Privacy Policy

This policy explains how TP Benchmark handles personal data. TP Benchmark is a transfer-pricing comparable-validation service operated by Qualisync (“we”, “us”). For any privacy question, or to exercise your rights, contact us at privacy@qualisync.com. Full registered company details are available on request.

What we collect

• Account data: your email address and authentication details.
• Organization and billing data: your organization, members and roles, and the billing details you provide at checkout (company name and VAT id).
• Content you upload: Orbis exports and transfer-pricing documents you use to run a study, and the results produced from them.
• Operational and usage data: events generated as you use the service (see “How we process data on our servers” below), and, only if you accept analytics cookies, client-side product analytics (see our Cookie Policy).
• Payment data: handled by Stripe. We do not receive or store full card numbers.

How we use it, and our legal bases

• To provide the service: creating and running studies, producing results, and managing your account and billing. Legal basis: performance of our contract with you.
• To keep records: retaining invoices and transaction records. Legal basis: compliance with legal (tax and accounting) obligations.
• To secure and improve the service: fraud prevention, abuse detection, reliability, and understanding how the product is used. Legal basis: our legitimate interests in running a secure, working, and improving product.
• Client-side analytics: full analytics with cookies run only if you opt in (legal basis: consent, which you can withdraw at any time). If you decline, we use only anonymous, cookieless usage measurement that cannot identify you (legal basis: our legitimate interests); you can opt out of that too via your browser’s Global Privacy Control or Do Not Track signal. See our Cookie Policy.

How we process data on our servers

Separately from cookies, our backend records operational events as the service runs, for example a study being created, finalized, or cancelled, token purchases and settlements, comparability decisions, AI processing costs, and errors. We use these to operate, bill for, secure, and improve the service. They are keyed to pseudonymous internal identifiers (your user and organization id), not your name or email address, and rely on the contract, legal-obligation, and legitimate-interest bases above rather than on cookie consent. You can object to processing based on legitimate interests (see “Your rights”).

Cookies

We use essential cookies to run the app and optional analytics cookies only with your consent. See the Cookie Policy for the full list and how to change your choice at any time.

Service providers

We share data only with providers that help us run TP Benchmark, each under a data-processing agreement:

• Supabase: database and authentication.
• Cloudflare: hosting, edge compute, and storage.
• Stripe: payments and invoicing.
• Anthropic: AI analysis of the websites you approve.
• Resend: transactional email.
• PostHog: product analytics (only if you accept analytics cookies).

International transfers

Some providers process data outside the EEA, including in the United States. Where required, those transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

How long we keep it

• Account and study data: for as long as your organization is active. After an account is closed, we delete or anonymize it within 90 days, unless we must keep it longer by law.
• Invoices and transaction records: for as long as required by applicable tax and accounting law (typically up to 7 years).
• Analytics: retained for up to 12 months.

Your rights

Depending on your location, you may have the right to access, correct, delete, or port your data, to restrict or object to processing (including processing based on our legitimate interests), and to withdraw consent at any time. To exercise any of these, contact privacy@qualisync.com. You also have the right to lodge a complaint with your local data protection authority.

Changes

We may update this policy from time to time. When we do, we will revise the “last updated” date shown above.