Tradeit Co., Ltd. ("TradeIt," "we," "us," or "our") provides a software-as-a-service platform designed to support international trade and overseas sales activities through data-driven insights, CRM functionality, and AI-powered analysis tools. Our Services help businesses identify potential buyers, analyze trade data, and manage outreach workflows more efficiently.
We are committed to protecting the privacy and security of personal information processed through our website, platform, and related services (collectively, the “Services”). We process personal information in accordance with applicable data protection laws and regulations, including those of the Republic of Korea, the United States, and other jurisdictions where our users are located.
This Privacy Policy (“Policy”) explains how TradeIt collects, uses, discloses, and otherwise processes personal information relating to users of our Services, including business users, representatives of corporate customers, and website visitors (“you” or “your”). Our legal bases for processing personal information may include performance of a contract, legitimate interests related to providing and improving our Services, and compliance with legal obligations.
This Policy forms part of, and is incorporated by reference into, our Terms of Service. Where applicable, TradeIt may enter into a separate Data Processing Agreement (“DPA”) with customers governing the processing of Customer Personal Data. In the event of any conflict between this Policy and a signed DPA, the DPA shall prevail with respect to such Customer Personal Data.
By using our Services, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, you should not use our Services.
1. Personal Data
For purposes of this Privacy Policy, “Personal Data” means any information that identifies or relates to an identified or identifiable natural person, or that can reasonably be linked to such person, in accordance with applicable data protection laws.
Personal Data processed by TradeIt may include, for example, name, business contact information (such as company email address or phone number), account credentials, IP address, device or browser identifiers, authentication tokens, usage logs, and other information generated through the use of our Services.
TradeIt does not intentionally collect or process sensitive personal data, including but not limited to biometric identifiers, genetic data, health information, precise geolocation data, or other special categories of personal data as defined under applicable privacy laws. Users are instructed not to upload or provide such information through the Services.
Certain technical, operational, and usage-related data that TradeIt processes for security, billing, analytics, service operation, or product improvement purposes (“Service Data”) are handled separately and are not treated as Customer Personal Data unless required by applicable law.
2. Collection and Use of Personal Information
▶ Information You Provide Directly
TradeIt may collect personal information that you voluntarily provide when you create an account, subscribe to a paid plan, submit a customer support request, or otherwise use our Services. Such information may include: - Name, company name, and job title - Business email address and contact information - Account login credentials - Company information and buyer-related data entered by users for the purpose of using overseas sales and CRM features Information that you enter or upload is used solely for the purpose of providing the Services and responding to your requests.
▶ Information Collected Automatically During Use of the Services
When you use the TradeIt Services, certain technical information may be collected automatically, including: - IP address - Browser type and operating system - Device identifiers - Service usage records, access timestamps, and error logs Such information is processed for the purposes of ensuring stable service operation, maintaining security, analyzing usage trends, and improving the Services.
▶ Usage and Analytics Data
To improve service quality and ensure reliable operation, TradeIt may collect data regarding how users interact with key features of the Services. This may include records of search executions, usage of analysis functions, and feature interactions within the CRM interface.
This information is used exclusively for service operation, security, error analysis, and functional improvements, and is not used for the purpose of identifying, evaluating, or profiling individual users.
▶ Third-Party Services and External Integrations
TradeIt may integrate with third-party service providers for purposes such as payment processing, data retrieval, email delivery, and the execution of analytical functions in order to provide the Services. In such cases, TradeIt shares only the minimum information necessary to perform the relevant functions.
Where a user authorizes an integration with a third-party service, such third party may process the user’s data in accordance with its own privacy policy. TradeIt does not control, and is not responsible for, the data processing practices of such third parties. Users are responsible for reviewing the applicable privacy policies of any third-party services they choose to integrate with the Services.
▶ Email Integrations and Processing of Email Content
If you enable an email account integration, TradeIt may access and process email data from your connected account to provide the Services. Such email data may include sender/recipient information, timestamps, subject lines, header information, and message bodies (text).
TradeIt may store email body text to support core service functions, including CRM timeline logging, AI-assisted follow-up drafting based on conversation context, and communication analytics, and to operate the Services. Attachments are not stored on TradeIt’s servers by default; where needed, attachments may be retrieved on demand from the original email provider or the connected service for download.
You may opt out of the storage and analysis of email body content at any time. If you opt out, certain email-based features—such as conversation-context analysis, AI-generated follow-ups, or automatic CRM timeline association—may be partially or fully unavailable.
▶ Children’s Data
TradeIt Services are not intended for individuals under the age of eighteen (18). TradeIt does not knowingly collect personal information from minors, and by using the Services, users represent and warrant that they are at least 18 years old or have reached the age of majority under applicable law.
If TradeIt becomes aware that it has collected personal information from a minor without valid parental or legal guardian consent, TradeIt will promptly delete such information in accordance with applicable laws.
▶ Legal Basis and Purposes of Processing Personal Information
TradeIt processes personal information based on the following legal grounds, as permitted under applicable laws: - Performance of a contract for the provision of the Services - TradeIt’s legitimate interests - Compliance with legal and regulatory obligations - Consent provided by the user, where required TradeIt collects and uses personal information for the following purposes: - To provide, operate, and maintain the TradeIt Services - To perform functions requested by users, including overseas sales support, trade data analysis, and CRM features - To analyze service usage and improve performance, stability, and functionality - To maintain service security and detect, prevent, and investigate fraud, misuse, or security incidents - To respond to inquiries and provide customer support - To process payments and transactions authorized by users - To comply with applicable laws, regulations, export controls, and sanctions requirements - To fulfill accounting, record-keeping, and audit obligations TradeIt does not engage in automated decision-making or profiling based on personal information that produces legal or similarly significant effects on users, as defined under applicable data protection laws.
TradeIt collects and processes only the minimum amount of personal information necessary to achieve the purposes described above. Personal information is retained and deleted in accordance with the relevant provisions of this Privacy Policy. Users may exercise their rights to withdraw consent or object to certain processing activities in accordance with applicable laws.
3. Legal Bases and Applicable Privacy Laws
TradeIt processes personal information only where a valid legal basis exists in accordance with applicable data protection laws in the jurisdictions where users reside or access the Services.
The TradeIt Services may be provided to users located in multiple countries and regions. Accordingly, the processing of personal information may be subject to various data protection frameworks, which may include, where applicable, the General Data Protection Regulation (GDPR), the UK GDPR, applicable U.S. state privacy laws, and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
TradeIt may update this Privacy Policy from time to time to reflect changes in applicable laws or regulatory requirements.
▶ Legal Bases for Processing Personal Information
TradeIt processes personal information based on the following legal grounds, as permitted under applicable data protection laws:- Performance of a Contract: TradeIt processes personal information to provide, operate, maintain, and support the Services requested by users in accordance with the Terms of Service or other agreements entered into with users. - Legitimate Interests: TradeIt may process personal information for its legitimate interests, including maintaining service security, detecting and preventing fraud or misuse, generating aggregated usage analytics, and improving service functionality and performance. Such processing is conducted only where TradeIt’s legitimate interests are not overridden by the rights and freedoms of users. - Consent: Where required by applicable law, TradeIt processes personal information based on the user’s prior consent. Users may withdraw their consent at any time, and such withdrawal will not affect the lawfulness of any processing carried out prior to the withdrawal. - Compliance with Legal Obligations: TradeIt may retain, use, or disclose personal information as necessary to comply with applicable legal and regulatory obligations, including accounting and record-keeping requirements, court orders, export control regulations, and sanctions laws. - Protection of Vital Interests: In exceptional circumstances, TradeIt may process personal information where necessary to protect the vital interests of an individual, such as to prevent serious harm or respond to an emergency.
4. Purposes of Use and Processing of Personal Information
TradeIt uses personal information for the following business and service-related purposes:- Service Delivery and Customer Support: To provide, operate, maintain, and support the TradeIt Services requested by users, including overseas sales support, trade data analysis, and CRM functionality. - Service Security and Integrity: To ensure the security, stability, and integrity of the Services, including detecting, preventing, and investigating fraud, misuse, unauthorized access, or security incidents. - Service Improvement and Quality Enhancement: To analyze service usage and feature interaction patterns in order to improve service performance, reliability, functionality, and user experience, and to support the development of new features. Where feasible, such analysis is conducted using aggregated or de-identified data. - Product Updates and Limited Communications: To deliver service-related notices, feature updates, and operational communications to users who have opted to receive such communications, and to measure their effectiveness. - Business Operations and Continuity: To support internal business operations, protect TradeIt’s assets and proprietary information, and ensure continuity and stability of business operations. - Legal and Regulatory Compliance: To comply with applicable laws, regulations, export control and sanctions requirements, and lawful requests or orders from courts or regulatory authorities. - Auditing, Accounting, and Dispute Resolution: To fulfill accounting, record-keeping, auditing requirements, and to manage disputes or legal claims.
5. Data Processing and Sub-Processors
TradeIt may process personal information directly or, in certain cases, process personal information on behalf of customers in accordance with their instructions. Depending on the nature of the processing, TradeIt may act as a data controller or a data processor, as defined under applicable data protection laws.
To operate and provide the Services, TradeIt may engage third-party service providers (“Sub-processors”) for the following purposes:- Hosting and maintaining the platform, website, and databases - Processing payments and managing billing and settlements - Providing technical support, customer support, and service analytics - Storing, securing, and backing up data - Enabling service functionalities such as email delivery and external data integrations For example, TradeIt may use Amazon Web Services (AWS) for infrastructure hosting and Stripe for payment processing. TradeIt may also use service providers for email delivery, customer support, or security monitoring, depending on the features enabled.
TradeIt currently engages the following Sub-processor for operation of the Services:- Sub-processor: Amazon Web Services, Inc. (AWS) - Processing activities: Cloud infrastructure services (server hosting), data storage and backups, and related service operations support - Data location: Republic of Korea (AWS Seoul Region) - Retention period: Until account termination or deletion request, or until termination of the sub-processing agreement TradeIt enters into contractual arrangements with all Sub-processors that include appropriate data protection obligations designed to ensure compliance with applicable data protection laws. TradeIt requires Sub-processors to process personal information only for the purposes of providing services to TradeIt and in accordance with applicable legal requirements.
Information regarding TradeIt’s Sub-processors may be provided upon reasonable request. TradeIt may update or change its Sub-processors as necessary to support the operation and improvement of the Services.
6. International Data Transfers
TradeIt stores and processes personal information on servers located in the Republic of Korea (currently: AWS Seoul Region) for the operation of the Services. However, where necessary for service operations such as payment processing, customer support, or integrations with third-party services, personal information may be transferred to and processed in systems located outside the Republic of Korea. In such cases, TradeIt will apply appropriate safeguards in accordance with applicable data protection laws. You may contact us using the details in this Policy for further information regarding cross-border transfers.
Where personal information relating to users located in the European Economic Area (EEA), the United Kingdom, or other jurisdictions with specific cross-border data transfer requirements is transferred internationally, TradeIt implements appropriate safeguards in accordance with applicable laws. These safeguards may include, where applicable, standard contractual clauses, contractual data protection commitments, or other lawful transfer mechanisms permitted under relevant data protection regulations.
TradeIt takes reasonable measures to ensure that personal information transferred internationally is protected in a manner consistent with this Privacy Policy and applicable legal requirements.
7. Investigations and Disclosures
TradeIt may, in good faith and to the extent permitted by applicable law, investigate, use, or disclose personal information in the following circumstances:- Where necessary to comply with a valid legal process or lawful request from a court, law enforcement authority, or governmental body - Where necessary to prevent, detect, investigate, or address fraud, misuse, security incidents, or other unlawful activities in connection with the Services - Where necessary to protect the rights, property, safety, or reputation of TradeIt, its users, business partners, or the public Unless prohibited by law, TradeIt may use reasonable efforts to provide prior notice to affected users before disclosing personal information.
Any investigation or disclosure of personal information will be conducted in accordance with applicable data protection laws and will be limited to the minimum amount of information necessary to achieve the relevant purpose.
8. Log Data
TradeIt automatically collects operational telemetry (“Log Data”) when users access or use the Services for the purposes of maintaining service security, stability, and performance. Log Data may include:- IP address and approximate location information - Browser type and version, and operating system - Pages, APIs, or features accessed within the Services - Access timestamps, usage events, and error records - Session identifiers, device identifiers, and error or debugging codes - Other service-related usage statistics Log Data is used solely for service operation, security monitoring, troubleshooting, and service improvement, and is not used for the purpose of identifying, evaluating, or profiling individual users.
