Privacy Policy

1. Who we are

Teamdock is operated by Raymond Demarteau, based in the Netherlands ("Teamdock", "we", "us"). This policy describes how we process the personal data of store operators — the businesses and individuals who subscribe to Teamdock to manage their WooCommerce store. It does not cover how your store's own customers' data is processed; that is governed by the Data Processing Agreement.

Questions: legal@teamdock.ai

2. What data we collect about you (the operator)

When you sign up for Teamdock we collect:

• Email address and company name — to provision your workspace and send transactional emails
• Billing information — processed by Stripe on our behalf (we never store card details)
• Usage data — logins, feature interactions, error logs (used for product improvement and support)
• Technical data — IP address, browser type (logged for security purposes)

Within your workspace, Teamdock syncs data from your WooCommerce store — orders, customers, and support messages — and stores it in your isolated database. You remain the data controller for that data. We process it on your behalf under our Data Processing Agreement.

2a. Free shop scan

When you use the free shop scan, we process the shop address and the e-mail address you enter. We read only your shop's public data (its homepage, product feed, sitemap and, when there is no feed, a handful of product pages: what every visitor and search engine can see), show you the result, and send your request with the result to Teamdock's founder, together with the shop's own public contact details (phone, e-mail, KvK number) as shown on its site. We do not e-mail the result to the address entered.

• If you tick "Teamdock may contact me": we contact you about the result. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by e-mailing us.
• If you don't: we don't contact you. We keep your request only to handle it (legitimate interest, Art. 6(1)(f)).
• If you click "Request a migration plan": we contact you about that plan, because you asked us to (steps at your request before a contract, Art. 6(1)(b)). You may add your name and phone number there; both are optional.
• Saved report: the result is kept for 30 days under a private, unguessable link, so you can reopen it or share it yourself. It holds the shop's public data and our findings, not your e-mail address. Anyone you give the link can open it; it is not indexed by search engines.
• Page speed: where shown, it comes from Google's public Chrome UX Report. We send Google only the shop's address.
• Anonymous statistics: per shop per day we keep one row with the platform and which checks passed, the shop's address only as a one-way hash, to compare shops in future versions of the scan.
• Retention: scan requests stay in our mailbox for at most 12 months, unless they lead to a customer relationship.

3. Legal basis and purpose

4. Data storage and isolation

Each Teamdock workspace runs in its own isolated Docker container with a dedicated MariaDB database on servers located in the European Union (Hetzner, Germany). Your workspace data is never shared with other tenants.

5. Sub-processors

We use the following third-party processors. Where data is transferred outside the EU, Standard Contractual Clauses (SCCs) apply.

AI runs through a gateway Teamdock operates for your workspace in the EU, on Mistral's models. Your workspace holds no key of any AI provider. Claude and Jev are outside the EU, are off by default, and are used only after an administrator switches them on under Settings → AI; they then process what is sent on your documented instruction, under SCCs pursuant to EU Decision 2021/914. Before customer data is sent, names, e-mail addresses, phone numbers, addresses, postcodes, company names, IBAN and VAT numbers and links are replaced by placeholders, and the real values are put back inside your workspace. This is pseudonymisation: it reduces what a provider sees, but free text can still contain something the detection misses. Claude receives your shop's design and what is typed in the design chat, or a product's own details for a product text; never customer, order or ticket data. Jev receives only the pseudonymised text of an incoming ticket. The full list, with the data each receives, is in Annex A of our data processing agreement.

6. Data retention

Your account data (email, company name) is retained for as long as your subscription is active. Upon cancellation, all workspace data — including your store's customer data — is deleted within 30 days, unless you request earlier deletion. Billing records are retained for 7 years as required by Dutch tax law.

7. Your rights (GDPR)

As a data subject in the European Economic Area you have the right to access, rectify, restrict, port, and erase your personal data, and to object to processing based on legitimate interest. To exercise any of these rights, email legal@teamdock.ai. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch data protection authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

8. Cookies

We use only essential session cookies required to operate the service. We do not use tracking or advertising cookies.

9. Changes to this policy

We may update this policy from time to time. We will notify you by email for material changes. Continued use of the service after changes constitutes acceptance.

10. Contact

Raymond Demarteau
legal@teamdock.ai