SourceReady - AI Product Sourcing

Privacy Policy

Last updated: February 11, 2026

1. Information We Collect

Account Information

When you create an account, we collect your email address, display name, and profile information. If you sign in with Google, we receive your name, email, and profile picture from Google.

Usage Data

We collect information about how you use the Service, including: pages visited, features used, AI chat messages (to provide and improve the Service), documents uploaded for analysis, and tool usage patterns.

Technical Data

We automatically collect: IP address, browser type and version, device information, and cookies for session management.

2. How We Use Your Information

  • Provide the Service: Process your requests, run AI analyses, and deliver sourcing results.
  • Improve the Service: Analyze usage patterns to enhance features and fix issues.
  • Communications: Send you account notifications, security alerts, and service updates.
  • Billing: Process payments and manage your subscription.
  • Security: Detect and prevent fraud, abuse, and security threats.

3. AI Data Processing

When you use our AI features:

  • Your messages and uploaded documents are sent to OpenAI for processing.
  • We do not use your data to train AI models.
  • Chat sessions are stored for your reference and can be deleted at any time.
  • Documents you upload for RAG are stored within your organization's scope and are not shared with other users or organizations.

4. Data Sharing

We do NOT sell your personal data. We share data only with:

  • Service Providers: OpenAI (AI processing), Stripe (payments), email service provider (transactional emails), and cloud hosting provider.
  • Legal Requirements: When required by law, subpoena, or to protect our rights.
  • Your Organization: If you're part of a team, organization admins/owners can view usage analytics for the organization.

5. Data Retention

  • Account data is retained while your account is active.
  • Chat sessions can be deleted by you at any time.
  • Documents can be deleted by you or your organization admin.
  • We retain usage logs for up to 90 days for analytics and debugging.
  • Upon account deletion, we remove your personal data within 30 days.

6. Your Rights

You have the right to:

  • Access your personal data.
  • Correct inaccurate data via account settings.
  • Delete your account and associated data.
  • Export your data upon request.
  • Opt out of non-essential communications.

7. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (Vercel Analytics) to understand how the Service is used. You can control cookies through your browser settings.

8. Security

We implement industry-standard security measures including encryption in transit (HTTPS/TLS), secure authentication, role-based access control, and regular security reviews. However, no system is 100% secure.

9. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers.

10. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification.

12. Contact Us

For privacy-related questions or to exercise your rights, contact us at our contact page.