Privacy Policy

1. Introduction

Welcome to Ardent Seller, a service provided by Ardent Workshop LLC ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our inventory, manufacturing, and sales management platform.

By using Ardent Seller, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us, including:

• Account Information: Name, email address, password, and organization details when you register for an account
• Profile Information: Additional details you may provide in your user profile
• Business Data: Inventory records, transaction details, vendor and customer information, recipes, production runs, equipment usage and maintenance logs, pricing tiers, and other data you input into the platform
• Payment Information: Your subscription plan selection and billing-related details. Payment card information is collected and processed directly by our third-party payment processor (Lemon Squeezy) and is not stored on our servers
• Usage and Billing Data: For usage-based plans, we track transaction counts, user counts, location counts, and audit trail tier selections to calculate credit-based charges each billing period
• Communications: Information contained in messages you send to us, including support requests submitted through our platform

2.2 Automatically Collected Information

When you access our services, we automatically collect:

• Usage Data: Information about how you use our platform, including features accessed, time spent, and interaction patterns
• Device Information: Device type, operating system, browser type, IP address, and unique device identifiers
• Log Data: Server logs including access times, pages viewed, and system activity
• Cookies and Tracking: Data collected through cookies and similar technologies (see Section 6)

2.3 Third-Party Marketplace Data

When you connect a third-party marketplace account (such as Etsy, Shopify, Amazon, or other supported platforms) to Ardent Seller, we collect data from that platform on your behalf through its API. This may include:

• Order Data: Order details, transaction amounts, fees, and fulfillment status
• Product Data: Listing titles, descriptions, SKUs, and inventory levels
• Customer Data: Buyer names associated with your orders, where permitted by the platform and its API scopes. Additional buyer information (such as email addresses) is only accessed if separately authorized by the platform

This data is stored in your Ardent Seller account solely to provide inventory management, cost tracking, and reporting functionality to you. We do not sell, share, or use marketplace data for purposes other than providing the service to you. We comply with each platform's API data retention and caching policies, and we refresh cached data within the timeframes required by each platform. When you disconnect a marketplace integration or revoke API access through the third-party platform, we stop importing new data and delete any cached or temporary data in accordance with that platform's API terms. You may request deletion of all data imported from a specific platform by contacting support. For details on specific integrations, see our Etsy Integration page.

2.4 Third-Party Food and Nutrition Data

Our platform incorporates food and nutritional reference data from third-party open databases, including OpenNutrition and Open Food Facts. This data is used to provide nutrition labels, allergen tracking, and unit conversion features. We do not share your business data with these third-party data sources.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our platform's functionality
• Account Management: To create and manage your account, authenticate users, and process transactions
• Customer Support: To respond to your inquiries, provide technical support, and resolve issues
• Communications: To send you service-related notifications, updates, and marketing communications (with your consent)
• Analytics: To analyze usage patterns, improve user experience, and develop new features
• Security: To detect, prevent, and address security threats, fraud, and illegal activities
• Compliance: To comply with legal obligations and enforce our terms of service

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 Service Providers

We share your information with trusted third-party service providers who assist us in operating our platform, including:

• Authentication: Supabase (user authentication and session management)
• Payment Processing: Lemon Squeezy (subscription billing, credit-based usage billing, and checkout)
• Transactional Email: Resend (account notifications, team invitations, and support confirmations)
• Cloud Hosting: Amazon Web Services and Netlify (application hosting and database storage)
• Analytics: Umami (privacy-focused, cookieless website analytics)
• Cookie Consent: Cookie Chimp (cookie consent management)
• Marketplace Integrations: Third-party marketplace platforms (such as Etsy, Shopify, Amazon, and others) that you choose to connect, to import order data and synchronize inventory levels on your behalf

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government regulations).

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

4.5 Team Members

Information within your organization account may be accessible to team members you invite to your account, based on the roles and permissions you assign.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS) and at rest (AES-256)
• Secure authentication via Supabase with support for password-based login
• Role-based access controls within team accounts (owner, admin, member roles)
• Multi-tenant data isolation at both the organization and location level, ensuring your data is never accessible to other organizations
• Audit trail logging of data changes within the platform
• Rate limiting on sensitive operations to prevent abuse

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform:

• Essential Cookies: Required for the platform to function properly (e.g., authentication, session management)
• Analytics Cookies: Help us understand how users interact with our platform
• Preference Cookies: Remember your settings and preferences

You can manage your cookie preferences at any time through our Cookie Chimp consent banner, which allows you to accept or reject non-essential cookie categories. You can also control cookies through your browser settings. Disabling certain cookies may affect platform functionality.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information to comply with legal obligations, resolve disputes, and enforce our agreements.

Audit Trail: The platform maintains an audit trail of data changes. Audit trail retention varies by plan — from 7 days on the free plan to 30 days or more on paid plans. Pay As You Go users may select extended retention (up to unlimited) for an additional credit cost. Audit trail records beyond your plan's retention period are automatically purged.

Account Deletion: When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it for legal or regulatory purposes.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request access to your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Data Portability: Export your data at any time through the platform. Individual sections can be exported as CSV, and a complete account export (JSON format) is available from Settings > Data Management. Bulk export is also available from the account lock screen if your account has been locked due to inactivity
• Opt-out: Unsubscribe from marketing communications at any time
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us using the information in Section 12.

9. Children's Privacy

Ardent Seller is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws, including the use of Standard Contractual Clauses, adequacy decisions, or other legally recognized data transfer mechanisms.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification for significant changes

Your continued use of our services after changes are posted constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

13. Additional Information for Specific Regions

13.1 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how we use it, the right to delete personal information, and the right to opt-out of the sale of personal information (which we do not engage in).

13.2 European Union Residents (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, object to processing, and data portability. We process your information based on legitimate interests, contractual necessity, or your consent.