Privacy
Business data should move only where the work requires it.
This summary explains the privacy model built into SupplyRoute. A jurisdiction-specific legal policy should be approved by counsel before broad commercial launch.
Information SupplyRoute uses
Account identity, company and onboarding details, buyer requirements, supplier capabilities, quotes, evidence references, messages, deal records, uploaded documents, referrals, acquisition source and workflow events may be stored to provide and improve the marketplace service.
Public and private information
Buyer workspaces, discovery candidates, review notes and procurement records are private to authorized users. Only supplier-approved and moderator-approved directory fields are public. Contact information is shared with a buyer only through a permitted connection or invitation workflow.
Email choices
Required account and workflow emails are transactional. Optional product updates and sourcing insights are sent only when a user affirmatively opts in, and that preference can be withdrawn. Marketing consent is not required to use a launch account.
Service providers
Built-in requirement assistance and supplier record matching do not send prompts to an external AI provider. If you select private-model assistance, your requirement is sent to the model server configured by the site owner. SupplyRoute uses Resend for approved transactional email. Official opportunity sources and company registries are queried for the specific functions shown in the product. Each provider remains subject to its own terms and data practices.
Control and retention
Users can update their company and marketplace information, withdraw a supplier listing and export workspace records where available. Retention, deletion, access and correction requests require a formal support and legal process before commercial launch.
Effective September 20, 2026. These product policies should be reviewed by qualified legal counsel before commercial launch in each jurisdiction.