Privacy Policy

This Privacy Policy explains how SupplySwap ("SupplySwap," "we," "us," or "our") collects, uses, shares, and protects information about you and your business when you use our website, mobile applications, and related services (collectively, the "Platform").

We are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection laws. This Policy should be read together with our other legal notices, including our Terms & Conditions and any agreements you or your organization have with us.

1. Scope

This Privacy Policy applies to information we collect:

• When you access or use the Platform.
• When you communicate with us, such as by email or through forms on the Platform.
• When you interact with us in connection with business relationships, pilots, or partnerships.

It does not apply to third-party websites, services, or applications that are linked from the Platform. Those services are governed by their own privacy policies.

2. Information we collect

The types of information we collect depend on how you use the Platform and your relationship with us. We may collect:

• Account and contact details: such as your name, business name, role, email address, phone number, and login credentials.
• Business and listing information: including locations, categories, inventory descriptions, photos, pricing, and other details you choose to provide about surplus or available items.
• Usage and activity data: including how you navigate and interact with the Platform, such as pages viewed, searches, clicks, and actions taken (e.g., creating listings, sending messages, submitting offers).
• Device and technical information: such as IP address, browser type, operating system, device identifiers, and related technical data used for security, analytics, and service performance.
• Location-related information: as described in our Location Information Notice, which may include approximate or precise location when enabled.
• Communications and support: including messages you send through the Platform, email exchanges, feedback, or other communications with us.

In some cases, we may also obtain information from third parties, such as service providers, partners, or publicly available sources, where permitted by law.

3. How we use information

We use the information we collect for the following purposes:

• Providing the Platform: creating and managing accounts, enabling listings, facilitating messages and offers, and operating core functionality.
• Improving and developing services: analyzing usage, testing features, and enhancing performance, usability, and reliability.
• Communicating with you: sending service-related messages, updates, and responding to inquiries and support requests.
• Security and fraud prevention: protecting the Platform, users, and SupplySwap from malicious or unauthorized activity.
• Legal and compliance purposes: meeting legal, regulatory, tax, and accounting obligations, and enforcing our agreements and policies.

4. Legal bases for processing

Where required by law (for example, in the European Economic Area or the United Kingdom), we rely on one or more of the following legal bases to process personal data:

• Performance of a contract: when processing is necessary to provide the Platform or fulfill our obligations under an agreement with you or your organization.
• Legitimate interests: such as operating, improving, and securing the Platform, subject to your rights and expectations.
• Consent: where you have given us explicit consent for a particular purpose (which you can withdraw at any time).
• Legal obligations: where processing is necessary to comply with laws, regulations, or valid legal requests.

5. How we share information

We may share information in the following circumstances:

• With other users and organizations: when you choose to share listings, offers, messages, or other content as part of using the Platform.
• With service providers: third-party vendors that support our operations, such as hosting, cloud infrastructure, analytics, communications, and payment processing. These providers are contractually bound to process data only on our behalf and under appropriate safeguards.
• Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business, information may be transferred as part of that transaction, subject to appropriate protections.
• Legal and safety purposes: where we believe in good faith that disclosure is necessary to comply with applicable law, respond to legal requests, or protect the rights, property, or safety of SupplySwap, our users, or others.

We do not sell your personal data.

6. Data retention

We retain personal data for as long as reasonably necessary to provide the Platform, fulfill the purposes described in this Policy, and comply with legal and regulatory requirements. Retention periods may vary depending on the type of data and the context in which it was collected.

When data is no longer needed, we may delete it, anonymize it, or aggregate it in a way that does not reasonably identify you.

7. Security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you suspect unauthorized access to your account.

8. International transfers

Depending on your location and the location of our service providers, your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws than your home jurisdiction.

Where required, we take appropriate steps to ensure that such transfers comply with applicable laws, which may include using standard contractual clauses or other recognized safeguards.

9. Your rights and choices

Depending on your location and applicable law, you may have certain rights with respect to your personal data, which can include:

• Accessing the personal data we hold about you.
• Requesting correction or updating of inaccurate information.
• Requesting deletion of certain data, subject to legal exceptions.
• Objecting to or restricting certain types of processing.
• Requesting a copy of your data in a portable format.
• Withdrawing consent where processing is based on consent.

To exercise any of these rights, please contact us at support@supplyswap.app. We may need to verify your identity before responding to your request.

10. Children's privacy

The Platform is not intended for use by children under the age of 16 (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information where required by law.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the "Last updated" date above. In some cases, we may provide additional notice or seek your consent where required by law.

12. How to contact us

If you have any questions or concerns about this Privacy Policy or our privacy practices, you can contact us at:

Email: support@supplyswap.app