Unable to Load

1. Introduction

HOLESCALE ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our B2B marketplace platform.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

• Name and contact information (email, phone number)
• Company name and business details
• Billing and shipping addresses
• Payment information (processed securely through Stripe)
• Profile information and preferences

2.2 Automatically Collected Information

When you use our Platform, we automatically collect:

• IP address and device information
• Browser type and version
• Usage data and activity logs
• Cookies and similar tracking technologies

2.3 Business Transaction Data

• RFQ submissions and specifications
• Quotes and pricing information
• Order history and transaction records
• Messages and communications
• Reviews and ratings

3. How We Use Your Information

We use collected information for the following purposes:

• Facilitate transactions between buyers and suppliers
• Process payments and prevent fraud
• Provide customer support
• Send transactional emails and notifications
• Improve and optimize our Platform
• Comply with legal obligations
• Conduct analytics and research

4. Information Sharing and Disclosure

4.1 With Other Users

When you submit an RFQ or accept a quote, relevant information is shared with the other party to facilitate the transaction.

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf:

• Stripe - Payment processing
• Supabase - Database and authentication
• Email service providers - Transactional emails
• Analytics providers - Platform analytics

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

4.4 Business Transfers

If HOLESCALE is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Encryption of data in transit and at rest
• Row-level security policies on databases
• Secure authentication and authorization
• Regular security audits and monitoring
• Limited employee access to personal data

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Deleted user data is retained in backup systems for 30 days before permanent deletion.

7. Your Rights and Choices

7.1 Access and Update

You can access and update your personal information through your account settings.

7.2 Data Deletion

You can request deletion of your account and associated data by contacting our support team.

7.3 Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in the email or updating your preferences.

7.4 Cookies

You can control cookies through your browser settings, though this may limit Platform functionality.

8. Children's Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

10. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

11. OAuth Providers

If you sign in using Google or Apple OAuth, we receive limited information from these providers as permitted by their privacy policies. We do not have access to your password.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Platform or sending an email.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through the Platform's support system.

14. GDPR Compliance (EU Users)

If you are located in the European Union, you have additional rights under GDPR:

• Right to access your data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

15. CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights