Privacy Policy
Effective Date: 01.08.2025
At Circular, we are committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains how we collect, use, store, and protect personal data in compliance with the General Data Protection Regulation (GDPR).
1. Who We Are
Circular ("we", "us", "our") provides software-as-a-service (SaaS) to help stores manage second-hand inventory and seller relationships.
If you have any questions about this policy or your data, contact us at: hei@getcircular.ai
2. Who This Policy Applies To
We process data for two categories of users:
- Customers (Stores): Businesses that subscribe to our service.
- End Users (Sellers): Individuals who sell their items through our customers.
3. What Personal Data We Collect
For Customers (Stores)
- Company information such as name, address and organization number and email addresses
For End Users (Sellers)
- Full name
- Email address
- Phone number
- Bank account number (only if the seller requests a bank transfer for payment)
4. Why We Collect Your Data
We process personal data for the following purposes:
Purpose | Legal Basis (GDPR) |
---|---|
To provide access to our platform | Performance of a contract |
To process payments to Sellers | Consent / Legitimate interest |
To communicate service-related updates | Legitimate interest |
To maintain system security and operations | Legitimate interest |
5. How We Store and Share Data
We use the following third-party service providers to operate our service:
- Vercel – For hosting our application
- Supabase – For backend infrastructure and database
- Resend – For transactional email delivery
These providers are GDPR-compliant and handle data according to EU/EEA standards. We do not sell or share your personal data with third parties for marketing purposes.
6. Your Rights Under GDPR
As a data subject in the EU/EEA, you have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Object to or restrict certain types of processing
- Request data portability
- Withdraw consent where applicable
To exercise your rights, please contact us at hei@getcircular.ai
7. Data Retention
We retain personal data only as long as necessary for the purposes described in this policy or as required by law. Seller data is kept as long as the store maintains an account or until the Seller requests deletion.
8. Cookies and Tracking
We do not use cookies or tracking technologies such as Google Analytics.
9. International Data Transfers
All data is stored and processed within the EU/EEA. If data is transferred outside of the EU, it is protected using standard contractual clauses or other approved mechanisms.
10. Updates to This Policy
We may update this Privacy Policy from time to time. When we do, we’ll notify users appropriately. The latest version will always be available on our website or in the application.
11. Contact Us
If you have any questions or concerns about this policy or your personal data, please contact: hei@getcircular.ai