Privacy Policy

1. Data We Collect

Information you provide

• Account information: email address, full name, and company name when you register
• Query data: product descriptions, HS codes, import values, and country of origin that you enter when using the platform
• Saved products: HS codes and countries you choose to track
• Payment information: processed by Stripe. We do not store credit card numbers.

Information collected automatically

• Authentication session cookies (Supabase)
• Server access logs (IP address, browser type) retained for 90 days

What we do not collect

• We do not use third-party analytics, advertising, or tracking cookies
• We do not sell, share, or disclose your data to third parties for marketing purposes

2. How We Use Your Data

We process your data for the following purposes:

• Service delivery: processing your queries, generating AI-powered tariff analysis, and displaying your history
• Account management: authentication, subscription billing, and credit tracking
• Notifications: alerting you to tariff changes on your saved products
• Security: rate limiting, abuse prevention, and service protection

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or UK, we process your personal data on the following bases:

• Contract performance: to provide TariffCenter.AI and process your queries (Article 6(1)(b))
• Legitimate interest: to improve the service, prevent fraud, and maintain security (Article 6(1)(f))
• Legal obligation: to comply with tax and financial regulations for payment records (Article 6(1)(c))

4. Data Retention

We retain your data for the following periods:

You may delete individual queries or your entire account at any time. See Section 6 for details.

5. Third-Party Services

TariffCenter.AI relies on third-party services to deliver its functionality. When you use our platform, your data is shared with these services as described below. Each service operates under its own privacy policy and terms. By using TariffCenter.AI, you acknowledge and agree that your data will be processed by these providers in accordance with their respective policies. We encourage you to review their policies before using our service.

6. Your Rights

Depending on your location, you may have the following rights:

• Access: request a copy of your personal data
• Deletion: request deletion of your account and associated data (right to be forgotten). You can delete your account from your dashboard settings, or contact us.
• Export: download your data in a machine-readable format (right to portability). Available in your dashboard settings.
• Correction: request correction of inaccurate data
• Objection: object to processing of your data based on legitimate interest

To exercise these rights, contact privacy@tariffcenter.ai. We will respond within 30 days.

Payment records exception: Stripe payment records are retained for 7 years to comply with tax and financial regulations, even after account deletion. This will be disclosed to you before account deletion is processed.

7. International Data Transfers

TariffCenter.AI is operated from the United States. If you are located in the EEA, UK, or other regions with data protection laws, your data may be transferred to the United States for processing.

We rely on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs) as appropriate for international transfers. For details, contact privacy@tariffcenter.ai.

8. Cookies

TariffCenter.AI uses only strictly necessary cookies for authentication and session management. We do not use analytics, advertising, or third-party tracking cookies. See our Cookie Policy for details.

9. Data Security

We implement reasonable security measures including encryption in transit (TLS 1.2+), row-level security on all database tables, secure authentication via Supabase Auth, and atomic credit operations to prevent race conditions. However, no system is completely secure, and we cannot guarantee absolute security.

10. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected users within 72 hours of discovery (as required by GDPR) and within 30 days for US users (as applicable under state laws). We will also notify relevant regulatory authorities as required.

11. Children’s Privacy

TariffCenter.AI is not directed at individuals under 16. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email. The “Last updated” date at the top indicates the most recent revision.