Privacy policy

Introduction

At Trésora, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services.

Please read this policy carefully. By using Trésora, you agree to the collection and use of information in accordance with this policy.

Information we collect

Account information

When you create an account, we collect your email address and any profile information you choose to provide (such as your name and business details).

Inventory data

We store the information you enter about your collection items, including titles, descriptions, photos, pricing, and location data. This data is yours and is only accessible to you.

Usage data

We automatically collect certain information when you use Trésora, including your IP address, browser type, operating system, and usage patterns. This helps us improve the service.

How we use your information

• To provide and maintain our service
• To notify you about changes to our service
• To provide customer support
• To gather analysis to improve our service
• To detect, prevent, and address technical issues

Email newsletter

If you sign up for our email newsletter, we use your email address to send you occasional updates — new features, collecting tips, and product news. This is entirely optional and separate from the account and service emails we need to send you.

It’s opt-in, and confirmed. We only add you if you ask us to, and we send a confirmation email first — you’re subscribed only once you click the link in it. The box is never pre-ticked, and signing up is never a condition of using Trésora.

We use MailerLite to send these emails. Your email address is shared with MailerLite, our email delivery provider, who processes it on our behalf solely to send you these messages. MailerLite is based in the European Union; where your information is processed outside your home country, it is protected by appropriate safeguards such as Standard Contractual Clauses.

You can unsubscribe anytime. Every email includes an unsubscribe link, and you can also turn the newsletter off in the app under Profile → Preferences → Newsletter. Opting out is as easy as opting in, and it never affects your account.

We keep a record of your consent. To comply with privacy laws, we retain a minimal record of your opt-in — the email address, the date, and technical details such as your IP address — as evidence that consent was given. We keep this even if you later unsubscribe or delete your account, but we stop emailing you and remove you from MailerLite.

Our legal basis for sending you marketing emails is your consent, which you can withdraw at any time.

Data security

We use industry-standard security measures to protect your personal information. All data is encrypted in transit and at rest. We regularly review and update our security practices.

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Data retention

We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal purposes.

If you opt into our newsletter, we retain a minimal record of your consent even after you unsubscribe or close your account, as described under “Email newsletter.”

You can request deletion of your account and associated data at any time on our Account Deletion Request page. That page also details exactly what is deleted, what we may be required to retain, and how long the process takes.

Third-party services

We may use third-party services to help us operate our business and provide services to you. These third parties have access to your information only to perform specific tasks on our behalf and are obligated to protect your information.

We use MailerLite to deliver our optional email newsletter. See the “Email newsletter” section above for details.

Your rights

Depending on your location, you may have certain rights regarding your personal data, including:

• The right to access your personal data
• The right to correct inaccurate data
• The right to delete your data — submit a request via our Account Deletion Request page
• The right to export your data
• The right to object to processing
• The right to withdraw consent — where we rely on your consent, such as for marketing emails, you can withdraw it at any time without affecting your account

GDPR compliance

For users in the European Economic Area, we comply with the General Data Protection Regulation (GDPR). This includes providing you with the ability to access, correct, and delete your personal data upon request.

Where we rely on your consent to process your data — for example, to send you our email newsletter — you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it, and it never affects your account.

Changes to this policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date.

Contact us

If you have any questions about this Privacy Policy, please contact us at hello@tresora.app