Privacy Policy

1. Who we are

PartVista (the "Service", "we", "us", "our") acts as data controller for personal data processed through this Service. You can reach us at feedback@partvistaapp.com.

2. Personal data we collect

• Account data: email address, name, and authentication identifiers (e.g. Google ID) when you sign up or sign in.
• Usage data: search queries you submit, search counts, timestamps, and feature interactions.
• Device & technical data: browser type, device type, and approximate location (country, region, city). Your IP address is processed transiently by our infrastructure to serve requests, derive that approximate location, and enforce fair-use limits in an irreversible hashed form; the IP address itself is not stored in our analytics records.
• Support data: messages and attachments you send to us.
• Billing context: subscription status and plan tier. Payment card details are collected and processed directly by Paddle (see below) and are not stored by us.

3. Purposes and legal bases

• Provide the Service (contract): account creation, running supplier searches, enforcing free/paid limits.
• Security & fraud prevention (legitimate interest / legal obligation): rate limiting, abuse detection, audit logs.
• Service improvement (legitimate interest): aggregate analytics on feature usage.
• Customer support (contract / legitimate interest): responding to your inquiries.
• Billing and tax compliance (contract / legal obligation): managing your subscription via Paddle as Merchant of Record.

4. Data sharing

We share personal data only with:

• Service providers / subprocessors: hosting, database, authentication, and analytics providers acting on our instructions.
• Paddle.com Market Limited as Merchant of Record for sales, subscription management, payment processing, tax compliance, and invoicing. See Paddle's Privacy Policy.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law or to protect our rights.

We do not sell your personal data.

5. International transfers

Your data may be transferred to and processed in countries outside your own, including the United States and European Economic Area. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.

6. Retention

We retain account and usage data for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Billing records retained by Paddle follow Paddle's retention schedule. When data is no longer needed, we delete or anonymise it.

7. Your rights

Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent. EEA/UK residents may also lodge a complaint with their local supervisory authority. To exercise any of these rights, email feedback@partvistaapp.com. We will respond within one month.

If you have questions about this Privacy Policy, contact PartVista at feedback@partvistaapp.com.

8. Security

We apply appropriate technical and organisational measures — including encryption in transit, access controls, and row-level security on our database — to protect your personal data. No method of transmission or storage is 100% secure.

9. Cookies

We use strictly necessary cookies and local storage to keep you signed in and remember basic preferences. We do not use advertising cookies. You can clear cookies in your browser at any time.

Product analytics. To understand how PartVista is used we store a random visitor identifier in your browser plus a per-visit session identifier, together with the page path, device type, coarse location derived from your connection (country, region, city — your IP address is used only transiently to derive it and is not stored in analytics records), and the referring site or campaign parameters reduced to host and path. Analytics events do not contain your email address, name, account identifier, or the free-text you type into forms. Where we send events to third-party analytics, only a restricted set of non-identifying fields is included. If you request a sourcing audit, the email address and part numbers you submit are stored separately for that purpose and are accessible only to PartVista administrators.

10. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email where appropriate.