Privacy Policy

This policy explains how Raversys LTD, trading as Comrc, handles your personal data when you use our platform as a merchant. We are the "controller" of your data under the UK GDPR and the Data Protection Act 2018.

For the personal data of your store's customers, you are the controller and we process it on your behalf as a "processor" under our Terms of Service.

• Account data: your name, email, phone, and your store's name and address
• Billing data: your plan and invoice history (card details are processed by the payment gateway and not stored by us)
• Usage & technical data: IP address, device and browser type, and activity logs
• Your communications with us when you request support

We use your data to provide and operate the Service, process subscriptions and billing, provide support, secure the platform and prevent fraud, improve our services, meet our legal obligations, and communicate with you about your account.

We process your data where necessary to perform our contract with you, for our legitimate interests in operating and securing the platform, to comply with a legal obligation, or with your consent where the UK GDPR and the Data Protection Act 2018 requires it.

We share your data only with the service providers ("subprocessors") that run the Service for us, and only as far as each one needs. We do not sell your personal data. Our subprocessors are:

• IONOS — our hosting provider: the servers, database and backups the platform runs on
• Stripe — card payments for your store and your payout account through Stripe Connect (we never see or store card details)
• Revolut — your Comrc subscription billing
• Google Firebase (Cloud Messaging) — push notifications to the merchant app
• Google Analytics 4 — analytics on this marketing website only, and only if you accept analytics cookies
• Plausible Analytics — cookieless, aggregate visitor statistics on this marketing website only

Our emails are sent from our own servers, and our error tracking (GlitchTip) and uptime monitoring (Uptime Kuma) are self-hosted — no third party receives your data through them.

For the personal data of your store's customers, which we process on your behalf, the sub-processors and our obligations are set out in our Data Processing Agreement.

Your data may be processed or stored outside your country. Where that happens, we put appropriate safeguards in place to protect it in line with applicable law.

We keep your data for as long as your account is active and afterwards only as needed to meet legal obligations, resolve disputes, and enforce our agreements, after which we delete or anonymise it.

We apply appropriate technical and organisational measures to protect your data. However, no method of transmission or storage over the internet is 100% secure.

Under the UK GDPR and the Data Protection Act 2018, you may have the right to access, correct, or delete your data, to object to or restrict its processing, and to request its portability. To exercise these rights, contact us at privacy@comrc.app.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We use cookies that are necessary to run the site (such as remembering your session and selected country). Optional analytics cookies (Google Analytics) load only if you accept them in our cookie banner. You can change or withdraw your choice at any time with the "Cookie settings" link at the foot of every page, and you can also set your browser to refuse cookies.

The Service is for businesses and is not directed at children; we do not knowingly collect their data.

We may update this policy from time to time and will post the updated version with its effective date.

For privacy questions: privacy@comrc.app.

Raversys LTD — Portland House, Belmont Business Park, Belmont, Durham, DH1 1TW, United Kingdom. Registered in United Kingdom under Companies House registration number 16528284.