Privacy Policy

1. Who we are

RKey Solutions, LLC ("we", "us", or "our") operates the web application at https://supplierspulse.com(the "Service"). We help manufacturing procurement teams track supplier lead times and purchase order delivery dates.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using the Service you agree to the practices described here.

2. Information we collect

Information you provide directly

• Account information — your name, email address, and company name when you sign up.
• Business data — supplier names, contact details, purchase order numbers, delivery dates, and notes you enter into the Service.
• Billing information — payment details are collected and stored by Stripe, our payment processor. We never store your full card number.
• Communications — any messages you send to our support team.

Information collected automatically

• Usage data — pages visited, features used, and actions taken within the Service.
• Log data — IP address, browser type, operating system, and timestamps of requests.
• Cookies — session cookies required for authentication. We do not use third-party advertising cookies.

3. How we use your information

We use the information we collect to:

• Provide, operate, and improve the Service
• Send automated alerts and email digests you have configured
• Process payments and manage your subscription
• Respond to support requests and troubleshoot issues
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal data. We do not use your business data (supplier names, PO details) to train AI models or share it with third parties for marketing purposes.

4. AI features

The AI follow-up email drafting feature sends purchase order context (PO number, supplier name, delivery dates, and status) to Anthropic's Claude API to generate a draft email. This data is processed by Anthropic under their Privacy Policy. We do not send personally identifiable information beyond what is necessary to generate the draft.

5. Data sharing and third parties

We share data with the following categories of third-party service providers, only as necessary to operate the Service:

• Supabase — database and authentication hosting (data stored in the United States)
• Vercel — application hosting and edge network
• Stripe — payment processing
• Resend — transactional email delivery
• Anthropic — AI email drafting (opt-in feature only)

We require all service providers to maintain appropriate security measures and to use your data only for the purposes we specify. We do not share your data with any other third parties unless required by law.

6. Data retention

We retain your account data for as long as your account is active. If you cancel your subscription, we retain your data for 90 days to allow for reactivation, after which it is permanently deleted from our systems on a rolling basis within 30 days.

Alert logs and audit records may be retained for up to 12 months for security and compliance purposes.

7. Security

We use industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level security on all database tables, and regular security reviews. Access to production systems is restricted to authorized personnel only.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we take reasonable measures to protect your data.

8. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated data
• Portability — request an export of your data in a machine-readable format
• Objection — object to certain uses of your data

To exercise any of these rights, email us at privacy@rkeysolutions.com. We will respond within 30 days.

9. Cookies

We use strictly necessary session cookies to keep you logged in. These cookies are deleted when you sign out or close your browser. We do not use analytics cookies, advertising cookies, or any third-party tracking scripts.

10. Children's privacy

The Service is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and notify you by email if the changes are material. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact

Questions about this Privacy Policy? Contact us at privacy@rkeysolutions.com.