C
Comerch

Privacy Policy

Last updated: 25 May 2026

1. Who We Are

Comerch ("we", "us", "our") is a SaaS platform for garment buying house management, operated from India. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. What Data We Collect

When you create an account, we collect your name, email address, and organisation details (company name). When you use the platform, we store:

  • Order data, manufacturer/buyer records, and SKU information you create
  • Uploaded files (images, tech packs, documents)
  • Communication data from connected integrations (e.g. Gmail emails)
  • Usage data such as login timestamps and feature interactions

3. How We Use Your Data

Your data is used exclusively to provide and improve the Comerch service — managing orders, syncing emails, generating alerts, and running AI-assisted features (such as tech pack parsing and email classification). We do not sell your data to third parties. We do not use your data for advertising.

4. Google API Services — Gmail Data Usage

Comerch's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect your Gmail account, Comerch requests the following permissions:

  • gmail.readonly — to read incoming emails from your registered buyer and vendor contacts
  • gmail.labels — to manage labels for organising synced emails
  • gmail.modify — to mark emails as read after they are processed

Specifically, Comerch:

  • Only accesses emails from contacts you have registered as buyers or manufacturers in the platform
  • Reads email subjects, bodies, and attachments to classify intent, extract order references, and parse tech pack documents
  • Stores synced email data securely and restricts access to members of your organisation only
  • Does not use Gmail data for advertising or to serve ads
  • Does not transfer Gmail data to third parties for advertising, market research, or any purpose unrelated to the core functionality of the app
  • Does not use Gmail data to train general-purpose AI or machine learning models
  • Does not allow humans to read your Gmail data unless (a) you give explicit consent, (b) it is necessary for security purposes (e.g. investigating abuse), or (c) it is required by law

You can disconnect your Gmail account at any time from the Settings → Integrations page. Disconnecting stops all email syncing and revokes our access to your Gmail account.

5. AI & Third-Party Data Processing

Comerch uses third-party AI language model APIs to power features like tech pack parsing and email classification. When these features are used, relevant text (e.g. email body or document content) is sent to the AI provider for processing. We select AI providers that do not use input data for training their models. AI processing results are stored within your organisation and are not shared with other users or organisations.

6. Data Storage & Security

All data is encrypted in transit (TLS). Files are stored on Cloudflare R2, an S3-compatible object storage service. The application database is hosted with automated daily backups. Access to production infrastructure is restricted to authorised personnel only.

7. Data Retention

Your data is retained for as long as your account is active. If you delete your account, all associated data — including files, synced emails, and order records — will be permanently deleted within 30 days. Conversation trail entries (the audit log of order activity) are immutable while your account is active but are deleted along with all other data upon account deletion.

8. Cookies

Comerch uses essential cookies for authentication (session tokens). We do not use advertising or tracking cookies. If analytics are enabled, they use privacy-respecting, cookieless methods where possible.

9. Your Rights

You have the right to access, export, correct, or delete your data at any time. You can disconnect third-party integrations (such as Gmail) at any time, which will stop data syncing and revoke access. To exercise these rights or make a data-related request, contact us.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests, reach out via our contact page or email us at support@comerch.co.