Log Data is generally retained for up to ninety (90) days, unless a longer retention period is required by applicable law.
9. Cookies and Similar Tracking Technologies
TradeIt uses cookies and similar tracking technologies to operate, secure, and analyze the Services. Cookies are small data files stored on a user’s device that support core service functionality and help improve user experience.
At this time, TradeIt primarily uses cookies that are strictly necessary to operate the Services. For example, TradeIt may store authentication tokens for login/session management and security purposes. Typical retention periods are:- Access Token: up to 1 day - Refresh Token: up to 2 months
These tokens are strictly necessary for authentication and session management and are not used for advertising tracking or third-party marketing purposes. If TradeIt introduces analytics or marketing cookies in the future, TradeIt will provide appropriate notice and obtain consent where required by applicable law.
The Cookies used by TradeIt may be categorized as follows:- Strictly Necessary Cookies: These Cookies are required to enable core service functions, such as user authentication, session management, security features, and fraud prevention. Strictly Necessary Cookies are set based on performance of a contract or TradeIt’s legitimate interests and do not require user consent. - Analytics and Performance Cookies: These Cookies are used to analyze how the Services are accessed and used, diagnose errors, and improve service performance and functionality. Where required by applicable law, these Cookies are used only with the user’s prior consent and are processed in aggregated or de-identified form where feasible. - Functional Cookies: Functional Cookies remember user preferences, such as language or interface settings, to enhance usability and provide a more personalized experience. - Marketing-Related Cookies: TradeIt may use Cookies on a limited basis to measure the effectiveness of marketing activities or improve service outreach. Such Cookies are used only where permitted by applicable law and, where required, with the user’s prior consent. Users may manage or disable Cookies through their browser settings or through cookie preference tools made available by TradeIt. Please note that disabling Strictly Necessary Cookies may limit certain features or functionality of the Services.
▶ Cookie Management and Retention
Users may manage or withdraw their cookie preferences at any time through one or more of the following methods:- Adjusting browser settings - Using cookie preference or consent management tools provided by TradeIt, where available - Enabling recognized browser- or device-level privacy signals, where applicable - Disabling non-essential Cookies will not affect the core functionality of the Services; however, it may limit certain analytics-based improvements or performance optimizations. Identifiers derived from Cookies are retained only for as long as necessary to fulfill the purposes described in this Privacy Policy. Once those purposes are met, such data is deleted or irreversibly anonymized. Analytics-related cookie data is retained only for a reasonable period permitted under applicable laws.
10. Information Security and Accuracy
TradeIt is committed to protecting the security of personal information and maintaining its accuracy. TradeIt implements reasonable technical, administrative, and physical safeguards designed to protect personal information in accordance with applicable data protection laws and generally accepted industry standards.
Such safeguards may include, where appropriate:- Data in Transit: Communications between a user’s browser or API client and TradeIt’s systems are protected using encryption technologies. - Data Storage Protection: Personal information is stored in environments with appropriate access controls and, where feasible, is protected through encryption, pseudonymization, or anonymization measures. - Access Controls: Access to personal information is restricted to authorized personnel with a legitimate business need, and is subject to role-based permissions, authentication procedures, and access logging. - System Resilience and Backups: TradeIt maintains reasonable backup and recovery measures to support service continuity and data protection. - Security Monitoring and Management: TradeIt operates monitoring and security management procedures designed to detect, assess, and respond to security risks. - Staff and Vendor Oversight: TradeIt requires employees and third-party service providers involved in personal information processing to comply with confidentiality and data protection obligations through contractual or internal policies. In the event of a personal information security incident that requires notification under applicable law, TradeIt will notify affected users and/or relevant authorities in accordance with such legal requirements.
Users are responsible for maintaining the confidentiality of their account credentials, implementing appropriate security measures (such as strong passwords), and notifying TradeIt if any personal information is inaccurate so that it may be updated.
▶ Additional Security Practices and Reliance on Third-Party Services
TradeIt manages personal information processing activities in accordance with applicable data protection laws and conducts reasonable risk assessments to review and improve its security measures as the threat landscape evolves.
