Privacy Policy

1. Introduction

Welcome to Supply Chain Hub ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at https://supplychainhub.ai and our mobile application.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Profile information (professional title, country, areas of interest)
• Payment information (processed securely by PayPal on web, Apple In-App Purchase on iOS, and Google Play Billing on Android — we do not store card details)
• AI API keys you voluntarily add (encrypted at rest)
• Content you post in the community (posts, replies)
• Usage data and interactions with our platform

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our platform
• Process your subscription payments via PayPal (web), Apple In-App Purchase (iOS), or Google Play Billing (Android)
• Send you transactional emails (account confirmation, billing notifications)
• Personalise your experience and deliver relevant supply chain content
• Respond to your comments, questions, and support requests
• Monitor and analyse usage patterns to improve our services
• Comply with legal obligations

4. Data Storage and Security

Your data is stored on secure servers hosted by Supabase (PostgreSQL) in the EU. We implement industry-standard security measures including:

• Encryption of sensitive data at rest (AI API keys are AES-256 encrypted)
• HTTPS/TLS encryption for all data in transit
• JWT-based authentication with short-lived access tokens
• Regular security reviews

5. Third-Party Services

We use the following third-party services to operate our platform:

• PayPal — payment processing and subscription management on the web
• Apple In-App Purchase (App Store) — subscription processing for iOS users; governed by Apple's privacy policy
• Google Play Billing — subscription processing for Android users; governed by Google's privacy policy
• SendGrid — transactional email delivery
• Cloudflare R2 — media and asset storage
• Supabase — database hosting (EU region)
• Vercel — web application hosting

Each third party is bound by their own privacy policies and data processing agreements.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your account and data
• Portability — receive your data in a portable format
• Restriction — restrict processing of your data
• Objection — object to certain types of processing

You can exercise these rights from your account Settings page, or by contacting us at admin@supplychainhub.ai.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. You may delete your account at any time from Settings or by visiting /delete-account. Upon deletion, your personal data is permanently removed within 30 days, except where we are required to retain it for legal or accounting purposes.

8. Cookies

We use essential cookies only — specifically an HTTP-only authentication cookie to keep you signed in. We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or by a prominent notice on our platform. Continued use of the platform after changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: