Privacy Policy.

Supplyra collects information needed to create an account, operate the showroom, process enquiries, and fulfill requested orders.

• Google account details used for sign-in, including your name, email address, profile photo, and Google subject identifier. Authentication tokens are used for the sign-in exchange and are not retained as a user profile field.
• Account and contact details that you provide, such as phone number, delivery address, wishlist items, cart contents, enquiries, and order requests.
• Transaction and operational information, such as products requested, invoice details, order status, support messages, device/session data, and basic security logs.

We use personal information only for the purposes necessary to provide and protect Supplyra services.

• Authenticate users through Google Sign-In, create and maintain Supplyra accounts, and keep sessions active across the website and mobile application.
• Provide product browsing, wishlists, carts, enquiries, order requests, delivery coordination, invoices, support, and account administration.
• Communicate about requested services, respond to support messages, prevent fraud and abuse, troubleshoot errors, and improve the reliability and security of the platform.

Google Sign-In is an authentication option for the Supplyra website and mobile application. Supplyra requests only the Google account information needed for account access and service delivery.

• Google user data is used to authenticate you, create or identify your Supplyra account, and provide the features you request.
• We do not sell Google user data or use it for advertising, credit decisions, or unrelated profiling.
• Google API user data is not used to develop, improve, or train generalized artificial intelligence or machine-learning models. We handle it in accordance with Google API Services User Data Policy and its Limited Use requirements.

We do not sell, rent, or trade personal information. We share information only with service providers and people who need it to operate Supplyra or when the law requires it.

• Supabase hosts authentication, database, and storage services for Supplyra. Data is processed under the access controls and row-level security policies configured for the platform.
• Google processes Google Sign-In requests and returns authentication information to the app or website. Google’s own privacy policy also applies to its services.
• Hosting, deployment, monitoring, delivery, payment, logistics, or professional service providers may receive the minimum information needed for their contracted function. We may disclose information to comply with law, protect users, or investigate fraud and security incidents.

We use reasonable technical and organizational safeguards to protect information from unauthorized access, alteration, disclosure, or destruction.

• Encrypted HTTPS connections, Supabase authentication, session controls, row-level database security, restricted administrative access, and security monitoring.
• Account information is retained while your account is active or as needed to provide services. We retain order, invoice, tax, and dispute records for as long as required for business, legal, accounting, and fraud-prevention purposes.
• When information is no longer required, we delete it, anonymize it, or securely isolate it according to our operational and legal obligations. No online service can guarantee absolute security.

The website may use essential cookies, local storage, and similar technologies to keep sessions secure, remember preferences, support authentication, and understand service performance.

• Essential session and security technologies are required for sign-in and protected features.
• Service analytics or performance tools may process limited technical information where enabled, subject to their own policies and applicable choices.
• The mobile application stores authentication sessions locally so you do not need to sign in on every launch.

You may ask us to access, correct, export, or delete personal information associated with your Supplyra account, subject to identity verification and legal retention requirements.

• To request deletion, email supplyra@gmail.com from the account email address and include your name and the request details. We may ask for additional information to verify the request.
• Deletion may remove your account, profile, wishlist, and active service data. Records that must be retained for tax, accounting, legal, security, or dispute purposes may be kept for the required period and then deleted or anonymized.
• You may also withdraw consent where processing is based on consent, sign out, or stop using the website and mobile application. Some features will not work without the information needed to provide them.

Supplyra is a general-audience commerce and product information service. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

• If you believe a child has provided personal information, contact us so we can investigate and remove it where appropriate.
• We may update this policy when our services, legal obligations, or data practices change. The updated version will be posted on this page with a revised date.
• Privacy questions, Google OAuth concerns, data-access requests, and deletion requests can be sent to supplyra@gmail.com.