Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, place an order, or contact us for support. This includes your name, email address, company name, billing address, shipping addresses, and payment information.

We also automatically collect certain information when you use the Service, including log data (IP address, browser type, pages visited), device information, and usage data.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill orders
• Provide, maintain, and improve the Service
• Send transactional emails (order confirmations, invoices, approval requests)
• Respond to support requests
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. Sharing of Information

We do not sell your personal information. We may share your information with:

• Service providers who assist in operating the platform (payment processors, email delivery, hosting)
• Your organization's administrators as part of the normal operation of the B2B ordering workflow
• Law enforcement or regulators when required by applicable US law

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Order and billing records are retained for a minimum of seven years for financial and legal compliance. You may request deletion of your account at any time; we will delete or anonymize personal data within 30 days except where retention is required by law.

5. Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. All data is transmitted over TLS and stored encrypted at rest. However, no method of transmission over the internet is 100% secure.

6. Your Rights (California Residents)

Under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information we collect, request deletion of their data, and opt out of the sale of personal information (we do not sell personal information). To exercise these rights, contact us at [email protected].

7. Children's Privacy

The Service is intended for business use only and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the platform at least 30 days before the change takes effect.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].