Privacy Policy

• Account data: email address, password (stored hashed), role and organisation name.
• Profile and marketplace data: listings, shortlists, messages, licence proposals and files delivered in Deal Rooms.
• Billing data: subscription status and plan. Stripe sells Pro as merchant of record and collects card, name and billing address details itself, not us.
• Usage data: pages viewed and a small set of product events, linked to an internal account ID. No email addresses or message text are sent to analytics.

• To provide the service and your account (contract).
• To take payment and keep tax records (contract and legal obligation).
• To keep the service secure and improve it (legitimate interests).
• To send service emails such as sign-up confirmation and billing notices (contract).

• Stripe Payments Europe, for card payments and billing.
• Our hosting and database providers, which store account and marketplace data.
• PostHog (EU hosting), for product analytics.
• The other party to a deal, for messages, licence proposals and delivered files you share with them.

We use browser storage to keep you signed in. Analytics runs without cookies, in memory only. We do not use advertising cookies.

• Account and marketplace data: while your account is open, then up to 90 days.
• Billing and tax records: 6 years, as UK law requires.

Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Addendum.

You can ask to access, correct, delete, restrict or port your data, and object to processing based on legitimate interests. Email leon@cardiffgiant.ventures. We reply within one month.

You can complain to the Information Commissioner's Office at ico.org.uk.