Last updated: October 31, 2026
1. Introduction
Comdity LLC ("Comdity", "we", "us"), 7901 4th St N, Ste 300, Saint Petersburg, FL 33702-4399, USA, respects privacy and handles personal information responsibly. This Privacy Policy explains how we collect, use, disclose and store information when you visit or use the Comdity website and marketplace (the "Platform"). The Platform is for business-to-business commodity trading; this Policy applies to personal information about account holders, company representatives, business contacts and visitors. Read it together with our Terms of Service.
2. Eligibility and age declaration
The Platform is for business users aged 18 or older. When you register you tick a box to acknowledge this Privacy Policy and to confirm that you are at least 18 years old and authorised to register on behalf of the company you represent. This is a statement by you, not independent verification of age or identity. We do not design the Platform for children. If we learn that an account was created by someone who does not meet the requirements, we may restrict or close it and deal with the related information as the law requires.
3. Information we collect
- Account and company information: your name, work email, password (stored hashed, never in readable form), job title, the company's name, country and optional address and phone, the company's email domain, the people of your company account, and your membership status.
- Listings and offers: product descriptions, specifications, quantities, prices, delivery terms, ports and dates, offers and counteroffers, messages inside offers, agreement records and the notices we send you. Information you publish in a listing is visible according to the Platform's settings.
- Membership and payment information: plan, billing and payment status, invoices and transaction references. Card and billing details (billing name, address and company tax number) are collected by our payment provider Stripe under its own privacy terms. We receive the status, amount, dates and references, and do not receive or store full card numbers.
- Technical and security information: IP address, browser and device information, access times, server logs, sign-in and security events, and diagnostic data we need for security, abuse prevention and limits (for example, failed sign-ins).
- Support and correspondence: what you write to us, your contact details and our replies.
- Other sources: business information from company representatives, public business sources, verification or payment providers, or other users, where lawful and necessary.
4. How we use information
To create and manage accounts; give access to listings, offers and membership features; display listings and connect users; process membership payments and keep billing records; provide support; keep the Platform working and secure; detect fraud, abuse and unauthorised access; enforce our Terms; comply with law and answer lawful requests; resolve disputes and establish or defend legal claims; improve the Platform and fix technical problems; and send service messages (account, confirmation, offer, agreement, security, membership, billing and policy notices). We do not use your information for advertising or profiling.
5. Legal bases
Where the law requires a legal basis, we rely on the one that fits the activity: performance of a contract or steps before one; compliance with legal obligations; our legitimate interests (for example keeping the Platform secure), where they are not overridden by your rights; and consent where the law requires it. Where we rely on consent you can withdraw it as the law permits, without affecting earlier processing. Acknowledging this Policy is not, by itself, consent to every kind of processing.
6. How we share information
- Other users and visitors: a published listing and its details are public, but the company that published it is not named: until a negotiation starts, listings and offers show only "A verified company" with its country and the role chosen in the posting (for example Trader). When you send or receive an offer, the other company sees the offer and the messages in that negotiation. Do not put confidential or sensitive information in a public listing unless you mean to disclose it.
- Starting a negotiation: before a negotiation starts we share nothing about a company: no name, logo, profile or contact details. When a company accepts an offer and chooses "Start negotiation" (or accepts a counteroffer with "Accept and start negotiation"), we email the other company the company name, the personal name and the business email address of the person who started it (and nothing else: no telephone number), so that it can contact them directly by email. The button, and the text next to it, say before you press it that your company name, name and email address will be shared with the other company; by pressing it you ask us to take this step and share these details, and we do not ask for a separate tick box. Only that other company receives them, never other companies that took part in other offers. The other company has not agreed yet, so we do not send its details back; the two companies see each other's names and contact details only when the deal is marked as Agreed. Comdity does not take part in the conversation between them.
- Service providers that help us run the Platform, under contract: payment processing (Stripe), email delivery (Amazon SES), hosting and database, security (Google reCAPTCHA on the sign-in and sign-up forms, which receives technical information such as the IP address and browser data under Google's own privacy terms), error logging and technical support. They may use the information only to provide their service or as the law requires.
- Legal and safety reasons: where reasonably necessary to comply with law, respond to lawful requests, protect rights or safety, investigate fraud, enforce our Terms, or establish or defend legal claims.
