1.Who We Are
CommerceSpy is operated by:
tr3ttongruppen AB
Sweden
Controller for personal data processed through commerce.nu.
Contact: privacy@commerce.nu
2.Information We Collect
We collect:
Account Information
- name
- company
- password hash
Usage Information
- browser
- device
- operating system
- IP address
- timestamps
- pages visited
Analysis Information
- submitted URLs
- generated reports
- selected report pages
- saved reports
Shared Reports
When users share reports we may process:
- share identifiers
- secure access tokens
- recipient email addresses
- password hashes
- access timestamps
- IP addresses
- browser information
- audit logs
3.How We Use Data
We use data to:
- provide the service
- generate reports
- authenticate users
- secure shared reports
- prevent abuse
- improve CommerceSpy
- communicate with users
- comply with legal obligations
4.Legal Basis
Where GDPR applies, processing is based on:
- Contract performance
- Legitimate interests
- Legal obligations
- Consent where required
5.Report Sharing
CommerceSpy allows report owners to share reports.
Depending on the selected sharing option, reports may be accessible to:
- invited recipients
- anyone with the secure link
- password-protected recipients
The report owner is responsible for determining whether report contents are appropriate to share.
7.Data Retention
We retain data only as long as necessary.
This may include:
- user accounts
- generated reports
- audit logs
- shared links
- security records
Deleted reports and revoked share links may remain in backup systems for a limited period.
8.Security
CommerceSpy implements technical and organizational measures including:
- HTTPS encryption
- encrypted passwords
- secure share tokens
- access logging
- authentication controls
- infrastructure monitoring
No online service can guarantee absolute security.
9.Third-Party Services
CommerceSpy may use trusted third-party providers for:
- cloud hosting
- authentication
- analytics
- email delivery
- AI processing
These providers process data only on our behalf where applicable.
10.International Transfers
Where data is transferred outside the EU/EEA, appropriate safeguards will be implemented in accordance with GDPR.
11.Your Rights
Users may request:
- access
- correction
- deletion
- restriction
- portability
- objection to processing
Requests can be sent to: privacy@commerce.nu
12.Children's Privacy
CommerceSpy is intended for business users and is not directed toward children under 16 years of age.
13.Changes
We may update this Privacy Policy.
Material changes will be announced through the website or user dashboard.
14.Contact
Questions regarding privacy may be sent to: privacy@commerce.nu