Privacy policy
Effective 30 July 2026
What we collect
When you request a report, subscribe to recall alerts, join the founding pilot or contact us, we collect the information you submit. This may include your email address, store URL, catalogue size, report summary and message.
For the free scanner, CSV catalogue files are parsed in your browser and RecallMatch does not upload or retain the full file. If you request a free report, we store the product count and possible-match summary needed to deliver it.
If you activate paid monitoring and use your private setup link, the CSV is parsed in your browser and the selected product details—such as product names, vendors, SKUs and barcodes—are stored so RecallMatch can run ongoing recall checks. You can replace the saved catalogue through the same private link or ask us to delete it.
For limited business outreach, we may record a store name, website, product category and role-based contact address that the business publishes on its own website. We also record the source page, why the service is relevant and whether the address has opted out. We do not use named personal addresses from public sources for automated outreach.
If a business requests a free one-click audit from its private invitation, RecallMatch reads up to 10 product listings that are already publicly visible on that store. We retain the product count, possible-match report and email-delivery status needed to provide and measure the requested audit. RecallMatch does not sign in to or change the store.
When you request a Tender Triage paid pilot, we collect the business and contact details, public tender reference, capability summary and optional deadline you submit. We use these details only to assess and respond to the request and to operate the limited validation pilot. Do not submit confidential tender material through the public request form; any later document handling is agreed separately before delivery.
We also keep anonymous daily totals for visits, catalogue scans and form completions, grouped by broad source such as direct, search or referral. These measurements do not contain catalogue contents, cookies, IP addresses or visitor profiles.
Why we use it
We use this information to deliver requested reports, operate the RecallMatch and Tender Triage pilots, answer support or privacy requests, improve matching quality, contact a small number of relevant Australian businesses and protect the service from abuse. Public-role outreach is limited to one introduction and includes an immediate opt-out. We do not sell personal information.
Service providers and storage
Our hosting, database, email-delivery and payment providers may process information on our behalf. Stripe processes checkout and payment information under its own privacy terms; RecallMatch does not receive or store your full card details. We limit collection to what the service needs and retain records only while they are reasonably required for the requested service, security and business records.
Your choices
You can unsubscribe from free recall alerts or business outreach using the link in every applicable email. Outreach opt-outs are retained as a suppression record so the address is not contacted again. Paid monitoring customers can manage billing through Stripe and can ask us to access, correct or delete their saved catalogue and information. Use the contact form and select “Privacy or deletion”. Essential service and billing messages are separate from general marketing.
Security and changes
We use reasonable technical and organisational safeguards, but no internet service can promise absolute security. Material policy changes will be posted here with a new effective date.