Privacy Policy

What we collect

We process account information, workspace membership, supplier URLs you submit, monitoring observations, notification settings, encrypted store credentials, billing identifiers, security logs, and operational diagnostics required to provide SupplyMirror.

Supplier sessions

Information entered into the remote supplier browser passes through SupplyMirror servers to the supplier. Remembered supplier cookies and selected authentication state are stored encrypted for up to 30 days or the supplier earlier expiry, and scoped to the authorized workspace, user and supplier. Closing an idle remote browser does not necessarily erase a separately remembered session.

Where automatic reconnection is authorized for a supported supplier, encrypted supplier login credentials can also be stored to retry access after session expiry. They are used only for that supplier and excluded from product records and monitoring logs. You can forget a remembered session, disable automatic reconnection to remove stored credentials, or disconnect the supplier. Supplier security requirements can still interrupt monitoring.

How we use data

We use data to authenticate users, monitor selected sources, deliver alerts, execute configured store actions, secure the service, provide support, process subscriptions, prevent abuse, and improve reliability.

Service providers

We may use hosting, database, email, billing, observability, and commerce integration providers. They process data only as needed for the relevant service and under their own security and privacy obligations.

Retention and deletion

Operational records are kept while a workspace is active and afterward as necessary for account recovery, security, payment disputes and applicable legal or billing obligations. You may request deletion through Support; some transaction records may have to remain as required by law. Backups follow their configured expiry schedule.

A signed first-visit cookie can preserve the start of a seven-day welcome offer. The cookie may remain longer than the offer to prevent each page refresh from restarting the discount. Essential authentication cookies are separate from optional analytics settings.

Security

SupplyMirror uses scoped access controls, encrypted integration secrets, hashed authentication tokens, signed webhook verification, workspace isolation, rate limits, and fail-closed store-write controls. No online service can guarantee absolute security.

Your choices

You can manage alerts, connected stores, members, browser sessions, remembered supplier sessions and subscription settings. Depending on applicable law you may ask to access, correct, export or delete personal data or object to certain processing. Send requests to support@supplymirror.com or https://www.supplymirror.com/contact; identity and workspace ownership may be verified first.