Privacy notice

Antiwarp (“we”) makes trade management software for physical commodity trading houses and the banks and funds that finance them. This notice covers the website at antiwarp.com and the Antiwarp app.

For the website, demo requests and user accounts, we decide why and how personal data is used (we are the “controller”). For the trade data and documents a customer puts into Antiwarp, the customer is the controller and we process that data on its behalf, under our agreement with it.

Write to contact@antiwarp.com with any question about this notice or your data.

We count page views with Vercel Web Analytics, which uses no cookies and does not identify you. It records the page, the referring site, your country and the type of device and browser. App pages are never counted.

We are comparing versions of the home page. A cookie (aw-home) remembers which version you saw, so it stays the same while you browse. It holds a single letter. It lasts for your visit, or 90 days if you accept cookies. Your choice is kept in a second cookie (aw-consent) for 180 days, and you can change it at any time with “Cookie settings” at the bottom of each page.

If we add product analytics later (PostHog, hosted in the EU), it will only run after you accept cookies, and it will be listed here first.

When you request a demo we keep what you enter: your name, work email, company and role, the edition you are interested in, your team size and your message, along with the page that brought you to the form and the version of the home page you saw. We use it only to reply to you and arrange the demo. Our legal basis is your request (and our legitimate interest in answering it).

To stop abuse, we count requests per network address for one hour. We keep only a one-way hash of the address, never the address itself, and the count is deleted after two hours.

We delete a demo request two years after it was last updated. Ask us at any time and we delete it sooner.

When your company gives you an account, we process:

• Account details: your name, email address, company and role, and how you sign in (password, two-factor codes or passkeys). Sign-in is handled by Clerk.
• Activity records: who created, changed, approved or opened what, and when. This is the audit trail your company and its auditors rely on, and it cannot be edited afterwards.
• Approval evidence: when you approve or decline a request, the network address and device it came from, kept with the approval for as long as the approval itself, to prevent fraud.
• Error reports: when something fails, a technical report with names, emails and numbers removed. Reports are deleted 30 days after the error was last seen.
• Preferences: theme, density and text size, kept in your browser and with your account.

The trade records and documents your company enters are its data. We use them only to provide the service to your company. We do not use them to train AI models, and we do not sell them.

We use these providers. Each processes the data under its data processing terms with us, and only to provide its service.

Some of these providers process data in the United States. Where they do, we rely on the EU standard contractual clauses or an equivalent safeguard. Customers who need their documents stored in the EU can ask for it.

You can ask us for a copy of your personal data, to correct it, to delete it, to limit how we use it, to object to its use, or to receive it in a portable format. Write to contact@antiwarp.com. We reply within one month.

If your data is in your company's Antiwarp account, we pass your request to your company, which decides, and we help it respond.

You can also complain to the data protection authority where you live or work.

Each company's data is kept apart from every other company's, and this is enforced on the server and covered by automated tests. Documents are stored encrypted. Bank details are masked and every reveal is logged. When Antiwarp support opens a customer account to help, it is recorded in that customer's audit log.

We update this notice when what we collect or who processes it changes. The date at the top shows the last update. For changes that matter, we tell customers' administrators in advance.