Legal
Privacy Policy
Last updated February 20, 2026
This Privacy Policy explains how RetroSwap collects, uses, and protects information when you use our website and services.
On this page
01Introduction and Scope
- This Privacy Policy explains how RetroSwap collects, uses, and protects personal information when you use our website, software, integrations, and related services.
- RetroSwap is operated by Cognitivv Inc., 169 Madison Ave STE 2930, New York, NY 10016, which acts as the data controller for personal information covered by this policy.
- This policy applies to visitors, account owners, staff users, and people who communicate with us about the service.
- If a separate contract, data processing addendum, or integration agreement applies, that document may supplement this policy for that relationship.
02Information We Collect
Account and profile information
- Name, email address, business/store details, login credentials, and account settings.
Commercial and operational records
- Inventory data, product details, transaction records, store operations data, and related business content submitted to RetroSwap.
Billing and payment information
- Billing profile details and subscription data.
- Payment processing data handled by payment providers; we generally receive billing metadata and status rather than full payment card numbers.
Device, technical, and log data
- IP address, browser type, operating system, device identifiers, request logs, and diagnostic events.
Usage and analytics data
- Feature interaction, session events, page activity, and performance telemetry used to operate and improve the service.
Integration and partner data
- Data made available when you connect third-party services (for example marketplaces, ecommerce systems, or communication providers), including tokens/scopes and synced records.
Support and communications
- Messages, attachments, and details you provide when contacting support or participating in service-related communications.
Marketing preferences
- Subscription preferences, campaign engagement events, and consent/opt-out status where required by law.
AI feedback and quality signals
- Thumbs up/down ratings, optional comments, and related metadata you submit about AI outputs (including authenticity checks) to help us evaluate and improve quality.
03Sources of Information
- Directly from you when you create an account, configure your workspace, connect integrations, transact, or contact us.
- Automatically through cookies and similar technologies, logs, and instrumentation when you use our website and services.
- From connected third-party services that you authorize us to access.
- From service providers and partners that support security, payments, analytics, communications, and operations.
04How We Use Information
- Provide, maintain, and personalize RetroSwap services and account functionality.
- Process subscriptions, billing, payment operations, and service provisioning.
- Operate security controls, detect fraud/abuse, and investigate incidents.
- Monitor performance, diagnose issues, and improve reliability and usability.
- Respond to support requests and account administration needs.
- Send transactional and service-related notifications.
- Send marketing communications where allowed, with opt-out controls.
- Evaluate AI output quality, investigate inaccurate outputs, and improve model-assisted product behavior using submitted feedback signals.
- Comply with legal obligations and enforce agreements and platform policies.
05AI-Assisted Features and Accuracy
- Some RetroSwap features use AI to generate suggestions, classifications, summaries, and other assistive outputs.
- AI outputs may be incorrect, incomplete, or outdated and should not be treated as guaranteed factual determinations.
- You are responsible for human review and independent verification before relying on AI output for pricing, authenticity, legal, compliance, tax, accounting, or customer-impacting decisions.
- When you submit AI feedback (for example thumbs up/down and notes), we may use that information to audit, improve, and monitor AI-assisted features.
06Legal Bases for Processing (EEA/UK)
- Contract necessity: to provide the services you request and manage your account.
- Legitimate interests: to secure, maintain, and improve our services and prevent abuse.
- Legal obligations: to meet tax, accounting, regulatory, and law-enforcement requirements.
- Consent: where required, including certain marketing or non-essential tracking activities.
09International Data Transfers
- Personal information may be processed in countries outside your jurisdiction.
- Where required, we use contractual and organizational safeguards designed to protect personal information during cross-border transfers.
- Transfer mechanisms and protections are applied in a manner intended to support applicable privacy laws.
10Data Retention
- We retain personal information only as long as necessary for the purposes described in this policy unless a longer period is required or permitted by law.
- Retention periods may be extended when needed for legal claims, dispute resolution, audits, fraud prevention, and regulatory obligations.
Account and profile data
- Typically retained while your account is active and for up to 24 months after closure.
Billing, tax, and financial records
- Typically retained for around 7 years, or longer if required by law.
Security and system logs
- Typically retained for 30 to 180 days, with longer retention when needed for investigations or abuse prevention.
Support communications
- Typically retained for up to 24 months after issue closure.
Marketing engagement data
- Retained until you opt out or after extended inactivity, typically up to 24 months where operationally reasonable.
Integration connection metadata
- Retained while integration connections are active, then removed or minimized with short operational retention windows.
11Your Privacy Rights
- Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information.
- You may also have rights to object to or restrict certain processing, request data portability, or withdraw consent where processing is based on consent.
- Residents in the EEA/UK may lodge complaints with a supervisory authority.
- Residents in US states with privacy laws may have rights to know, delete, correct, and receive data portability, subject to legal exceptions.
- We do not discriminate against users for exercising applicable privacy rights.
- To exercise rights, contact support@retroswap.com. We may verify identity before processing requests and may offer an appeal process where required.
12California and US State Disclosures
- Categories of personal information we collect include identifiers, commercial information, internet/activity data, geolocation-derived data (such as IP-based location), and communications content you provide.
- We collect and use these categories for operational, security, analytics, support, legal compliance, and service delivery purposes described in this policy.
- We disclose these categories to service providers/processors and authorized integration partners as needed to operate the service.
- We do not sell personal information and we do not share personal information for cross-context behavioral advertising.
- Authorized agents may submit requests on your behalf where permitted by law, subject to verification requirements.
- If your request is denied and local law provides appeal rights, you may submit an appeal via support@retroswap.com.
13Marketing Communications
- You can opt out of non-essential marketing emails at any time using unsubscribe links or by contacting us.
- We may still send essential transactional or service notifications (for example security, billing, and account notices).
14Security
- We use administrative, technical, and organizational safeguards designed to protect personal information.
- No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
- You are responsible for safeguarding credentials and notifying us promptly of suspected unauthorized access.
15Children's Privacy
- Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.
- If we become aware that personal information from a child under 13 has been collected without proper authorization, we will take steps to delete or appropriately handle that information.
- Parents or guardians who believe we may have collected such information can contact us at support@retroswap.com.
16Third-Party Links and Services
- Our services may include links to third-party websites, products, or services that are not controlled by us.
- This Privacy Policy does not apply to third-party privacy practices, and you should review their policies separately.
17Changes to This Policy
- We may update this Privacy Policy from time to time to reflect product, legal, or operational changes.
- When we update this policy, we will revise the "Last updated" date above.
- For material changes, we may provide additional notice through the service or other reasonable channels.
18Contact Information
- Data controller: Cognitivv Inc.
- Address: 169 Madison Ave STE 2930, New York, NY 10016.
- Privacy contact: support@retroswap.com.
- Data Protection Officer (DPO): None designated.
Questions or Requests
Questions about this policy, data rights requests, and appeals can be sent to support@retroswap.com, or mailed to Cognitivv Inc., 169 Madison Ave STE 2930, New York, NY 10016.
For service terms, review our Terms of Service.