Privacy Policy

Channel3, Inc. ("Channel3", "we", "us", or "our") provides a platform and developer tools to power commerce experiences across web and AI applications. This Privacy Policy explains how we collect, use, and disclose information when you use our websites, web app, APIs, SDKs, extensions, and mobile apps (collectively, the "Services"). This policy includes disclosures required by California law and the EU General Data Protection Regulation (GDPR).

Who we are and how to contact us

Legal entity: Channel3, Inc., a Delaware corporation. Mailing address: 169 Madison Ave STE 38212, New York, NY 10016. If you have questions or requests about this policy or your data, contact us at support@trychannel3.com.

Governing law: State of Delaware, USA.

EU Representative

Pursuant to Article 27 of the General Data Protection Regulation (GDPR), we have appointed EU Presence as our representative in the European Union for data protection matters. If you are located in the European Union, you may contact EU Presence regarding all questions related to the processing of your personal data.

Contact details of our EU Representative:

World Presence j.d.o.o.
Ulica Brune Bušića 42, 10000, Zagreb, Croatia
Email: dpo@eupresence.com

Controller versus processor

Channel3 is the controller of personal data described in this Privacy Policy — account information, website and billing data, communications with us, and similar information we collect to operate our business.

Where business customers use our APIs, SDKs, catalog tools, or other enterprise Services, we process content they submit (including queries, uploads, and catalog feeds) as a processor or service provider on their behalf. That processing is governed by our Data Processing Agreement and the customer's own privacy policy, not by this Privacy Policy. The customer is responsible for providing notices and obtaining consents for that data.

Scope and audience

This policy applies to visitors to our websites, developers and businesses using Channel3, and — only to the extent we act as controller — individuals who contact us. It does not cover the practices of companies we do not own or control.

Catalog and public product data

We compile product, merchant, and related catalog information from merchants, publicly available sources, and data partners to operate the Services. That catalog information is not your personal data. Search and upload fields are intended for product search and catalog operations. You should not submit personal information in query fields except as needed to use the Services (for example, account credentials in designated account fields).

Information we collect

• Account information: name, email address, organization/team information, and role. Authentication is provided by Clerk. You may sign in with email/password or social logins such as Google or GitHub.
• API and developer usage: API keys; request and response payloads (which may include text and images you upload), timestamps, IP address, and user agent. Where this content is submitted by a business customer, we process it as a processor as described above.
• Commerce and click analytics: product and merchant identifiers clicked, referrer/UTM parameters, session/device information, IP address, and approximate location.
• Logs and telemetry: application and server logs, performance data, and error diagnostics.
• Communications: if you contact us (e.g., email), we process the content of your message and associated metadata.

Payments are processed by Stripe. We do not store full payment card numbers; Stripe handles payment information on our behalf.

Categories of personal information (California)

In the past 12 months we have collected the following categories of personal information. We do not sell personal information for money. Some disclosures for advertising measurement may be "sharing" under the CCPA/CPRA if you opt in to advertising cookies.

How we use information

• Provide, operate, and maintain the Services
• Authenticate users and secure accounts
• Monitor usage, performance, and reliability
• Prevent abuse, detect fraud, and ensure platform integrity
• Provide customer support and communicate about the Services
• Analyze and improve features and user experience, including from aggregated or de-identified data
• Comply with legal obligations and enforce terms

We do not use Customer Input or Customer Output sent to our APIs, or other customer content, to train our internal models. That commitment is also in our Terms of Service.

Legal bases for processing (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal data on these bases:

• Contract: to provide the Services you request and administer your account
• Legitimate interests: to secure, improve, and market the Services, prevent abuse, and understand how the Services are used, where those interests are not overridden by your rights
• Consent: for analytics and advertising cookies where required, and other processing we describe as consent-based. You may withdraw consent at any time
• Legal obligation: to comply with law, including tax, accounting, and regulatory requirements

Affiliate links and monetization

Channel3 may include links to merchants that allow us to earn commission on resulting purchases. We do not share personal information with affiliate networks for this purpose. Advertising cookies, if you opt in, are described under Cookies and tracking and California residents below.

