Legal · In depth
Data Residency & Processors
Last updated: 1 October 2026
This page is a detailed companion to our Privacy Policy. It lists every service that stores or processes personal data for TaraFind, where that happens, where backups are kept, and how any transfer outside the European Economic Area (EEA) is protected.
Summary
- Your account, listings, bids, orders and addresses are stored in Dublin, Ireland.
- Database backups are kept in the same Dublin region and are not copied outside Ireland.
- Payment card and seller identity data are handled by Stripe, whose EU entity is in Ireland.
- Some services (email delivery, AI photo reading, website edge network) may process data outside the EEA; these transfers rely on Standard Contractual Clauses or the EU-US Data Privacy Framework.
Service-by-service breakdown
| Service | Purpose | Personal data | Primary location | Backups | Outside-EEA transfer | Role | Retention |
|---|---|---|---|---|---|---|---|
| Database & accounts (Lovable Cloud) | Accounts, sign-in, listings, sealed reserves, bids, orders, addresses | Email, hashed password, names, seller legal identity, delivery addresses, bid and order records | Ireland (Dublin, AWS eu-west-1) | Ireland (Dublin, same region) — no cross-region copies | None for stored data. Support access by the provider's staff may occur from outside the EEA under Standard Contractual Clauses (SCCs) | Processor | Life of account; deleted accounts purged after the grace period; backups roll off automatically |
| File storage (Lovable Cloud) | Listing photos, shop logos | Images uploaded by sellers (may contain incidental personal data, e.g. number plates) | Ireland (Dublin, AWS eu-west-1) | Ireland (Dublin) | Public listing photos are served worldwide via a content delivery network cache | Processor | Until the listing or account is deleted |
| Website hosting | Serving pages and running server logic | IP address, browser details, request logs | Global edge network — requests handled at the nearest data centre (EEA for EEA visitors) | Not applicable | Possible outside the EEA; SCCs / EU-US Data Privacy Framework | Sub-processor | Short-lived operational logs (days to weeks) |
| Stripe (payments & seller payouts) | Card payments, seller identity checks (KYC), payouts | Card details, seller ID documents, bank details, payment records | Stripe Payments Europe Ltd (Ireland); some processing in the US | Stripe-managed | EU-US Data Privacy Framework and SCCs | Independent controller (for KYC & payments) | Per Stripe's legal and financial retention obligations |
| Transactional email | Sign-in links, bid alerts, order and dispatch notices | Email address, name, message content (part title, tracking number) | Email delivery infrastructure, which may be outside the EEA | Not applicable | SCCs | Sub-processor | Delivery logs kept for a limited period for troubleshooting |
| SmartList™ AI assistant (Google Gemini via AI gateway) | Reading part photos to pre-fill listing details | Listing photos and draft text only — no account, address or payment data is sent | Google Cloud; processing location not guaranteed to be within the EEA | Not stored by TaraFind beyond the listing itself | SCCs / EU-US Data Privacy Framework | Sub-processor | Requests are processed to return a result; not used by TaraFind to train models |
| Google sign-in (optional) | Signing in with a Google account | Name, email, Google account ID | Google (global) | Google-managed | EU-US Data Privacy Framework | Independent controller | Per Google's policies; TaraFind keeps only your email and name |
SmartList™ photo lifecycle
- A seller uploads part photos; they are compressed and stored in Dublin.
- When SmartList is used, the photos and draft text are sent to the AI model to suggest details.
- Only photos and listing text are sent — never names, emails, addresses or payment data.
- The suggested details are returned and the seller reviews them before publishing.
- Photos remain stored in Dublin only as part of the listing, and are deleted with it.
Sellers should avoid photos showing faces, number plates or documents.
Steps we take to keep data in the EEA
- Primary database, file storage and backups are pinned to the Dublin region.
- No analytics or advertising trackers are used.
- AI receives the minimum data needed (photos and part text only).
- Payment data goes directly to Stripe; TaraFind never stores card numbers.
Your rights and complaints
You can request access, correction, deletion, restriction, portability or object to processing by emailing support@tarafind.com. We respond within one month. You may also complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, Ireland (dataprotection.ie).