Privacy Policy

Last updated: March 21, 2026

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and organization details through our authentication provider (Clerk). We do not store passwords directly.

Procurement Data

You may upload invoices, product specifications, and supplier information. This data is used solely to power your procurement workflows and is not shared with other users or organizations.

Usage Data

We collect standard usage analytics including pages visited, features used, and performance metrics to improve the Service.

2. How We Use Your Information

• To provide and maintain the Service
• To process transactions and billing
• To send RFQs and communications to suppliers on your behalf
• To improve our AI models and procurement algorithms
• To send you service-related notifications

3. Data Sharing

We share your information only in the following circumstances:

• Suppliers: When you initiate a sourcing mission, we share relevant product specifications with potential suppliers to obtain quotes
• Service Providers: We use third-party services for authentication (Clerk), payments (Stripe), email delivery (AWS SES), and cloud hosting (Vercel, Railway)
• Legal Requirements: When required by law or to protect our rights

4. AI Processing

Your procurement data is processed by AI models (including third-party AI providers) to generate supplier recommendations, RFQs, and negotiation strategies. We do not use your data to train general-purpose AI models. Processing is performed solely for delivering your requested procurement services.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage (AES-256), access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

6. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, your data will be permanently removed within 30 days. Invoice files stored in our cloud storage are encrypted and access-controlled.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of non-essential communications

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.

11. Contact

For privacy-related questions, contact us at sam@materialmagician.com.