Privacy Policy

SupplyVaultAI ("SupplyVaultAI," "we," "us") operates a marketplace and transaction platform for AI and data center infrastructure, available at supplyvaultai.com (the "Platform"). This Privacy Policy applies to personal information we process when you visit our public pages, create an account, or use the Platform. It does not cover information practices of other companies you transact with on the Platform, who act as independent parties.

We collect the following categories of information:

Account information. Name, email address, authentication credentials, role, and account settings you provide when you register or manage your account.

Company information. Company profile details submitted for the platform directory and verification process, including company name, business description, and materials submitted to support verification.

Listing information. Content of listings and procurement requests, including specifications, regions, and related documents you upload.

Transaction metadata. Records of deal activity on the Platform, such as deal stages, contract status events, payment status records, messages, and audit-trail entries.

Usage analytics. Information about how you interact with the Platform, collected through our analytics provider (PostHog), such as pages viewed, features used, and device and browser information.

Cookies. We use cookies and similar technologies primarily to keep you signed in and to secure authentication sessions.

We use the information we collect to:

Provide and operate the Platform, including accounts, listings, matching, deal rooms, contracts, and payment tracking; verify companies and review listings under our verification standards; process subscriptions and fees; communicate with you about your account, deals, and service updates; produce aggregated market intelligence that does not identify individual counterparties; monitor, secure, and improve the Platform; and comply with legal obligations.

We do not sell personal information. We share information with:

Service providers. Vendors that process data on our behalf under contract: Supabase (application infrastructure and database hosting), Stripe (payment processing), PostHog (product analytics), and SendGrid (transactional email).

Other Platform users. Information you choose to publish (such as public listing previews and verified company profiles) and information you share with counterparties inside deal rooms is visible to those audiences by design.

Legal and safety. We may disclose information where required by law, to enforce our Terms and Conditions, or to protect the rights, safety, and security of SupplyVaultAI, our users, or others.

Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction subject to this policy.

We retain account, company, and transaction records for as long as your account is active and as needed to provide the Platform, resolve disputes, maintain required transaction records, and meet legal and audit obligations. Because the Platform serves as the system of record for transactions, certain deal, contract, and payment records are retained after account closure where retention is required for legitimate business or legal purposes. We delete or de-identify data when it is no longer needed.

We use administrative, technical, and organizational safeguards appropriate to the data we handle, including encryption of data in transit, row-level tenant isolation in our database so each organization's data is segregated, support for multi-factor authentication, and audit logging of sensitive actions. No system is perfectly secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. You can update most account information directly in your settings. To exercise other rights, contact us at the address below; we will verify your request and respond as required by applicable law. You may disable cookies in your browser, but authentication cookies are required to sign in.

The Platform is a business service and is not directed to individuals under 18. We do not knowingly collect personal information from children.

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice such as email or an in-app announcement.

Contact [email protected] with questions about this policy or your data.