Legal
Privacy policy
Who we are
Tadrik is a product of GiantKan Ltd (company no. 13168730), 20-22 Wenlock Road, London N1 7GU, United Kingdom ("we"). For your account, billing and our emails to you, we are the controller of your personal data. For the order documents you send us, you are the controller and we are your processor: we only use them to do the job you asked for.
What we collect, and why
- Visitors to this site. No cookies and no analytics. Our host (Cloudflare) processes your IP address to deliver and protect the site.
- Business contacts we email. If we wrote to you, we found your business email address on your company's own website. We use your name, work email, company name and what you reply, to ask whether Tadrik is useful to your business (legitimate interest). Every email says who we are and lets you opt out by replying "stop"; we then never email you again.
- Customers. Your name, work email, company and store details, to provide the service you ordered (contract). Payments are handled by Freemius, our reseller and merchant of record: we never see your card number.
- Order documents. The orders you forward (PDFs, spreadsheets, email text, scans) and what is inside them: your customers' business names, contact details, products, quantities and prices. We read them to create draft orders in your store, and for nothing else. They are never used to train AI models.
- Your store data. Product names, SKUs and wholesale prices from your WooCommerce store, so each line can be matched to the right product and price.
How long we keep it
- Order documents: deleted 30 days after they are processed. The orders created from them live in your own store.
- Customer and billing records: while you are a customer, then as long as tax law requires.
- Outreach records: up to 2 years after our last contact, unless you ask us to delete them sooner. If you opt out, we keep only your email address on a do-not-email list, so we can respect it.
Who processes data for us
- Freemius (USA): checkout, subscriptions, invoices and sales tax/VAT.
- OpenRouter (USA) and the AI model provider it sends a document to (for example Google, Microsoft Azure, Amazon Bedrock or Mistral): reading order documents. We only allow providers that keep no copy of the data and do not train on it.
- Hetzner (Germany): our servers.
- Cloudflare (USA/EU): website hosting, DNS and access protection.
- Zoho (EU data centre): email.
Where data leaves the UK or EEA, we rely on standard contractual clauses or the provider's equivalent safeguards. We give customers 30 days' notice before adding a provider that handles order documents.
Your rights
You can ask for a copy of your data, a correction, deletion, or that we stop using it. Email [email protected]. You can also complain to your data protection regulator (in the UK, the ICO).
Data processing agreement
Customers covered by UK GDPR or GDPR get a data processing agreement before their trial starts. Ask at [email protected].