Privacy policy

Last updated: 27 October 2026

This Privacy Policy explains how ReaRadar collects, uses, stores, shares, and protects personal information when you visit www.rearadar.se or use the ReaRadar Android application, se.rearadar.app. It also explains your privacy rights and how to request access to or deletion of your information.

1. Who is responsible for Your Information?

ReaRadar is operated by ReaRadar AB, Taklöksvägen 10, 417 49 Göteborg, Sweden. he operator is the controller of personal information described in this policy, subject to applicable data-protection law.

For privacy questions or requests to access, correct, restrict, object to processing, or delete personal information, contact contact@rearadar.se.

Customer support: customers@rearadar.se.
Supplier support: suppliers@rearadar.se.
General and privacy enquiries: contact@rearadar.se.

2. Personal Information We Collect

The information we collect depends on the features you use and the information you choose to provide.

2.1 Account and profile information

We may collect your email address, name, phone number, authentication identifiers, account role (such as customer or supplier), and other profile information you submit. We use this information to create and manage accounts, authenticate users, provide account features, and communicate about the service.

2.2 Google Sign-In information

If you choose “Continue with Google,” ReaRadar uses Google OpenID Connect sign-in and requests the basic openid, email, and profile scopes. Depending on the information Google returns, this may include your Google account identifier, name, email address, and profile picture.

ReaRadar does not receive your Google password and, through these sign-in scopes, does not request access to Gmail messages, Google Drive files, Google Contacts, or other Google account content.

2.3 Orders, checkout, and payments

We may process cart contents, order items, delivery and billing details, order status, payment status, invoices, and payment transaction references to process purchases and support order fulfilment. Payment card or Swish credentials are entered through OnPay’s hosted payment service and are not stored by ReaRadar, according to our current implementation. Payment providers may separately process payment information under their own privacy terms.

2.4 Supplier information

Supplier accounts may include organization and contact details, country and address, VAT or GTIN information, payment-related details where provided, approval status, product listings, stock and availability, and order fulfilment updates. Access to supplier information is restricted according to account role and operational need.

2.5 Products, pictures, and reviews

We process product descriptions, categories, prices, supplier cost information, stock, availability, product pictures, and reviews associated with purchases. Approved product information and images may be public. Supplier costs, private contact details, and payment-related information are restricted and are not intended to be publicly displayed.

2.6 Referrals and subscriptions

We may process referral attribution, reward status, store-credit records, subscription preferences, and contact details you provide when opting in to updates. Promotional communications are sent only where you have opted in when consent is required, and you can unsubscribe.

2.7 Technical, security, and usage information

Depending on how you use the service, we may collect a pseudonymous visitor identifier, signed-in user identifier, pages visited, timestamps, device and browser information, IP-derived security information, and diagnostic logs. Signed-in usage analytics may be deduplicated by account to help us understand service usage. We use technical information to operate the website, protect accounts, diagnose failures, and improve reliability.

3. How We Use Personal Information

We use personal information for the following purposes:

• Create, authenticate, and manage customer and supplier accounts.
• Provide product browsing, carts, checkout, order management, supplier workflows, reviews, and support.
• Process orders and payments, issue invoices, arrange delivery, update stock, and communicate order status.
• Review supplier and product submissions and help prevent fraud, misuse, and unauthorized access.
• Send account verification, security, transactional, and order-related emails.
• Measure aggregated usage, test and diagnose features, and improve website performance.
• Respond to enquiries, exercise or defend legal claims, and comply with legal obligations.

Depending on the purpose, our legal basis under applicable data-protection law may be performance of a contract, compliance with a legal obligation, legitimate interests such as security and service improvement, or consent where consent is required. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

4. Google User Data: Access, Use, Storage, and Sharing

4.1 Data accessed

When you select Google Sign-In, ReaRadar requests only the basic openid, email, and profile scopes used for authentication and basic account profile information. The data returned may include your Google account identifier, name, email address, and profile picture, depending on availability and configuration.

4.2 How Google data is used

We use Google-derived information to verify your identity, create or associate your ReaRadar account, display your account identity, maintain sign-in functionality, and provide the account-related service you request. We do not use Google user data for advertising or sell it.

4.3 Storage and protection

Google-derived account information may be stored in ReaRadar’s account database and processed by our authentication and hosting infrastructure as needed to operate your account. Access is restricted according to operational roles and permissions. We use appropriate technical and organizational safeguards to protect personal information, while recognizing that no online service can guarantee absolute security.

4.4 Sharing and transfer

We do not sell Google user data or share it with third parties for their independent advertising or marketing. Service providers may process the minimum information needed to provide authentication, database, hosting, security, or related services on our behalf. Any access, use, transfer, or disclosure of Google user data must comply with applicable law, contractual safeguards, and the Google API Services User Data Policy, including its Limited Use requirements where applicable. We do not transfer Google user data for unrelated purposes.

4.5 Retention and deletion

We retain Google-derived information only as long as needed for the account and service purposes described in this policy, security, and applicable legal obligations. You may request deletion of your ReaRadar account using the account-deletion options below. After verifying the request, we delete or anonymize associated Google-derived information unless particular information must be retained under applicable law. Any retained information is restricted to the lawful retention purpose.

