Privacy policy

This policy explains what personal data Retailed collects, why, who we share it with and what rights you have. It covers the website retailed.io, the Retailed app at dashboard.retailed.io (including the mobile app, if you use it) and the Retailed API.

Who we are

Retailed is operated by RETAILED, a SAS registered with the Toulouse Trade and Companies Register under number 982 098 832, with its registered office at 10 Ter Route d'Escalquens, Z.I. de Vic, 31320 Castanet-Tolosan, France ("Retailed", "we", "us").

For the data described in this policy, we are the data controller. For the data you store in the app about your own customers and suppliers, you are the controller and we act as your processor (see "Data you store about other people" below).

Contact for anything about your data: support@retailed.io. We have not appointed a Data Protection Officer because we are not required to; this address reaches the person responsible for privacy at Retailed.

What we collect and why

We do not ask for sensitive data (health, religion, etc.) and you should not store any in the app.

Some fields are required to create an account (email and password, or a Google or Discord sign-in). Everything else is optional, but some features will not work without it.

AI features

Some features use an AI model to read documents for you: scanning a receipt, reading a forwarded order email, parsing a product link and suggesting a price. When you use them, the content you submit (the image, the email text or the link content) is sent to OpenAI, which processes it on our behalf and returns the result. Under our agreement with OpenAI, data sent through its API is not used to train its models and is kept for up to 30 days for abuse monitoring, then deleted. We do not use your data to train any AI model. Always check what an AI feature fills in before relying on it.

Data you store about other people

The app lets you store details about your customers, suppliers and contacts (for example a name, email, phone number or address on a sale), and lets shoppers send you inquiries through your public inventory page. For this data, you decide what is stored and why, so you are the controller and Retailed is your processor. Our Data Processing Agreement applies automatically to business users. You are responsible for having a legal basis to store this data and for informing the people concerned.

Who we share data with

We do not sell your personal data and we do not share it for other companies' advertising.

We use the service providers below (our "sub-processors"). Each one only gets the data it needs, under a contract that requires it to protect the data and use it only for us.

We may also share data when the law requires it (for example with tax authorities or a court), to defend our rights, or with a buyer if Retailed is sold or merged, in which case this policy continues to apply.

Transfers outside Europe

Your data is mainly stored in the United Kingdom, which the European Commission recognises as offering an adequate level of protection. When a provider processes data in the United States or another country without such a decision, we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses (and the UK addendum for UK users). You can ask us for a copy of these safeguards.

How long we keep data

Security

We protect your data with encryption in transit (HTTPS), encryption at rest at our database provider, access controls that limit staff access to what is needed, and backups. No system is perfectly secure: if a breach puts your data at risk, we will tell you and the authorities as the law requires.

Your rights

You can, at any time:

• access your data and get a copy of it;
• correct inaccurate data;
• delete your data (you can delete your account from the app settings);
• export your data in a reusable format (CSV exports are built into the app);
• object to processing based on our legitimate interest, including any marketing;
• restrict processing while a request is being handled;
• withdraw consent at any time (use "Cookie settings" at the bottom of every page, or the unsubscribe link in our emails), without affecting what was done before;
• give us instructions on what happens to your data after your death (a right under French law).

To use these rights, email support@retailed.io from the address linked to your account. We answer within one month. We may ask you to confirm your identity.

If you think we have not respected your rights, you can complain to the French data protection authority, the CNIL (cnil.fr), or to the authority in the country where you live. In the UK, that is the Information Commissioner's Office (ico.org.uk).

Cookies

The website and app use cookies and similar technologies. Analytics and advertising measurement only run if you allow them. See our cookie policy for the full list.

Children

Retailed is a business tool and is not meant for children. You must be at least 15 to create an account, and under 18 you need a parent's permission to buy a paid plan. If you believe a child under 15 has given us data, contact us and we will delete it.

Changes

We may update this policy when our services or the law change. We will show the date of the last update at the top of this page and, for important changes, tell account holders by email before they take effect.