Privacy Policy & GDPR Compliance

Last Updated: July 30, 2026

At TradeBridge (accessible from tradebridge.trade), operated by Datick d.o.o. ("we", "us", "our"), protecting the privacy and personal data of our visitors, customers, and software users is a core commitment. This Privacy Policy outlines how we collect, process, store, and safeguard your information in full compliance with the European Union General Data Protection Regulation (GDPR - Regulation EU 2016/679) and applicable Croatian data protection laws.

1. Data Controller

The Data Controller responsible for your personal data is:
Datick d.o.o.
Registered in the Republic of Croatia (EU)
Email: support@tradebridge.trade

2. Data We Collect and Process

We collect and process the following categories of data:

  • Contact & Registration Data: When you request a trial license, contact support, or register for an account, we collect your name, company name (for B2B), email address, and communication records.
  • Licensing & Machine Data (Hardware Hash): To validate active licenses, prevent software piracy, enforce per-machine limits, and prevent trial abuse, the Software generates an anonymized cryptographic hash (SHA-256) of local hardware parameters (CPU ID, Motherboard Serial Number, and Primary MAC Address).
  • Payment & Checkout Data: Payments are processed directly through our Merchant of Record, Whop Inc. We do not store or collect financial payment card details on our servers.

3. Legal Basis for Data Processing (GDPR Article 6)

We process your personal data under the following legal bases:

  • Contract Performance (Art. 6(1)(b) GDPR): Processing contact details, license keys, and account credentials to deliver, operate, and maintain the Software and services you purchased.
  • Legitimate Interests (Art. 6(1)(f) GDPR): Generating SHA-256 hardware hashes to protect our intellectual property, prevent unauthorized key sharing, enforce machine limits, and detect software piracy or trial fraud. The SHA-256 hash is a one-way mathematical function that cannot be reversed to inspect raw hardware serials or personal computer identity.
  • Legal Obligation (Art. 6(1)(c) GDPR): Maintaining financial records, tax invoices, and compliance data as required by EU/Croatian commercial and tax laws.

4. Data Sharing & Third-Party Processors

We do not sell, rent, or trade your personal data to third parties. We share data only with trusted service providers who assist us in operating our services under strict data processing agreements:

  • Whop Inc. (Merchant of Record): Handles order checkout, subscription billing, VAT compliance, and customer portal management.
  • Cloud Infrastructure Providers: Cloudflare Pages & Workers for web hosting and secure license validation API endpoints.

5. Your Rights Under the GDPR

As a data subject in the European Union, you have the following statutory rights:

  • Right of Access (Art. 15 GDPR): The right to request copies of your personal data held by us.
  • Right to Rectification (Art. 16 GDPR): The right to request correction of inaccurate or incomplete personal data.
  • Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): The right to request erasure of your personal data, subject to legal record retention requirements.
  • Right to Restriction of Processing (Art. 18 GDPR): The right to request restricted processing of your data under specific conditions.
  • Right to Data Portability (Art. 20 GDPR): The right to receive your personal data in a structured, commonly used machine-readable format.
  • Right to Object (Art. 21 GDPR): The right to object to data processing based on legitimate interests.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority. In Croatia, the competent authority is the Personal Data Protection Agency (AZOP - Agencija za zaštitu osobnih podataka, https://azop.hr).

6. Data Security & Retention

We implement industry-standard technical and organizational security measures (including TLS encryption and SHA-256 hashing) to protect your data. Personal data is retained only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory retention obligations.

7. Contact Us

To exercise any of your GDPR rights or ask questions regarding this Privacy Policy, please contact our Data Protection Team at: support@tradebridge.trade.