4.6 Google policy and future changes

ReaRadar’s use and transfer of information received from Google APIs is intended to comply with the Google API Services User Data Policy, including the Limited Use requirements where applicable. If we change the Google permissions requested or the way Google user data is processed, we will update this policy and provide notices or obtain permissions where required.

Read the Google API Services User Data Policy for more information.

5. Photos and Device Access

Product images are uploaded when a user selects a file or chooses to take a picture. Your browser or device may ask for permission when needed. The product uploader reduces image size before upload and, according to the current implementation, supports up to six JPEG images per product, each limited to 800 pixels on its longest edge and 150 KB. ReaRadar requires an internet connection for its online features.

6. Cookies and Local Storage

ReaRadar uses essential browser storage to support authentication, sessions, and cart functionality. Authentication tokens are stored in browser local storage to maintain sign-in across app restarts, with session-storage fallback if persistent storage is blocked. Signing out clears the locally stored session. Essential storage may preserve cart and authentication state.

You can manage browser storage and cookies through your browser settings. Disabling essential storage may prevent sign-in or other features from working. If non-essential cookies or similar technologies are used, we will obtain consent where required by law.

7. Analytics and Diagnostics

ReaRadar may process usage events, page activity, timestamps, pseudonymous visitor identifiers, signed-in account identifiers, device/browser information, and diagnostic logs to understand usage, validate account journeys, detect errors, protect the service, and improve performance. Where analytics are aggregated, we use the resulting information to understand general usage patterns rather than to identify individuals unnecessarily.

Analytics collection and any third-party processing are limited to the tools actually enabled in the service. We do not claim that a particular analytics provider is used unless it is configured in ReaRadar.

8. Who We Share Information With

We do not sell personal information. We share information only when necessary for the purposes described in this policy, as directed by you, or as permitted or required by law.

• Supabase: authentication and database services supporting accounts and application data.
• Amazon Web Services (AWS): website delivery, logs, and product-image storage, as configured.
• Resend: transactional email delivery, including relevant account and order notifications.
• OnPay and payment partners: hosted checkout and payment processing.
• Google: authentication when you choose Google Sign-In.
• Customers and suppliers: relevant order and delivery information needed to fulfil an order.
• Authorities and legal recipients: information where disclosure is legally required or necessary to protect rights and safety.

Suppliers receive information needed to fulfil their own order items and are not intended to have access to another supplier’s orders. Service providers process information under applicable terms and safeguards and only as needed to perform their services.

Some service providers may process information outside Sweden or the European Economic Area (EEA). Where required, we rely on lawful transfer mechanisms, which may include adequacy decisions or standard contractual clauses.

9. Retention of Information

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

• Account and profile information: while the account is active and for a reasonable period needed to process deletion, security, or legal matters.
• Orders, invoices, and payment records: for periods required by accounting, tax, warranty, fraud-prevention, and dispute obligations.
• Supplier approval and fulfilment records: while the supplier relationship is active and as needed for legal or operational obligations.
• Security and diagnostic logs: only as long as reasonably necessary for security and service operation.
• Marketing subscriptions: until you unsubscribe or the information is no longer needed, subject to any necessary suppression records.
• Google-derived information: for the account and authentication purposes described in Section 4, subject to applicable legal retention requirements.

When information is no longer required, we delete it or anonymize it where appropriate. Backups and legally required records may be retained for a limited period or as required by law.

10. Security

We use appropriate technical and organizational measures intended to protect personal information. These may include HTTPS connections, access controls, role- and supplier-based restrictions, authorization of administrative actions, and protection of server-side credentials. No internet service or storage system can be guaranteed completely secure. Keep your credentials private and sign out on shared devices.

11. Your Rights and Choices

Depending on applicable law and the circumstances, you may have the right to request access to your personal information, correct inaccurate information, request deletion, restrict processing, object to certain processing, receive a portable copy, or withdraw consent where processing is based on consent. These rights are subject to applicable legal conditions and exceptions.

To exercise your rights, contact contact@rearadar.se. We may ask you to verify your identity before acting on a request. You may also lodge a complaint with Sweden’s data-protection authority, Integritetsskyddsmyndigheten (IMY).

12. Account Deletion

You can request account deletion from My profile → Delete account, or visit the public account-deletion page without installing the app. We verify account ownership before processing the request.

When deletion is completed, we delete or anonymize personal information that is no longer needed. Some order, invoice, accounting, security, or dispute records may need to be retained where required or permitted by law. Any retained information is kept only for the relevant purpose and for the applicable retention period.

13. Children’s Privacy

ReaRadar is not directed to children under 13, and we do not knowingly create accounts for children under 13. If you believe a child has provided personal information inappropriately, contact contact@rearadar.se so we can review the matter.

14. Third-Party Services and Links

ReaRadar may link to third-party websites or rely on third-party services. Those providers may have their own privacy policies and practices. We encourage you to review the policies of services you use, including payment and identity providers.

15. Changes to This Policy

We may update this policy when our services, data practices, or legal obligations change. The latest version will be published on this page with the revision date. Where required, we will provide additional notice or obtain consent before a material change takes effect.

16. Contact

For questions about this policy or your personal information, contact:

ReaRadar AB
DEVI PRASAD EJANTHAKAR
Taklöksvägen 10, 417 49 Göteborg, Sweden
Email: contact@rearadar.se
Website: https://www.rearadar.se/