Privacy Policy

1. Scope and who we are

SupplyChain.management ("we", "us", or "our") is an independent management and knowledge platform for supply chain professionals. This policy applies to our website, accounts, Agent, health checks, KPI tracking, saved content, company data features, contact form, and related services. It explains what information we collect, why we use it, when it is shared, how long it is kept, and the choices available to you.

2. Information we collect

We collect information in the following categories:

• Account information: email address, name, profile photo, company, job title, authentication identifiers, plan and account status.
• Content you provide: contact messages, health-check answers, KPI values and history, saved items, Agent messages, uploaded files, inventory records, workspace details, and connection settings you choose to enter.
• Authentication information: sign-in method, session data, and security events. We do not receive or store your Google password.
• Technical information: IP address, browser and device type, pages requested, timestamps, error reports, and security or performance logs generated when you use the service.

We do not sell personal information and do not use it to build advertising profiles.

3. Google sign-in data

If you choose Sign in with Google, Google may provide your email address, basic profile information such as your name and profile image, and a unique account identifier. We use this information only to create and authenticate your SupplyChain.management account, display your account identity, secure access, and provide requested account features.

We do not request access to Gmail, Google Drive, contacts, calendars, or other Google services. We do not use Google user data for advertising, sell it, or transfer it to data brokers. Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

4. How we use information

• Provide, personalize, maintain, and improve the features you request.
• Authenticate users, manage accounts, plans, workspaces, and access permissions.
• Save and display your KPIs, health checks, uploads, inventory data, conversations, and saved content.
• Respond to questions, support requests, and privacy requests.
• Protect the service, prevent abuse, troubleshoot errors, and enforce our terms.
• Comply with legal obligations and establish or defend legal claims.

5. How we share information

We disclose information only as needed for these purposes:

• Service providers: hosting, database, authentication, storage, security, email, and AI processing providers acting on our behalf.
• Your workspace: information you intentionally place in an enterprise workspace may be available to authorized members of that workspace according to their role.
• Legal and safety reasons: when reasonably necessary to comply with law, lawful process, protect rights or safety, investigate fraud, or secure the service.
• Business changes: as part of a merger, acquisition, financing, or sale, subject to appropriate confidentiality and notice requirements.

We do not allow service providers to use your personal information for their own advertising.

6. AI features and company data

When you use the Agent, your prompt, relevant conversation context, and information you deliberately include may be sent to the configured AI processing provider to generate a response. Do not submit personal, confidential, or regulated information unless you are authorized to do so. AI output can be inaccurate and should be reviewed before use.

Uploaded company files, KPI history, inventory records, workspace information, and connection credentials are private by default. Access is limited by account and workspace permissions. Connection secrets are encrypted. Registering a connection does not create automatic access to an external system unless a live integration is separately enabled.

7. Cookies and technical data

We use essential cookies or local storage to maintain sign-in sessions, protect accounts, and remember necessary preferences. Our hosting and security systems may process technical logs to operate, diagnose, and protect the service. You can restrict browser storage, but doing so may sign you out or prevent account features from working.

8. Legal bases

If privacy law in the EEA or UK applies, our legal bases are:

• Contract: to provide the account and services you request.
• Legitimate interests: to secure, maintain, support, and improve the platform, balanced against your rights.
• Consent: where we ask for optional permission. You may withdraw it at any time.
• Legal obligation: to comply with applicable law.

9. Data retention and deletion

We keep account and user-created information while your account is active or as needed to provide the service. You can delete individual saved items where that control is offered. You may request deletion of your account and associated personal information through our contact page. After a verified request, we delete or anonymize information unless retention is required for security, fraud prevention, legal compliance, dispute resolution, or enforcing agreements. Limited encrypted backups and audit records may remain until their normal retention periods expire.

Revoking Google access stops future sign-in authorization but does not by itself delete your SupplyChain.management account. Contact us to request deletion. You can also manage third-party access in your Google Account security settings.

10. Security

We use HTTPS encryption in transit, access controls, private storage, row-level data restrictions, encrypted connection secrets, audit logging, and least-privilege access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Your privacy rights

Depending on where you live, you may have the right to:

• Know whether we process your personal information and access a copy.
• Correct inaccurate or incomplete information.
• Request deletion or restriction of processing.
• Receive certain information in a portable format.
• Object to certain processing or withdraw consent.
• Opt out of sale or targeted advertising. We do not engage in either practice.
• Complain to your local data protection authority.

Submit a request through our contact page. We may need to verify your identity before completing it. We will not discriminate against you for exercising a privacy right.

12. International transfers

We and our service providers may process information in countries other than yours. Where required, we use recognized safeguards for international transfers, such as contractual protections, and apply the protections described in this policy.

13. Children's privacy

The service is intended for business and professional users and is not directed to children under 13, or a higher minimum age where required by local law. We do not knowingly collect personal information from children. Contact us if you believe a child has provided it.

14. Changes to this policy

We may update this policy when our practices, services, or legal obligations change. We will post the revised policy here and update the date above. Material changes may also be communicated through the service or by email when appropriate.

15. Contact us

For privacy questions, requests, or complaints, contact SupplyChain.management through our contact page. Please include enough information for us to understand and verify your request, but do not send passwords or sensitive credentials.