Privacy Policy

This policy describes how BikeDist("we", "us") handles personal information when you use our marketing website (bikedist.com) and our application (app.bikedist.com). Last updated: July 8, 2026.

1. Who we are

BikeDist provides bicycle catalog and e-commerce export software. For privacy-related requests, contact [email protected].

2. What we collect

  • Account & product usage (app). When you use https://app.bikedist.com, we process data needed to run the service (for example account identifiers, store connections, catalog activity). Authentication and profile data may be processed by our authentication provider (e.g. Supabase).
  • Billing. Payments are processed by Stripe. We do not store full card numbers on our servers; Stripe handles payment data according to its policies.
  • Website & analytics. We use a cookie consent banner on bikedist.com so visitors in the EEA/UK can accept or reject non-essential cookies. If you accept analytics, we enable Google Analytics (GA4) to understand aggregate traffic and on-site interactions. We do not use advertising or cross-site tracking cookies. We also store a necessary consent cookie to remember your choice.
  • Communications. If you email us, we retain messages as needed to respond and operate the business.
  • Support chat (app). When you use live chat in https://app.bikedist.com, messages are handled on our self-hosted Chatwoot instance (BikeDist support infrastructure). We process the text of messages you send to suggest relevant articles from our help center and to notify our team. We do not send your full chat history to third parties on every message.
  • AI-assisted support content. When enabled, we use OpenAI to (a) match your chat messages to published help articles and (b) draft FAQ articles from resolved support conversations. Drafts are reviewed by a human before publication on our help center. OpenAI is not used for advertising or unrelated profiling.

3. Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we rely on the following legal bases: contract (delivering the service you signed up for), legitimate interests (product security, abuse prevention, service improvement, and direct B2B marketing to existing customers), and your consent where it is required (for example, optional analytics or marketing emails).

4. Subprocessors & sharing

We use service providers to host and operate the product, including but not limited to:

  • Hosting and database (e.g. Supabase or equivalent)
  • Payment processing (Stripe)
  • Email delivery (e.g. Resend or similar, if used)
  • Live chat — self-hosted Chatwoot (messages stored on our infrastructure)
  • OpenAI — optional FAQ drafting and help-article matching when AI support features are enabled

We do not sell your personal information and we do not share it with third parties for their own marketing.

5. Retention

We retain information for as long as your account is active. After you close an account, we remove personal data within 90 days, except where a longer period is required for legal, tax, or security obligations (typically up to 7 years for billing records). Backups are overwritten on a rolling basis.

6. Your rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, and to object to or restrict certain processing. Contact [email protected] to exercise these rights. You may also lodge a complaint with your local supervisory authority.

7. International transfers

Our infrastructure providers may process data in the EU and the United States. Where EU/UK personal data leaves the EEA/UK, we rely on the European Commission's Standard Contractual Clauses and, where applicable, supplementary measures provided by the subprocessor.

8. Children

The service is a B2B product and is not directed at children under 16. We do not knowingly collect personal data from children.

9. Changes

We may update this policy. We will post the new version on this page and update the date above.