Privacy Notice

This notice explains how Cordova Design handles personal data when you use Ghita. Cordova Design is the data controller: we decide why and how your data is used.

What we collect and why

• Account details (email, password stored securely) — to create your account and sign you in. Basis: contract.
• What you enter (supplies, photos, products, projects, prices, notes) — to provide Ghita to you. Basis: contract.
• Support messages — to answer your questions. Basis: contract and legitimate interest.
• Technical data (IP address, device and browser type, basic usage) — to keep Ghita secure, prevent fraud and fix problems. Basis: legitimate interest.
• Plan status (whether you have Ghita Pro and when it renews) — to unlock Pro features. Basis: contract.

We don't sell your data and we don't use it for advertising.

Optional badge leaderboard

Maker and Seller members may choose to join the badge leaderboard. Only if you join, other paid members can see your chosen nickname, plan, earned badge count and overall badge progress. Sales badges can reveal minimum sales milestones, but your email, product details and individual sales records are not shared. Participation is off by default; you can update your nickname or leave at any time from the leaderboard page. We use your consent for this sharing.

Who we share it with

• Service providers who host Ghita and store its data and photos for us.
• Paddle, our Merchant of Record, for selling Ghita Pro, managing subscriptions, payments, tax compliance and invoicing. Paddle handles your card details; we never see them.
• AI receipt reading: if you scan a receipt, the photo is sent to an AI service only to read the items on it. Ghita doesn't keep the photo.
• Professional advisers such as lawyers and accountants, when needed.
• Authorities, where the law requires it.

How long we keep it

We keep your data while your account is open. When you delete your account, or it's no longer needed, we delete or anonymise it, except records we must keep by law (such as tax records).

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it. Where we rely on consent you can withdraw it. If you're in the UK or EU you also have the right to restrict processing and to complain to your data protection authority; we reply within one month. Email Dawn@dcordova.com.

International transfers

Ghita is run from the United States. If you use it from elsewhere, your data is handled in the US with appropriate safeguards such as standard contractual clauses.

Security

Data is encrypted in transit, each account can only see its own records, and photos are stored privately.

Cookies

Ghita only uses essential storage to keep you signed in and remember settings like dark mode. We also collect anonymous usage statistics — page visits and key moments such as signing up, adding a supply, importing a spreadsheet or starting checkout — to understand how Ghita is used and improve it. These statistics don't include your name, email or what's in your stash, and we never use advertising cookies or sell data.

Contact

Cordova Design — Dawn@dcordova.com