Privacy Policy
Last updated: 15 April 2026
1. Data We Collect
We collect data you provide directly (account, company, KYC, listings, deal documents, messages), data generated by your use of the Platform (timestamps, page views, notification preferences, ratings), and minimal technical data (IP, device, browser, locale) needed to operate the service.
2. Legal Bases (GDPR / UK GDPR)
We process personal data on the following legal bases: (a) performance of a contract, to provide the Platform you registered for; (b) compliance with legal obligations, including KYC, sanctions screening, and tax reporting; (c) our legitimate interests in fraud prevention, security, and platform improvement; and (d) your consent for optional features such as marketing emails.
3. How We Use Your Data
To register your account; verify your identity; match counterparties; route messages and deal documents; send notifications you have opted into; detect, investigate, and prevent fraud or sanctions evasion; comply with legal and regulatory obligations; and improve and secure the Platform.
4. Sharing
We share data with: (a) the counterparty in any transaction or conversation you participate in; (b) service providers acting under our instructions (Supabase for hosting/storage, Resend for email, Anthropic for AI KYC review); (c) authorities where required by law or to investigate fraud. We do not sell personal data.
5. International Transfers
Some of our processors are located outside your country. Where data leaves the EEA / UK we rely on the European Commission Standard Contractual Clauses (SCCs) and equivalent UK transfer mechanisms.
6. Retention
We retain account and KYC data for as long as your account is active and for up to 7 years afterwards to satisfy AML record-keeping obligations. Deal documents and the underlying audit trail are retained for the duration of the deal plus 7 years. Marketing and analytics data are retained for shorter periods or anonymised.
7. Your Rights
Subject to applicable law you have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. You can exercise most rights directly in your account; for the rest contact us at the address below. You also have the right to lodge a complaint with your local data-protection authority.
8. Cookies
The Platform uses essential cookies for authentication and a small number of functional cookies (theme, language, ticker visibility) stored locally in your browser. We do not use third-party advertising cookies.
9. Security
Data in transit is protected with TLS. Data at rest is stored with row-level security and access controls. KYC documents are stored in private storage with owner-only access. Document integrity is verified via SHA-256 certification on every upload.
10. Contact
For data-protection inquiries please contact privacy@tradebridge.app.