Privacy Policy

We collect information you provide directly:

• Account & profile: name, email address, password, business/location details.
• Business data: products, inventory, orders, customers, reports, and other data you enter into CrabHub.
• Support communications: messages and information you share when you contact us.

And information collected automatically:

• Device & log data: IP address, browser type, operating system, timestamps.
• Usage analytics: pages viewed, features used, and other product-usage events.
• Cookies & similar technologies: to keep you signed in and understand usage.

Payment card information is collected directly by our payment processor, Paddle, and is not stored on CrabHub servers.

We use your information to:

• Provide, operate, and improve the CrabHub service.
• Process transactions and manage subscriptions (via Paddle).
• Communicate with you about your account, updates, and support requests.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations.

Where GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract: to provide the service you've signed up for.
• Legitimate interests: to secure, maintain, and improve CrabHub, prevent fraud, and communicate with customers.
• Legal obligation: to meet tax, accounting, and regulatory requirements.
• Consent: where required (e.g. certain cookies or marketing emails); you may withdraw consent at any time.

We share personal information only with the following categories of recipients:

• Paddle (Merchant of Record): Paddle.com Market Limited is our reseller and Merchant of Record. Paddle handles checkout, payment processing, billing, refunds, and applicable sales tax/VAT. When you buy a subscription, Paddle collects your billing information directly and processes it under its own privacy policy (paddle.com/legal/privacy).
• Cloud hosting & infrastructure: Supabase (database, authentication) and Cloudflare (edge hosting) process data on our behalf to run the CrabHub service.
• Email delivery: our transactional email provider sends account, billing, and support emails on our behalf.
• AI providers: when you use AI features, your prompts and relevant business data may be sent to our AI provider(s) to generate a response. They do not use your data to train their models.
• Legal & safety: we may disclose information when required by law, subpoena, or to protect the rights, safety, or property of CrabHub, our users, or the public.
• Business transfers: if CrabHub is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

We do not sell your personal information.

We retain personal information only as long as needed for the purposes described:

• Account & business data: for as long as your account is active.
• After account closure: we retain data for up to 90 days for backups and to resolve disputes, after which it is deleted or anonymized.
• Billing records: retained by Paddle and by us for up to 7 years to meet tax and accounting obligations.
• Support communications: up to 3 years after your last interaction.