Privacy Policy

Effective Date: February 16, 2026

Trad Market ("we," "us," or "our") operates a peer-to-peer online marketplace for traditional musical instruments at tradmarket.com (the "Site") and the TradSync application for Shopify (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit or use our Site, App, and services.

By using Trad Market or TradSync, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use our services.

1. Information We Collect

Information You Provide Directly

Account information: name, email address, username, and password when you register for an account.
Profile information: profile photo, bio, location, and other details you choose to share.
Transaction information: billing and shipping addresses, payment method details (processed securely through Stripe and PayPal), purchase and sales history.
Listing information: instrument descriptions, photographs, pricing, condition details, and shipping preferences.
Communications: messages exchanged with other users, customer support inquiries, and any feedback you provide.
Identity verification: information provided during seller onboarding and verification processes.
Tax information: tax identification numbers or VAT/GST registration numbers where required for international transactions and regulatory compliance.

Information Collected Automatically

Device and browser information: IP address, browser type and version, operating system, and device identifiers.
Usage data: pages visited, search queries, listings viewed, time spent on the Site, referring and exit pages, and clickstream data.
Cookies and similar technologies: we use cookies, pixels, and similar tracking technologies to enhance your experience and analyze Site usage. See Section 9 for more details.
Location data: approximate geographic location inferred from your IP address or shipping information.

Information From Third Parties

Payment processors (Stripe, PayPal): transaction confirmation and fraud prevention data.
Shipping partners (EasyPost): shipment tracking and delivery status information.
Tax compliance services (Avalara): tax rate calculations and nexus determinations.

Information Collected Through TradSync (Shopify App)

When you install and use the TradSync App on your Shopify store, we collect the following information:

Store information: your Shopify store domain and authenticated session data required to operate the App within your Shopify admin.
Product data: product titles, descriptions, prices, images, tags, categories, variants, and other product attributes from your Shopify catalog.
Inventory data: stock levels and inventory location information for products you sync to Trad Market.
OAuth credentials: authentication tokens generated when you connect your Trad Market account through the App, used to authorize product sync on your behalf.
Sync records: logs of sync activity between your Shopify store and Trad Market, including timestamps, success/failure status, and product mapping data (the association between your Shopify product IDs and corresponding Trad Market listing IDs).

TradSync does not collect customer data, order data, or payment information from your Shopify store. The App's access is limited to product and inventory data as defined by the scopes you approve during installation.

2. How We Use Your Information

We use the information we collect for the following purposes:

To provide, maintain, and improve our marketplace services, including facilitating transactions between buyers and sellers.
To process payments, calculate applicable taxes, generate shipping labels, and complete purchases.
To verify seller identities and manage seller onboarding, payouts, and account status.
To communicate with you about transactions, account updates, customer support requests, and service-related notices.
To personalize your experience and display relevant listings and search results.
To detect, prevent, and address fraud, unauthorized activity, and other security issues.
To comply with legal obligations, including tax collection and remittance as a marketplace facilitator.
To enforce our Terms of Service, Purchase Protection Policy, and other agreements.
To analyze usage trends and improve Site functionality, performance, and user experience.
To send promotional communications (with your consent, where required by law), which you may opt out of at any time.

How We Use TradSync Data

To synchronize your Shopify product catalog to Trad Market as marketplace listings.
To keep inventory levels accurate across both platforms when stock changes occur.
To maintain a mapping between your Shopify products and Trad Market listings so updates and removals stay in sync.
To provide you with sync status, activity logs, and error diagnostics within the App dashboard.
To authenticate your Trad Market account and authorize API calls on your behalf.

We do not sell your personal information. We may share your information in the following circumstances:

With other users: Buyers and sellers may see certain profile information, transaction details, and communications necessary to complete a transaction. Sellers receive buyer shipping addresses for order fulfillment.
With service providers: We share data with trusted third-party vendors who assist us in operating the Site, including payment processors (Stripe, PayPal), shipping services (EasyPost), tax compliance providers (Avalara), hosting providers, and analytics services. These providers are contractually obligated to use your information only as necessary to perform services on our behalf.
With Shopify: TradSync operates within the Shopify platform. Product and inventory data flows from your Shopify store to Trad Market. We do not send your Trad Market data back to Shopify.
For legal compliance: We may disclose information to comply with applicable laws, regulations, legal processes, or enforceable governmental requests, including tax reporting obligations.
To protect rights and safety: We may share information to investigate or address fraud, security issues, or violations of our policies, or to protect the rights, property, or safety of Trad Market, our users, or others.
In business transfers: If Trad Market is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

4. International Data Transfers

Trad Market serves a global community of traditional instrument buyers and sellers. Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. These countries may have data protection laws that differ from those in your jurisdiction.

