Privacy
What we collect, why, and what we do with it.
This is a description, not yet the formal notice. It sets out honestly what the platform stores and why. The binding privacy notice — naming the data controller, the lawful basis for each purpose, retention periods and how to exercise your rights — is with our advisers and will replace this page before launch. If you need any of that detail sooner, ask us and we will answer directly.
Everything on this list, and nothing we have not listed.
- Your account
- Name, email address, password (stored hashed, never in readable form) and your language preference. Needed to sign you in and to know which organisation you belong to.
- Your organisation
- Company name, billing address and tax identifier, plus who else is a member and what they are allowed to do. Used for invoicing and to keep one customer's records away from another's.
- Orders and payments
- What you bought, when, in which currency and for how much, along with the billing details you entered at checkout. We record that a payment succeeded and its reference — we never see or store your card number. That stays with the payment provider.
- Licences and downloads
- Which products you own, the licence keys issued to you, where they are activated, and a log of downloads. The log is what makes a paid download auditable rather than a guess.
- Conversations with the assistant
- The full transcript of what you describe to the requirements assistant, including anything you type before signing up. It is kept so you can leave and come back to it, and so the person who eventually reads your request sees the context rather than a summary.
- Requests, quotes and messages
- What you asked for, what we quoted, and the messages exchanged about it. Attachments you upload are stored with the request they belong to.
- If you apply to sell here
- Your application: the name you trade under, a contact email, your country and what you build. Plus the identity documents you upload — a government ID and a proof of address — and any business documents. A person reads them; what they decided is kept along with a checksum of what they read, so the decision survives the document.
- Your payout details, if you sell here
- The account name, account number or IBAN, bank name and country you give us for payouts. Only your own account owner can see or change them, and everywhere else on the platform — including the statement attached to a payout — they appear masked to the last four characters.
- Reviews you write
- Your rating, your words, and which version you had. These are public. Your name is shortened before it is published — a first name and a last initial — because a full name on an indexable page is not something buying software should cost you. Your email address never appears.
- Support threads about a purchase
- What you asked a seller, what they answered, and anything a dispute records. A seller sees your question and their own notes to us; they never see our internal notes, and you never see either. Raising a dispute shares what you wrote with the seller, because they are entitled to answer it.
- Activity and audit records
- Significant actions — a quote issued, a payment recorded, a permission changed — with who did them and when. Accepting a quote also records your IP address and browser, because acceptance is a commercial agreement and has to be evidenced.
Five, and every one of them does a job you asked for.
None of these track you across other websites, and none are used for advertising.
- Session
- Keeps you signed in. Removed when you sign out.
- cosetup_conv
- A random identifier that lets a signed-out visitor return to an assistant conversation. It identifies the conversation, not you, and expires after 30 days.
- cosetup_cart
- Keeps a basket attached to you before you sign in.
- cosetup_currency
- Remembers which currency you chose. Set only when you choose one.
- cosetup_rv
- The products you recently looked at, so we can show them again.
The services that make it work, and no one else.
Payment providers
Card details are entered on the provider’s own page and never reach us. They receive your email and the amount so they can take the payment.
The assistant’s AI provider
What you type into the assistant is sent to a third-party model to generate the reply. Do not put passwords, card numbers or server credentials into it — there is a proper place for credentials and a chat window is not it.
Email and hosting
Providers who deliver our email and run our servers necessarily handle the data passing through them.
Nobody else
We do not sell personal data, and we do not share it for advertising.
Want a copy, or want it deleted?
Ask, and we will do it. Some records have to be kept regardless — an invoice is an accounting document and a licence is proof of what you bought — and we will tell you plainly which those are rather than quietly keeping them.
Get in touch