Privacy

1. Information We Collect

Account information. When you create an account, we collect your email address. If you sign in as a manufacturer or sourcing professional, we may collect your name, company name, role, and department.

Manufacturer record information. For manufacturer accounts, we collect and store business information including company name, location, website, product categories, certifications, and capability descriptions. Much of this information is initially assembled from publicly available sources before a company claims its record; once claimed, the manufacturer can review, correct, and update this information directly.

Claim verification information. To verify that a person claiming a manufacturer record is authorized to represent that company, we collect a work email address and compare its domain against the company's registered website domain. We generate a single-use, time-limited verification token for this process. This token and its associated metadata (creation time, expiration, usage status) are stored temporarily and are not retained after use or expiration.

Communications. We collect the content of messages, introductions, and notes exchanged through the Service between manufacturers and sourcing professionals, in order to provide the messaging functionality of the Service.

Usage information. We may collect technical information such as IP address, device type, browser type, and pages visited, for the purposes of operating, securing, and improving the Service.

2. How We Use Information

We use the information we collect to:

• Operate and maintain the Service, including account creation, authentication, and the manufacturer claim verification process
• Enable communication and introductions between manufacturers and sourcing professionals
• Verify the authenticity of manufacturer claims through domain-matched email confirmation
• Improve and develop new features
• Communicate with you about your account or the Service
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations

We do not sell personal information to third parties.

3. How We Share Information

Between users of the Service. Manufacturer business information that has been published is visible to sourcing professionals using the Service, as this is the core function of the platform. Personal account information (such as your email address) is not displayed publicly; manufacturers and sourcing professionals communicate through the Service's messaging system.

Service providers. We share information with third-party service providers who perform services on our behalf, including:

• Supabase (database hosting and authentication infrastructure)
• Resend (transactional email delivery, such as claim verification emails)
• Vercel (web hosting infrastructure)

These providers are contractually obligated to use information only as necessary to provide their services to us.

Legal requirements. We may disclose information if required to do so by law, or if we believe in good faith that disclosure is necessary to comply with legal process, protect our rights, or protect the safety of our users or the public.

4. Data Security

We use technical safeguards to protect information, including row-level security policies enforced at the database level that govern which users can read or modify specific records, and a claim verification protocol that requires domain-matched, single-use, time-limited tokens before any account can be linked to a manufacturer record. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Data Retention

We retain account and manufacturer record information for as long as your account is active or as needed to provide the Service. Claim verification tokens are deleted upon use or expiration. You may request deletion of your account and associated personal information by contacting us as described in Section 9.

6. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including the right to access, correct, or delete the personal information we hold about you, and the right to opt out of certain uses of your information.

California residents. If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale or sharing of personal information. We do not sell personal information.

To exercise any of these rights, contact us as described in Section 9.

7. Children's Privacy

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent revision at the top of this page. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights regarding your personal information, contact us at [contact email to be confirmed].