Where required, we implement appropriate safeguards for international data transfers, such as standard contractual clauses or other mechanisms recognized by applicable data protection authorities.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. We may also retain and use your information as necessary to comply with legal obligations (including tax record-keeping requirements), resolve disputes, enforce our agreements, and protect our legitimate business interests.

Transaction records, including payment and shipping information, may be retained for a minimum period required by applicable tax and commercial laws, even after account closure.

TradSync Data Retention

When you uninstall TradSync from your Shopify store, we retain your product mapping and sync log data for up to 30 days to allow for reinstallation without data loss. After 30 days, or upon your request, this data is permanently deleted. OAuth tokens are invalidated immediately upon uninstall. Your Trad Market listings created through TradSync will remain on Trad Market unless you remove them separately.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

Access: Request a copy of the personal information we hold about you.
Correction: Request correction of inaccurate or incomplete personal information.
Deletion: Request deletion of your personal information, subject to certain legal exceptions.
Portability: Request a portable copy of your data in a commonly used format.
Opt-out of marketing: Unsubscribe from promotional emails at any time using the link in the email or by contacting us.
Cookie preferences: Manage your cookie settings through your browser.

TradSync Merchants

If you use TradSync and wish to exercise your data rights:

Access and export: You may request a copy of all data we hold related to your Shopify store, including product mappings, sync logs, and stored credentials.
Deletion: You may request deletion of all data associated with your store. Uninstalling the App will automatically trigger deletion of your session and authentication data. Contact us to request full deletion of all associated records.
Disconnect: You may disconnect your Trad Market account from the App at any time through the TradSync settings page, which immediately revokes API access.

To exercise any of these rights, please contact us at support@tradmarket.com. We will respond to your request within the timeframe required by applicable law.

7. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, secure payment processing through PCI-compliant providers, access controls, and regular security assessments.

TradSync data is transmitted securely over HTTPS and stored in encrypted databases. OAuth tokens are stored server-side and never exposed to the browser.

However, no method of electronic transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.

8. Shopify App Compliance

TradSync complies with Shopify's API Terms of Service and mandatory privacy requirements. In accordance with Shopify's requirements:

Customer data requests: When a Shopify store owner receives a data subject access request from one of their customers, we will provide any relevant data we hold upon request.
Customer data erasure: When a Shopify store owner is required to erase a customer's data, we will delete any relevant data we hold upon request.
Store data erasure: Within 48 hours of a store uninstalling TradSync, we will begin the process of deleting all store data from our systems, completed within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

Essential cookies: Required for Site functionality, including authentication, security, and session management.
Analytics cookies: Help us understand how users interact with the Site, which pages are most visited, and how we can improve the user experience.
Preference cookies: Remember your settings and preferences, such as language and region.
Marketing cookies: Used to deliver relevant advertisements and measure the effectiveness of our marketing campaigns (only with your consent where required).

You can control cookies through your browser settings. Disabling certain cookies may limit your ability to use some features of our Site.

10. Third-Party Links

Our Site may contain links to third-party websites or services, including payment processors, shipping carriers, and external resources. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Trad Market is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child under 18, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at support@tradmarket.com.

12. U.S. State Privacy Rights

Residents of certain U.S. states, including California, Colorado, Connecticut, Utah, Virginia, and others with comprehensive privacy laws, may have additional rights under applicable state legislation. These rights may include the right to know what personal information we collect, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising your privacy rights.

Trad Market does not sell personal information as defined under these laws. To exercise your state privacy rights, please contact us at support@tradmarket.com.

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, the General Data Protection Regulation (GDPR) and equivalent local laws provide you with additional rights and protections regarding your personal data.

Legal Basis for Processing

We process your personal data only when we have a valid legal basis, including:

Contract performance: Processing necessary to fulfill our obligations under our Terms of Service, such as facilitating transactions, processing payments, generating shipping labels, and managing your account.
Legitimate interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, improving our services, and enforcing our policies, provided these interests are not overridden by your rights.
Legal obligations: Processing necessary to comply with applicable laws, including tax collection and remittance obligations, customs and import compliance, and anti-money laundering requirements.
Consent: Where required, we process your data based on your freely given consent, such as for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

In addition to the rights described in Section 6, you have the right to:

Restrict processing: Request that we limit the processing of your personal data in certain circumstances.
Object to processing: Object to processing based on legitimate interests, including profiling and direct marketing.
Withdraw consent: Withdraw any previously given consent at any time.
Lodge a complaint: File a complaint with your local data protection supervisory authority if you believe your rights have been violated.

International Data Transfers

When your personal data is transferred outside the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner's Office, as applicable.

Data Controller

For the purposes of GDPR, Trad Market is the data controller responsible for your personal data. For questions or to exercise your rights, contact us at support@tradmarket.com.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will notify you by posting the updated policy on our Site with a revised effective date and, where appropriate, by sending you a notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions about this Privacy Policy, please contact us at support@tradmarket.com.