How we share information

We disclose information to service providers (sub-processors) who process data on our behalf under written agreements, including:

• Hosting and infrastructure (e.g., edge and networking providers)
• Authentication (Clerk)
• Payments (Stripe)
• Analytics, logging, and error monitoring
• Communication and email delivery

A complete list of our sub-processors is available on our Sub-Processors page. Our data processing commitments are detailed in our Data Processing Agreement.

We may also disclose information to comply with law, protect rights, or in connection with a business transaction (e.g., merger or acquisition).

De-identified and aggregated data

We may create aggregated, de-identified, or anonymized data from personal information so that it cannot reasonably be used to identify you. We may use and disclose that data for lawful business purposes, including to analyze and improve the Services. We will maintain such data in de-identified form and will not attempt to re-identify it, except to test whether our de-identification process meets legal requirements.

Cookies and tracking

We use cookies and similar technologies to operate the Services (session/authentication), to understand usage (analytics), and — only if you opt in — for advertising measurement and retargeting. We do not use session recordings, keystroke capture, or mouse-movement replay.

For visitors in the EU/EEA, the United Kingdom, and the United States, analytics and advertising cookies are only set after you provide consent via our cookie banner. Advertising tags (including Google Ads and Google Tag Manager pixels) are not loaded until you accept advertising cookies. You can change your choice at any time in Cookie Settings or by visiting Do Not Sell or Share.

Channel3 honors Global Privacy Control (GPC) signals as an opt-out of sale or sharing under California law. When GPC is present, advertising tags do not load.

For a full list of the cookies we use and their purposes, see our Cookie Policy.

Your privacy rights

California residents

If you are a California resident, you have rights to request access to and deletion or correction of your personal information, and to opt out of sale or sharing of personal information. We will not discriminate against you for exercising these rights.

We do not sell personal information for money. If you consent to advertising cookies, we share certain identifiers and usage data with advertising partners (including Google) for measurement and retargeting. That disclosure may be "sharing" under the CCPA/CPRA. You can opt out at any time on our Do Not Sell or Share page, in Cookie Settings, or by enabling Global Privacy Control (GPC) in your browser. We honor GPC as an opt-out of sale or sharing: advertising tags do not load when GPC is present.

Nevada residents

Nevada law allows residents to opt out of the sale of certain personal information. We do not sell personal information as "sale" is defined in Nevada Revised Statutes Chapter 603A. If you have questions, contact us at the email below.

EU/EEA, UK, and Swiss residents (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under applicable data protection law:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete personal data
• Right to erasure: Request deletion of your personal data, subject to legal obligations
• Right to restrict processing: Request that we limit how we use your data in certain circumstances
• Right to data portability: Receive your personal data in a structured, commonly used, machine-readable format
• Right to object: Object to processing of your personal data based on legitimate interests
• Right to withdraw consent: Where processing is based on consent (e.g., analytics cookies), you may withdraw consent at any time

You also have the right to lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, email support@trychannel3.com. We may need to verify your identity before processing your request. You may designate an authorized agent to act on your behalf.

Children's privacy

The Services are not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us at support@trychannel3.com and we will delete it.

Data retention

We retain information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When we set a period for a category of data, we consider why we collected it, our need for it, and its sensitivity. Examples:

• Account profile and credentials: for as long as your account is active, and thereafter as needed to close the account and meet legal obligations
• Application logs, security, and diagnostics: as needed to operate, secure, and debug the Services
• Commerce and click analytics: as needed to measure performance and operate affiliate and merchant reporting
• Cookie consent records: for the life of the consent cookie (365 days) and as needed to demonstrate compliance

We may retain information longer if required by law, and we may retain aggregated or de-identified data that does not identify you.

Security

We use industry-standard safeguards, including encryption in transit and at rest where appropriate, access controls, and least-privilege practices. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

International users

Channel3 is based in the United States. If you access the Services from outside the U.S., your information may be transferred to and processed in the United States. Where required by applicable data protection laws (including the GDPR), we ensure appropriate safeguards are in place for such transfers, such as Standard Contractual Clauses. For more details, see our Data Processing Agreement.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email. The effective date at the top indicates when this policy last changed.

Contact us

Channel3, Inc.
169 Madison Ave STE 38212
New York, NY 10016

Email: support@trychannel3.com