If a user believes that their personal information is inaccurate or incomplete, the user may request correction through the contact methods described in this Privacy Policy, and TradeIt will address such requests in accordance with applicable laws.
In providing the Services, TradeIt may rely on third-party service providers for functions such as infrastructure operations, payment processing, data storage, and external service integrations. While TradeIt considers data protection and security practices when selecting such providers, TradeIt cannot fully control or guarantee the uninterrupted availability, security, or performance of third-party systems. As a result, service interruptions, delays, or data issues may occur due to factors outside of TradeIt’s reasonable control.
TradeIt maintains reasonable security measures designed to protect personal information and will make commercially reasonable efforts to notify users of material security incidents involving personal information where notification is required under applicable law.
11. Retention of Personal Information
TradeIt retains personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.
Retention periods are determined based on factors including:- The duration necessary to provide and operate the Services - Applicable legal, regulatory, accounting, or record-keeping obligations - The need to resolve disputes, enforce agreements, or protect legal rights For example, log data can be stored for up to 90 days, and account information can be stored for a reasonable period of time after the account is terminated, as permitted by relevant laws and regulations, before being deleted. Unlike operational log data, certain account and billing-related information may be retained separately to provide the Services and comply with legal obligations.
Email data processed through email integrations (e.g., email metadata and stored email body text) may be retained for as long as necessary to provide the Services and the features you enable. If you disconnect an email integration or opt out of email body storage/analysis, TradeIt will limit processing and delete or de-identify the relevant data within a reasonable period, subject to applicable law, backups, and legal retention requirements.
Upon account termination or expiration of the service relationship, TradeIt will retain personal information for a reasonable period as permitted by law and will then delete or de-identify such information. Certain information may be retained for longer periods where required for fraud prevention, legal compliance, or legal defense purposes.
Personal information contained in system backups or disaster recovery systems may be retained for a limited period in accordance with TradeIt’s backup retention policies and is deleted on a rolling basis.
Users may request deletion of their personal information in accordance with applicable data protection laws, and TradeIt will process such requests to the extent permitted by law.
12. Links to Third-Party Sites and Services
The TradeIt Services may contain links to, or integrations with, third-party websites or services that are not operated or controlled by TradeIt, including services used for payment processing, data retrieval, or other functionalities.
Any interaction with such third-party websites or services is governed by the respective third party’s privacy policy and terms of use. TradeIt does not control and is not responsible for the privacy or security practices of external sites or services.
Users are encouraged to review the applicable privacy policies of any third-party services before providing personal information.
13. Notices and Communications
By using the TradeIt Services, users consent to receive transactional or administrative electronic communications that are necessary for service operation, such as account-related notices, security alerts, and billing communications. These communications are essential to the provision of the Services and may not be subject to opt-out.
Where permitted by applicable law, TradeIt may send marketing or promotional communications only with the user’s consent. Users may opt out of receiving non-essential marketing communications at any time, and such opt-out will not affect the receipt of essential service-related communications.
Formal privacy-related inquiries or notices may be submitted to TradeIt using the contact information provided in this Privacy Policy.
TradeIt may deliver legal, privacy, or policy-related notices to users via email, in-product notifications, banners, or any other method permitted by applicable law.
14. Governing Law and Jurisdiction
This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of Korea. However, where mandatory data protection or consumer protection laws of a user’s jurisdiction apply and prevail, such mandatory provisions shall take precedence to the extent of any conflict.
Any disputes arising in connection with this Privacy Policy shall be resolved in accordance with applicable laws, and, unless otherwise required by mandatory law, shall be subject to the jurisdiction of the courts having jurisdiction over TradeIt’s principal place of business.
15. Disclaimer Regarding AI-Generated Insights and Information
The TradeIt Services may provide analytical outputs, insights, recommendations, or other information to support trade-related activities, buyer research, and overseas sales operations. Such information is provided for general informational purposes only and does not constitute legal, financial, accounting, or other professional advice.
TradeIt does not guarantee the accuracy, completeness, or timeliness of any information generated or provided through the Services. Users remain solely responsible for reviewing, validating, and making decisions based on any information obtained through the Services.
Ownership, usage rights, and other intellectual property matters relating to outputs or data provided through the Services are governed by the applicable Terms of Service.
