SUPLORA / LEGAL
Privacy Policy
How SUPLORA handles personal information across its website and service.
Introduction
This Privacy Policy explains how SUPLORA handles personal information. Until the operating company is formally identified, the controller or responsible operator is SUPLORA, [LEGAL ENTITY TO BE INSERTED], reachable at hello@suplora.ai.
Scope
This Policy applies to the SUPLORA website, early-access process, application, support interactions, and related services. It does not govern third-party websites, suppliers, or services that publish their own privacy notices.
Information Customers Provide
We process information submitted through forms, workspaces, communications, imports, and enabled integrations. The specific information depends on the features used. Customers should provide only information they are authorized to use.
Account Information
When account features are available, we may process names, business email addresses, credentials or authentication identifiers, roles, preferences, and account status needed to administer access.
Business / Organization Information
We may process organization names, workspace identifiers, business contact details, team membership, locations, and settings supplied by or for a Customer.
Inventory and Procurement Data
Depending on use, the service processes product names, SKUs, units, inventory balances and events, sales velocity, lead times, safety stock, purchasing requirements, recommendations, approvals, and order-related records.
Supplier Data
Customers may provide supplier names, contacts, offers, prices, minimum quantities, lead times, terms, URLs, and notes. SUPLORA may also retrieve business-facing supplier information from public sources or enabled services.
Communications
We process messages sent to SUPLORA and, where communication features are used, content submitted through the service. This can include prompts and responses exchanged with SUPLORA AI.
Support Requests
Support requests may contain contact details, descriptions, screenshots, files, and technical information supplied to diagnose and resolve an issue. Please avoid including unnecessary sensitive information.
Information Collected Automatically
When you use the website or service, certain technical and usage information may be collected automatically to deliver, secure, and understand the service, subject to applicable consent requirements.
Device / Browser Information
Depending on consent and the service used, this may include device category, browser, operating system, language, timezone, and viewport dimensions. We do not claim to collect fields that are not produced by the active feature.
Log Data
Hosting and application systems may process request timestamps, routes, response status, diagnostic events, and network information needed for delivery, security, troubleshooting, and abuse prevention. Log contents and retention depend on the systems in use.
Usage Information
We may process pages viewed, session activity, feature interactions, referral information, landing pages, and selected product events. Optional first-party usage analytics is disabled until the visitor provides the applicable consent.
Analytics
SUPLORA currently uses consent-based first-party analytics and separate aggregate website measurement. First-party analytics uses browser-generated visitor and session identifiers rather than names or email addresses, but we do not describe identifier-based data as necessarily anonymous.
How Information Is Used
We use information for the purposes described below, as reasonably necessary to provide requested services, pursue legitimate business and security interests, comply with obligations, or based on consent where required.
Operating SUPLORA
Information is used to provide workspaces, maintain product and inventory records, deliver requested features, respond to users, preserve settings, and support service administration.
Providing AI Features
Prompts, relevant workspace context, and retrieved information may be processed to generate requested AI-assisted responses. We do not state that Customer Data is used to train SUPLORA models. AI providers may process inputs as service providers under their applicable arrangements.
Inventory / Procurement Analysis
Product, stock, sales, supplier, and order information may be analyzed to calculate metrics, surface risk, compare options, and prepare recommendations for human review.
Security and Fraud Prevention
Information may be used to authenticate access where available, enforce rate limits, detect suspicious behavior, investigate incidents, prevent fraud or abuse, and protect users, SUPLORA, and third parties.
Product Improvement
We may use feedback, support patterns, usage signals, and appropriately aggregated information to understand performance and improve workflows. We do not use this clause to claim unrestricted rights over identifiable Customer Data.
Customer Communications
We use contact details to respond to requests, provide service notices, administer early access, and send communications requested by the recipient. A waitlist submission does not by itself enroll a person in unrelated marketing.
Legal Obligations
Information may be processed to comply with applicable law, lawful requests, tax or accounting obligations, establish or defend legal claims, and enforce agreements.
Service Providers
Providers may support hosting, databases, communications, monitoring, support, and other operational functions. They receive information needed for their services and are expected to handle it under contractual or legal obligations applicable to them.
AI / Infrastructure Providers
AI, search, retrieval, hosting, and infrastructure service providers may process relevant requests and technical information to deliver features. We describe these categories rather than fixed vendor names because the underlying providers may change.
Analytics Providers
Analytics providers may process page, device, referral, and aggregate usage information. Optional SUPLORA analytics remains subject to the consent choice presented on the website.
Integrations
If a Customer enables an integration, information may move between SUPLORA and the connected service as directed by the Customer. The connected provider’s own terms and privacy notice also apply.
Business Transfers
Information may be disclosed in connection with due diligence, financing, reorganization, merger, acquisition, insolvency, or sale of assets, subject to appropriate confidentiality and applicable law.
Legal Requests
We may disclose information when reasonably believed necessary to comply with law or valid legal process, protect rights and safety, investigate abuse, or enforce agreements. Where permitted, we may notify the affected Customer.
Customer-Controlled Information
For workspace information processed on a Customer’s behalf, the Customer determines what is submitted, who has access, and why it is used. Individuals should first direct workspace-related requests to the organization that controls the account where appropriate.
Data Retention
We retain information for as long as reasonably necessary for the purpose collected, to provide the service, maintain legitimate records, resolve disputes, prevent abuse, and satisfy legal obligations. Retention varies by data category and contractual configuration; no universal period is promised here.
Data Security
SUPLORA uses reasonable measures appropriate to the service’s stage and the information processed. No transmission, storage, or security method can be guaranteed completely secure, and this Policy does not claim a certification or technical standard that has not been established.
International Processing / Transfers
Service providers and users may operate in different countries. Where applicable law requires a transfer mechanism or safeguards, the responsible parties will use an appropriate legal basis. Specific transfer arrangements are [INTERNATIONAL TRANSFER DETAILS TO BE INSERTED].
Privacy Rights
Depending on location and circumstances, individuals may have some of the rights below. Rights are subject to legal conditions, identity verification, exceptions, and whether SUPLORA acts as controller or processor.
Access
You may have the right to ask whether personal information is processed and request access to eligible information.
Correction
You may have the right to request correction of inaccurate or incomplete personal information.
Deletion
You may have the right to request deletion in qualifying circumstances. Certain information may be retained where legally required or necessary to establish, exercise, or defend claims.
Objection / Restriction
Where applicable, you may object to certain processing or ask that processing be restricted. We will assess the request under the relevant law and legal basis.
Data Portability
Where applicable, you may request eligible information in a structured, commonly used, machine-readable format or ask for it to be transmitted as legally required.
Withdrawal of Consent
Where processing relies on consent, you may withdraw it for future processing. Withdrawal does not affect processing already carried out lawfully before withdrawal.
Organization / Employer-Controlled Accounts
If an organization provides your account, it may administer access, view workspace activity and content, and control retention in accordance with its policies. Questions about that organization’s decisions should be directed to it.
Children / Minimum Age
SUPLORA is a business service not directed to children. People under 18 should not create accounts or submit personal information directly to SUPLORA.
Third-Party Websites
Links to supplier and other third-party websites do not make SUPLORA responsible for their privacy or security practices. Review the third party’s notices before providing information.
Changes to Privacy Policy
We may update this Policy as the service, corporate structure, providers, and legal obligations evolve. The current version will show its effective and last-updated dates, and material changes will be communicated where required.
Contact
Privacy questions and requests may be sent to hello@suplora.ai. The registered contact address is [REGISTERED ADDRESS TO BE INSERTED].