What we collect, why we collect it, who else sees it, and how to get it back or have it deleted.
Last updated 6 September 2026
Cuneyt Irmak - TradeSorter — a sole proprietorship (şahıs firması) registered in Türkiye, Turkish tax number 4661193369, trading from Istasyon Mah., Hakim Caglar Isik Cad. 37/3, 22100 Merkez/Edirne, Türkiye — is the data controller for the personal data described in this notice. TradeSorter is our stock management product.
A sole proprietorship has no legal personality separate from its owner, so the controller is a natural person: the individual named in the trade name above.
Questions, or a request to exercise your rights, go to hello@tradesorter.com.
Where you use TradeSorter to store details of your own customers, suppliers or staff, you are the controller of that data and we act as your processor.
Your name, business name, email address, password (stored hashed, never in plain text), and the users you invite to your account.
Inventory items, categories, suppliers, purchase orders, jobs and stock movements — including any personal details you choose to record about your own contacts.
Handled by Paddle, our payment provider and Merchant of Record. We never see or store your card number. We receive from Paddle only a customer reference, your subscription's plan and status, and the date the current period ends.
IP address, browser and device type, and server logs of requests to our API, kept for security and troubleshooting.
| Purpose | Lawful basis |
|---|---|
| Providing the service and your account | Performance of a contract |
| Taking payment and managing subscriptions | Performance of a contract |
| Service emails — verification, receipts, important changes | Performance of a contract |
| Support you ask us for | Performance of a contract |
| Security, fraud prevention, keeping logs | Legitimate interests |
| Improving the product | Legitimate interests |
| Marketing emails about TradeSorter | Consent — withdraw it any time |
| Keeping accounting records | Legal obligation |
We do not sell your personal data, and we do not use your business data to train machine learning models.
We use a small number of processors to run the service. Each is bound by contract to use the data only on our instructions.
| Provider | What for | Data involved |
|---|---|---|
| Paddle | Payments, tax, invoicing (Merchant of Record) | Name, email, billing address, payment details |
| Amazon Web Services | Hosting and database | All service data |
| Resend | Transactional email | Name, email address |
| Anthropic | Reading a supplier document into a draft purchase order, when you use that feature | The document you upload |
| EAN-DB | Barcode lookups | The barcode number only |
We may also disclose data where the law requires it, or to a buyer if the business is sold — in which case we will tell you first.
Your account and business data are stored in the EEA, in Amazon Web Services' eu-central-1 region (Frankfurt, Germany). They stay there — we do not replicate them to a database outside the EEA.
We are based in Türkiye and administer the service from there, so we access that EEA-hosted data remotely. This is our own access to our own systems rather than a disclosure to anyone else, and the data itself remains in the EEA. Wherever we access it from, it stays subject to this notice and to the UK and EU GDPR.
Some of the processors listed above are based outside the UK and EEA. Where we share data with them, the transfer relies on an adequacy decision where one covers that provider, and otherwise on Standard Contractual Clauses with the UK addendum.
Traffic is encrypted with TLS. Passwords are hashed. The database is private to our network and is not reachable from the internet. Access to production systems is limited to those who need it, and each customer's data is separated by tenant. No system is perfectly secure, but if a breach affects your rights we will tell you and the relevant regulator as the law requires.
Under the UK GDPR and the EU GDPR you may ask us to: give you a copy of your data; correct it; delete it; restrict or object to how we use it; or send it to another provider in a portable format. You can also withdraw consent to marketing at any time.
Because we are established in Türkiye, Turkish data protection law (KVKK, Law no. 6698) also applies to our processing, and gives you equivalent rights — to learn whether your data is processed, to obtain a copy, to have inaccurate data corrected, and to request erasure. The same address below reaches us for either.
Email hello@tradesorter.com and we will respond within one month. If you are unhappy with our response you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority.
This marketing site does not use analytics or advertising cookies.
The application at app.tradesorter.com uses only what it needs to work: a token that keeps you signed in, and your language and display preferences. Paddle sets its own cookies during checkout to process the payment and prevent fraud — see Paddle's cookie policy.
TradeSorter is a business tool and is not intended for anyone under 18. We do not knowingly collect children's data.
We will update this page when our practices change, and will email the account owner if a change is material. The date at the top always shows the current version.
Cuneyt Irmak - TradeSorter, Istasyon Mah., Hakim Caglar Isik Cad. 37/3, 22100 Merkez/Edirne, Türkiye · hello@tradesorter.com