
Last updated: May 2025
1. What Data We Collect
When you create an account, we collect your name, email address, phone number, and organisation details. When you use the platform, we store order data, manufacturer/buyer records, uploaded files (images, tech packs, documents), and communication data (emails synced via Gmail, WhatsApp messages).
2. How We Use Your Data
Your data is used exclusively to provide the Comerch service — managing orders, processing emails, generating alerts, and running AI features (tech pack parsing, email classification, vendor matching). We do not sell your data to third parties. We do not use your data for advertising.
3. Gmail Data Usage
When you connect your Gmail account, Comerch accesses emails from your registered buyer and vendor contacts only. We read email subjects, bodies, and attachments to classify intent, extract order references, and parse tech packs. Email data is stored securely and is only accessible within your organisation. We comply with Google's API Services User Data Policy, including the Limited Use requirements. We do not use Gmail data for advertising, do not transfer it to third parties for advertising, and do not use it to train AI models outside of your organisation's scope.
4. Data Storage & Security
All data is encrypted at rest and in transit. Files are stored on Cloudflare R2 (S3-compatible, zero egress fees). The database is hosted on Railway with daily automated backups. Access to production infrastructure is restricted to authorised personnel only.
5. Data Retention
Your data is retained for as long as your account is active. If you delete your account, all data (including files, emails, and order records) will be permanently deleted within 30 days. Conversation trail entries are immutable while the account is active but are deleted with the account.
6. Your Rights
You have the right to access, export, correct, or delete your data at any time. You can disconnect your Gmail integration at any time, which will stop email syncing and remove stored email data. To exercise these rights, contact us at privacy@comerch.com.
7. Contact
For privacy-related questions or requests, contact us at privacy@comerch.com.