Privacy Policy

1. Who we are

Uspica Global (“Uspica”, “we”, “us”) runs uspica.com. Uspica is an online board where companies post offers and requests for certified organic products and trade without showing their names until both sides agree.

We decide how your personal data is used, so we are responsible for it (the “controller”). You can reach us at support@uspica.com.

2. What we collect

• Account details: your name, company name, email address, phone number, business address and password. Passwords are stored in encrypted (hashed) form.
• Google sign-in: if you sign in with Google, Google shares your name, email address and profile picture with us.
• Listings and offers: products, quantities, prices, origin, certificates, the photos and documents you upload, and the offers you send and receive.
• Purchases: the token packs you buy, the amount, the date and your billing details. Card details go straight to our payment provider. We never see or store your full card number.
• Messages: what you send us through the contact form or by email.
• Newsletter: your email address, language, the categories you pick, and when you confirmed or unsubscribed.
• Technical data: your IP address, browser type, the pages you visit and when. Our servers record this for security.

3. How we use it

• To create and run your account.
• To show your listings to other members without your company name.
• To deliver offers and send you emails about them, for example when you receive an offer or contact details are shared.
• To sell token packs, keep your token balance and give tokens back for offers that are not opened within 7 days.
• To prevent fraud and abuse, for example to give free offers only once per email inbox.
• To answer your messages and support requests.
• To email members a weekly summary of new listings, and to send it to people who signed up for it and confirmed their email. Every email has a link to unsubscribe in one tap.
• To keep records that tax and accounting laws require.

4. Our legal reasons

Where data protection laws such as the GDPR apply, we rely on these legal reasons:

• Contract: we need the data to give you the service you signed up for.
• Legitimate interests: to keep the platform safe, stop fraud, improve the service and tell members about new listings.
• Consent: for the newsletter, when you sign up without an account. You can withdraw consent at any time.
• Legal duty: to keep invoices and answer lawful requests from authorities.

5. Who can see your information

• Other members see your listings and offers, but not your company name or contact details.
• Your trade partner: when a listing owner shares contact details on an offer, both companies see each other’s company name, contact name, email address and phone number, so they can talk directly.
• Private documents such as lab reports are stored in a locked folder. Only you, our team and, after contact details are shared, your trade partner can open them.
• Service providers that help us run the site: web hosting, payment processing (WooPayments, powered by Stripe), email delivery and Google sign-in. They only get the data they need for their job.
• Authorities, only when the law requires it.

We never sell or rent your personal data.

6. International transfers

Uspica is used by companies around the world, and our service providers may store data in other countries. When data leaves the European Economic Area or the United Kingdom, we use safeguards required by law, such as the European Commission’s Standard Contractual Clauses.

7. How long we keep it

• Account data, listings and offers: while your account is open. When you close it, we delete or anonymise it, except what the law requires us to keep.
• Orders and invoices: as long as tax and accounting laws require.
• Contact messages: as long as we need them to help you.
• A coded fingerprint of your email address, so free offers are given only once per inbox. It cannot be turned back into your email address.

8. Cookies

We only use cookies that the site needs to work:

• Sign-in cookies that keep you logged in and protect your account.
• Cart and checkout cookies when you buy tokens.
• Fraud prevention cookies set by our payment provider during payment.
• Google sign-in cookies, only if you use the “Sign in with Google” button.

We do not use advertising or tracking cookies. If we ever add analytics, we will update this policy and ask for your consent where the law requires it.

9. Security

We use HTTPS on every page, store passwords in encrypted form, block direct access to private documents and give staff access only when they need it. No system is perfectly secure, so please use a strong password and tell us right away if you notice anything unusual.

10. Your rights

Depending on where you live, you can ask us to:

• Show you the personal data we hold about you.
• Correct data that is wrong. You can also do this yourself in your Trade Desk profile.
• Delete your data or close your account.
• Give you a copy of your data in a common file format.
• Stop or limit how we use your data.

Write to support@uspica.com and we will reply within 30 days. You can also complain to the data protection authority in your country.

11. Children

Uspica is a business platform for people aged 18 and over. We do not knowingly collect data from children.

12. Changes to this policy

If we change this policy, we will update the date at the top of this page. If the change is important, we will also tell you by email before it takes effect.