Privacy Policy

Effective Date: July 13, 2026

This Privacy Policy explains how Supply Invy ("we," "us," or "our") collects, uses, and protects information when you use the DEMO VERSION: Supply Invy Management Portal application (the "Service").

1. We Do Not Sell Your Data

We do not sell, rent, or trade your data — inventory records, user accounts, activity logs, or any other information you or your organization store in the Service — to third parties. Data you input belongs to you and your organization.

2. Our Website Contact Form

Our marketing website includes a "Get Started" contact form (supplyinvy.com/get-started) that visitors can use to request information about Supply Invy — for example, a sales inquiry, a product demonstration, or a presentation. The form may collect your name, organization, email address, phone number, and details about your business and interest in the Service (such as your current inventory process, number of locations, and preferred contact method) so we can respond appropriately to your request.

Submissions from this form are transmitted to info@supplyinvy.com. We use this information only to respond to your inquiry and follow up about Supply Invy — we do not sell it to third parties.

3. Information We Collect

Account information: username, name, email address, role, and password (stored as a salted hash, never in plain text).
Operational data: the inventory, asset, location, and transaction records your organization enters into the Service.
Activity logs: a record of actions taken in the Service (who changed what, and when) for accountability and troubleshooting.
Technical information: IP address, browser type, and similar metadata collected automatically for security and diagnostic purposes.

4. The Invy AI Assistant

The Service includes an optional AI assistant module ("Invy") that answers natural-language questions about your inventory data. Because this feature is integrated directly into the Service, Supply Invy is responsible for how it is presented and how questions are answered within the app.

Accuracy is not guaranteed. Like any AI system, Invy can produce incorrect, incomplete, or misleading answers. Responses should be treated as a starting point, not a final source of truth — please verify important answers (stock counts, financial figures, compliance-related information, etc.) against the underlying records before relying on them.
Data sent to process a question. To answer a question, relevant data from your query and, where necessary, limited inventory context is sent to the configured AI provider (see below) for processing. This data is used only to generate a response and is not sold.
Bring-your-own AI provider. An organization administrator may configure the AI module to use their own API key with a third-party AI provider (for example, Groq or OpenRouter) instead of the Service's built-in default. When an organization supplies its own provider and API key, that provider's own privacy policy and terms of service govern how the data sent to them is handled — Supply Invy does not control, and is not responsible for, that provider's data practices. We encourage administrators to review their chosen provider's privacy policy before enabling this option.

5. How We Use Information

To operate, maintain, and secure the Service.
To provide customer support and respond to inquiries, including those submitted through our website contact form (see Section 2).
To generate AI assistant responses (see Section 4).
To maintain activity logs for security, audit, and troubleshooting purposes.
To comply with legal obligations.

6. Data Sharing

We do not sell your data. We may share information only in these limited circumstances:

With service providers who help us operate the Service (e.g., hosting infrastructure), under confidentiality obligations.
With the AI provider actually processing an Invy query — the Service's built-in default provider, or your organization's own configured provider (see Section 4).
When required by law, subpoena, or valid legal process.
To protect the rights, property, or safety of Supply Invy, our users, or others.

7. Data Retention

We retain operational data for as long as your organization's account is active, plus a reasonable period afterward for backups, legal, and accounting purposes. Database backups are retained on a rolling basis and eventually purged per our backup retention settings. You may request deletion of your organization's data by contacting us (see Section 11).

8. Security

We use industry-standard measures to protect your data, including password hashing, role-based access controls, activity logging, and encrypted storage of sensitive configuration values (such as AI provider API keys). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Choices

Organization administrators can enable, disable, or reconfigure the Invy AI module — including switching to "None" to disable AI features entirely, or supplying a different AI provider.
You may request access to, correction of, or deletion of your personal account information by contacting your organization's administrator or us directly.

10. Children's Privacy

The Service is a business inventory-management tool and is not directed to, or intended for use by, children under 16.

11. Contact Us

Questions about this Privacy Policy can be directed to: info@supplyinvy.com

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the Effective Date above.