- Business transfers: in a merger, acquisition, financing, restructuring or sale of part or all of the business, with appropriate protections.
- With your direction or consent.
We do not sell personal information for money.
7. International transfers
Comdity is operated from the United States and its users are in many countries. Your information may be processed in the United States and in other countries where we or our providers operate, which may have different data protection laws. Where the law sets requirements for transfers, we use a recognised transfer mechanism and safeguards.
8. Retention
We keep information as long as reasonably necessary for the purposes in this Policy: providing the Platform, maintaining accounts, administering memberships, security, legal obligations and disputes. Periods vary by kind of information and legal requirements. Unconfirmed postings are deleted automatically after 48 hours and unconfirmed sign-ups after 24 hours. Payment and invoice records are kept as long as tax and accounting law requires. When information is no longer needed we delete or anonymise it, or keep it securely where retention is required or permitted. Backups, security logs, financial records and records needed for legal claims may remain for a limited time.
9. Security
We use reasonable technical and organisational measures against unauthorised access, loss, misuse, alteration and disclosure, such as hashed passwords, encrypted connections, access control and limits on sign-in attempts. No website or storage system is completely secure, so we cannot promise absolute security. You are responsible for protecting your login credentials and for telling us promptly about suspected unauthorised access.
10. Cookies
The Platform uses cookies that are necessary for it to work: a session cookie that keeps you signed in, a security cookie against forged requests, and a short-lived cookie (6 hours) with a random code that lets us keep a form you filled in while you sign up or activate the membership. We do not currently use advertising or analytics cookies. If we add any, we will tell you and ask for consent where the law requires. You can control cookies in your browser, but blocking necessary cookies may stop parts of the Platform from working.
11. Your privacy rights
Depending on the law that applies to you, you may have the right to ask for access to your personal information, correction, deletion, restriction or objection to some processing, a copy in a portable format, withdrawal of consent, and to complain to a data protection authority. These rights are not absolute and may be subject to legal exceptions. California residents may have additional rights; we do not sell or share personal information for advertising. To make a request, write to support@comdity.com or use the Support page. We may need to verify who you are before we answer, and we answer within the time the law sets.
12. Business contacts and marketing
We use business contact information to run business relationships, answer questions and send service messages about the Platform. We send Comdity news emails only to people who ticked the optional news box (separate from creating an account). Where we cannot yet be sure the address is yours, we first send a confirmation link and start only when you open it; for every consent we keep the time, where it was given, the IP address where we collected it online and the wording you agreed to, for as long as we need it to show that you asked. We do not send news emails to addresses from bought or rented lists and do not take free webmail addresses. Each news email names Comdity LLC as the sender, links to this Policy and has an unsubscribe link; we then keep only the minimum (the email address and the date) so that we do not email you again. Our email provider tells us whether an email was delivered, bounced or reported as spam. Unsubscribing from news does not stop service, security, billing, offer or legal notices, which are part of the service.
We may also send a short introduction email, and up to two reminders, to the business addresses of companies that appear to operate in a trade relevant to Comdity. We take company names and business contact details from the companies' own websites and public contact pages, public trade and industry sources, public news and event pages, and licensed business-data providers, and we record the source and the date. Where applicable data protection law requires a legal basis, we rely on our legitimate interest in offering a business-to-business service to relevant companies, and only where the law allows such emails without prior consent; where prior consent is required we do not send them. Every such email names Comdity LLC as the sender, links to this Policy and has an unsubscribe link. We keep contact details for as long as they remain relevant to this purpose and stop using them when you object, when they are out of date, or after a period we review regularly. You may object to this use of your data at any time, ask for access or deletion, or complain to your data protection authority, by writing to the contact address in this Policy.
13. Third-party websites and services
The Platform may link to other websites or services, which follow their own policies. We are not responsible for their privacy practices beyond what the law requires.
14. Changes to this Privacy Policy
We may update this Policy for changes in the Platform, our practices, our service providers or the law. The new version shows a new "Last updated" date. Where the law requires, we give notice or ask for consent before new processing starts, and we use an appropriate process if a change needs renewed acknowledgement.
15. Contact
Comdity LLC, 7901 4th St N, Ste 300, Saint Petersburg, FL 33702-4399, USA. Email: support@comdity.com, or use the Support page.