Data and security
What we keep, where it lives, and for how long
Price lists are among the most commercially sensitive files you hold. They show what you pay and to whom. Below is exactly what is stored, where it lives and how it leaves.
This page is about DATA only. What changes in your store and how it is undone is a different question, and it has its own page.
What is stored
No category beyond these. If something is not here, we do not keep it.
- The original files
- The price list exactly as you uploaded it, in private storage. It is needed so you can see where each row came from, and so it can be re-read if necessary.
- The rows that were read
- Code, name, cost and the quality flags of each row. Along with which of your products it matched and how.
- A copy of your catalogue
- Codes, names, prices, stock status and variations, as returned by the last sync. Without it there is nothing for matching to work against.
- Your store keys
- Encrypted at the application layer, above the database encryption. Deleted when you disconnect.
- The rollback sets
- The values each product held before every push. They are what makes undo possible.
- Your account
- Email, business name, members and roles, subscription status and invoices. No card details: payment information never passes through us.
Where they live
Database, file storage and processing run in European Union regions.
Files are not publicly reachable. There is no link that opens them without your account.
Who can see them
You and the members you invited. Separation is enforced in the database, not in the interface: a query outside your own workspace returns no rows.
On Agency, each client store is separate. A member without access to a store cannot see its reports either.
How long they stay
Explicit periods, not as long as necessary.
| What | How long |
|---|---|
| Original price list files | 12 months |
| Rollback sets | 12 months. After that undo is no longer possible. |
| Cost and change history | 90 days on Starter, unlimited on Pro and Agency |
| After a cancelled subscription | 6 months read only, then deletion |
| Workspace deletion request | carried out in 7 days, so a mistaken click stays reversible |
Nothing is ever deleted because a payment failed. The account becomes read only and your data waits for you.
What is never done with them
- The content of your files is not used to train models.
- They are not sold, rented or shared with third parties for commercial purposes.
- Your orders and customer details are never read. The key does not even request them.
- No card details are stored. Payment happens entirely at our provider.
What is answered elsewhere
Three pages, three different questions. None repeats another.