Privacy policy

Who we are

Supplier Flow is operated by PeakFlow Media LLC (“we”, “us”). This policy covers data we collect on this site and through the Supplier Flow product.

What we collect

• Account info: email, name, profile image (via Clerk)
• Billing info: a customer reference from our payment processor (card details stay with the processor, never us)
• Product usage: supplier unlocks, CRM activity, search demand reveals
• Technical: IP address, browser, OS (anonymized for analytics)

How we use it

• Deliver the product you pay for (credit grants, unlocks, CRM)
• Send transactional email (invoices, follow-up reminders, weekly digests)
• Detect abuse (rate limiting, fraud signals)
• Improve the product (aggregated analytics via PostHog)

Third parties we use

Clerk (authentication), Fanbasis / Commas (payments, as our Merchant of Record), Neon (database), Resend (email), PostHog (analytics), Sentry (error monitoring), Inngest (background jobs), DataForSEO (supplier search-volume data). Each processes data under their own privacy terms. Supplier profile data is compiled from public web sources and summarized with AI; this does not involve your personal account data.

Your rights

Email privacy@supplierflow.io to: export your data, delete your account, correct inaccuracies, object to processing, or file a complaint. We respond within 30 days.

Retention

We keep account data while you have an active subscription plus 90 days. After cancellation, data is purged. Credit ledger + audit logs are retained for 7 years for accounting + compliance.

Cookies

We use strictly-necessary cookies for authentication (Clerk) and checkout (our payment processor). Analytics cookies (PostHog) are opt-in in the EU and on by default elsewhere.