Privacy Policy

1. Who we are

TidySKU ("we", "us", "our") operates the tidysku.com website and the TidySKU product data management platform. This policy explains how we collect, use, and protect your personal data when you use our services.

2. Data we collect

Account information

When you create an account we collect your name, email address, and company name. If you subscribe to a paid plan we also collect billing details via our payment processor — we never store full card numbers on our servers.

Product data

You upload product catalogue data to the platform. This data belongs to you. We process it solely to provide the service and never sell, share, or use it for any purpose beyond operating TidySKU.

Usage data

We use Google Analytics to collect anonymised usage data (pages visited, features used, performance metrics) to improve the product. When you first visit our site, Google Analytics operates in cookieless mode — no identifying cookies are set and only aggregated, anonymous data is collected. If you accept analytics cookies via our consent banner, Google Analytics will set cookies to provide more detailed insights such as returning visitor recognition. We do not build advertising profiles from this data.

Cookies

We use strictly necessary cookies for authentication and session management. These do not require consent. We also use optional analytics cookies (Google Analytics) which are only set if you accept them via the cookie banner displayed on your first visit. You can change your preference at any time by clearing your browser's local storage for this site, which will re-display the consent banner.

3. How we use your data

• To provide, maintain, and improve the TidySKU platform
• To process payments and manage your subscription
• To send transactional emails (account confirmations, billing receipts, security alerts)
• To provide customer support
• To detect and prevent fraud or abuse

We will never sell your personal data to third parties. We do not send marketing emails unless you have explicitly opted in.

4. Data storage and security

All data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Our infrastructure is hosted on enterprise-grade cloud providers with SOC 2 compliance. We maintain regular backups and conduct periodic security reviews.

5. Data retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data and product data within 30 days. Some data may be retained longer where required by law (e.g. billing records).

6. Your rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Export your data in a portable format
• Withdraw consent for optional processing
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at privacy@tidysku.com.

7. Third-party services

We use a limited number of third-party services to operate the platform:

• Google Analytics — website usage analytics (data may be processed in the US; subject to Google's privacy policy)
• Payment processing — to handle subscriptions and billing
• Email delivery — for transactional emails
• Cloud hosting — to run the platform infrastructure

Each third-party provider is bound by a data processing agreement and processes data only as instructed by us.

8. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. The "last updated" date at the top of this page reflects the most recent revision.

9. Contact

If you have questions about this policy or your data, contact us at privacy@tidysku.com.