Privacy Policy

1. Introduction

Import Ready ("we," "us," or "our") operates import-ready.com(the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to this policy. Our Terms & Conditions also apply.

2. Information we collect

Account information

When you register, we collect your email address, password (stored in hashed form), and optional name. If you sign in with Google, we receive your Google account email and basic profile information as permitted by Google.

Files and import data

When you use the Service, we process the files you upload (for example CSV or Excel product and inventory files), column mappings, validation results, and edits you make in the grid. This data is stored so you can continue your work and download corrected exports.

Usage and technical data

We collect information about how you use the Service, such as pages visited, features used, browser type, device type, and approximate location derived from IP address. We use privacy-friendly analytics (Vercel Web Analytics) that does not use advertising cookies.

Communications

If you contact us by email, we keep your message and our reply to handle your request.

3. How we use your information

We use your information to:

• Provide, operate, and improve the Service
• Authenticate you and secure your account
• Process, validate, and store your uploaded files and edits
• Send transactional emails (for example email verification and password reset)
• Respond to support requests
• Monitor performance, fix errors, and prevent abuse
• Comply with legal obligations

We do not sell your personal information.

4. Legal bases (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, we process personal data based on: performance of our contract with you (providing the Service), our legitimate interests (security, improvement, analytics), and your consent where required (for example optional marketing, if we offer it in the future).

5. Service providers

We use trusted third parties to run the Service. They process data only on our instructions and for the purposes described in this policy:

• Hosting and infrastructure — for example Vercel (frontend) and Railway (API)
• Database — for example Supabase (PostgreSQL) to store account and import data
• Email — SMTP providers to send verification and password-reset messages
• Authentication— Google, if you choose "Sign in with Google"

These providers may process data in the United States or other countries. We choose providers with appropriate safeguards where required by law.

6. Data retention

We keep your account information while your account is active. Import files and related data are retained until you delete them or close your account, unless we must keep certain records longer for legal, security, or backup purposes. Backups may persist for a limited period after deletion.

7. Security

We use industry-standard measures such as encryption in transit (HTTPS), hashed passwords, and access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Cookies and local storage

Import Ready uses browser cookies and local storage. When you first visit, we ask you to accept or limit optional use. You can change your choice by clearing site data in your browser and reloading the page.

• Essential (always used after you continue): sign-in token (sf_access_token cookie and local storage), and theme preferences (import-ready-theme, stockflow-theme-preset, and import-ready-cookie-consent to remember your choice).
• Analytics (only if you choose “Accept all”): Vercel Web Analytics — privacy-oriented, first-party page-view metrics without advertising cookies. We do not load this script until you consent.
• Google sign-in: if you use Google OAuth, Google’s own cookies and policies apply during that sign-in flow on Google’s domain.

You can control cookies through your browser settings. Disabling essential storage may prevent you from staying signed in or keeping your theme.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, object to or restrict certain processing, and withdraw consent where processing is consent-based. You may also have the right to lodge a complaint with a supervisory authority.

To exercise these rights, contact us at contact@import-ready.com. We will respond within a reasonable time as required by applicable law.

10. Children

The Service is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated by email or a notice on the Service where appropriate.

12. Contact

For privacy questions or requests, contact contact@import-ready.com or visit our About us page.