16. Contact Information and Privacy Inquiries
If you have any questions or concerns regarding this Privacy Policy or wish to exercise your rights under applicable data protection laws, you may contact TradeIt using the details below:
Email: tradeit@tradeit.co.kr Mail: TradeIt Co., Ltd., Rm 904-905, 30, Centum seo-ro, Busan, 48058, South Korea
TradeIt will respond to verified privacy-related requests within a reasonable period in accordance with applicable laws. Where permitted by law, response times may be extended, and TradeIt will notify users of the reason for any such delay.
If you believe that your privacy-related inquiry has not been adequately addressed, you may lodge a complaint with the relevant data protection supervisory authority in your jurisdiction, as provided under applicable law.
17. Supplemental Notice for Certain Jurisdictions
This section supplements the other provisions of this Privacy Policy and applies to users located in the United States, Canada, the European Economic Area (EEA), the United Kingdom, and other jurisdictions where specific data protection laws apply.
When users access or use the Services, TradeIt may collect the following categories of personal information:- Identifiers: Such as name, business email address, contact information, account identifiers, and IP address (at an approximate location level only). - Commercial and Service Usage Information: Such as subscription status, service plan details, and transaction history. Payment card information is processed by third-party payment processors, and TradeIt does not store full payment card details. - Internet and Service Activity Information: Such as login records, feature usage, service interaction logs, and system telemetry. - User-Provided Business Information: Information provided by users in connection with overseas sales activities, CRM usage, buyer management, or other business-related service functions. TradeIt does not intentionally collect sensitive personal information, such as government-issued identification numbers, financial account information, health information, or precise geolocation data, and users are instructed not to submit such information through the Services.
TradeIt does not “sell” personal information, and does not “share” personal information for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws.
Depending on a user’s place of residence and subject to applicable legal limitations, users may have the following privacy rights under applicable data protection laws:- Right of Access and Portability: The right to request access to, or a copy of, the personal information that TradeIt holds about the user. - Right to Correction: The right to request correction of inaccurate or incomplete personal information. - Right to Deletion: The right to request deletion of personal information, to the extent permitted by applicable law. - Right to Restrict Processing or Withdraw Consent: The right to withdraw consent or request restriction of certain processing activities, where such processing is based on consent or otherwise permitted by law. - Right to Object to Certain Processing Activities: The right to object to certain processing activities, including processing for marketing purposes, where permitted by applicable law. Users may exercise their privacy rights by contacting TradeIt using the contact information provided in this Privacy Policy. TradeIt will verify the identity of the requester and respond to such requests in accordance with applicable data protection laws.
TradeIt will not discriminate against users for exercising their privacy rights.
If a user believes that TradeIt has not adequately addressed a privacy-related request, the user may lodge a complaint with the relevant data protection supervisory authority in their jurisdiction, as provided under applicable law.
18. Changes to This Privacy Policy
TradeIt may update or revise this Privacy Policy from time to time to reflect changes in legal requirements, service features, or data processing practices.
When this Privacy Policy is updated, TradeIt will provide notice of the changes through reasonable means, such as posting the updated policy on the website or within the Services, and will indicate the effective date of the revised Privacy Policy.
Where required by applicable law or where changes materially affect users’ rights or the purposes of personal information processing, TradeIt will make reasonable efforts to provide advance notice of such changes.
The revised Privacy Policy will take effect as of the stated effective date, and continued use of the Services after that date may be subject to the updated Privacy Policy.
19. Severability
If any provision of this Privacy Policy is held to be unlawful, invalid, or unenforceable under applicable law, such provision shall be deemed severed, and the remaining provisions shall remain in full force and effect.
20. Relationship to Other Terms
This Privacy Policy describes how TradeIt processes personal information in connection with the Services and should be read together with TradeIt’s Terms of Service, any applicable Data Processing Agreement (DPA), and any supplemental terms applicable to specific services.
In the event of any conflict regarding personal information processing, the applicable agreement or terms shall prevail to the extent permitted by applicable law and to the extent such agreement applies.
TradeIt may provide separate policies or notices, such as a cookie policy or data processing terms, where required by law or operational needs, and such documents may apply in conjunction with this Privacy Policy.