SupplyMesh, Inc. ("SupplyMesh," "we," "us," or "our") operates the platform available at supplymesh.ai (the "Platform"). This Privacy Policy describes how we collect, use, and share information about you when you use our Platform.
By accessing or using the Platform, you agree to this Privacy Policy. If you do not agree, please do not use the Platform.
Account Information. When you register, we collect your name, email address, company name, and role (buyer or supplier). If you sign in with Google OAuth, we receive your name, email address, and profile information from Google.
Profile and Business Information. Suppliers may submit information about their capabilities, certifications, equipment, materials, and geographic location. Buyers may submit company information, industry, and procurement preferences.
RFQ and Quote Data. We collect the content of requests for quotation (RFQs) you submit, including part descriptions, quantities, tolerances, materials, and delivery requirements. We also collect quote data submitted by suppliers in response to RFQs.
Usage Data. We automatically collect information about how you use the Platform, including pages visited, features used, search queries, and actions taken. This may include IP address, browser type, operating system, and referring URLs.
Communications. If you contact us, we retain the content of that communication.
With Other Users. When a buyer posts an RFQ and a supplier is matched, limited RFQ details are shared with matched suppliers. Supplier profile information is visible to buyers as part of the matching process.
Service Providers. We share information with third-party vendors who help operate the Platform, including cloud infrastructure (Vercel, Supabase), error monitoring (Sentry), analytics (PostHog), and email services (Resend). These providers process data on our behalf under contractual confidentiality obligations.
Aggregated Data. We may share or publish aggregated, de-identified data about market pricing, lead times, and sourcing trends. This data does not identify any individual or company.
Legal Requirements. We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of SupplyMesh, our users, or others.
Business Transfers. If SupplyMesh is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify you before your information is subject to a materially different privacy policy.
We do not sell your personal information to third parties.
We retain your account and transaction data for as long as your account is active or as needed to provide the Platform. If you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal or compliance purposes.
We implement reasonable technical and organizational measures to protect your information, including encrypted data transmission (TLS), authentication controls, and access restrictions. No security system is perfect; we cannot guarantee absolute security.
We use cookies and similar technologies to operate authentication sessions, remember preferences, and analyze usage. We may use third-party analytics tools (such as PostHog) that set their own cookies. You can control cookies through your browser settings; disabling cookies may affect Platform functionality.
The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.
The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us.
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@supplymesh.ai.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform or by email. Continued use of the Platform after changes are posted constitutes acceptance of the updated policy.
Contact
SupplyMesh, Inc.
Email: privacy@supplymesh.ai
Website: supplymesh.ai