1. Who we are

SupplierAdvisor® (“we”, “us”) operates the platform at supplieradvisor.com and related apps. Contact: hello@supplieradvisor.com.

2. Information we collect

Account & identity — name, email, phone, authentication data (via Privy and similar providers).
Company profile — trading name, registration, addresses, industry, certificates, bank metadata required for verification and trade.
Operational data — products, stock, orders, shipments, documents, team membership, ratings, and related commercial records you enter on the platform.
Technical data — device, browser and operating-system family, a screen-width band, language, and the cookies described below, for security and to understand how the public site is used.

3. How we use information

Provide company workspaces, network connections, and trade workflows.
Verify businesses and reduce fraud (including third-party verification partners).
Operate multi-currency pricing, inventory, logistics, and accounting features.
Send service and security notices; optional product updates where permitted.
Improve the platform, enforce Terms, and meet legal obligations.

4. Sharing

We do not sell personal data. We share information only as needed to run the service:

Connected companies — trading counterparties you accept may see agreed commercial data (e.g. POs, shared documents, names).
Processors — hosting (e.g. Supabase), auth, payments, verification, email/SMS, and analytics under appropriate contracts.
Law & safety — when required by law or to protect users and the platform.

5. Storage & security

Data is stored with reputable cloud providers with access controls, encryption in transit, and company-scoped membership checks inside the product. No method of transmission is 100% secure; please use strong credentials and protect team access.

6. Retention

We retain account and trade records for as long as your organisation uses the service and as required for legal, tax, dispute, and audit purposes. You may request deletion subject to those obligations and counterparties’ legitimate interests in trade history.

7. Your rights (POPIA-aligned)

Depending on applicable law (including South Africa’s POPIA), you may request access, correction, deletion, or restriction of personal information, and object to certain processing. Contact us at the email above. You may also lodge a complaint with the Information Regulator (South Africa) where applicable.

8. Cookies

We use essential cookies for authentication and session security. We also set one first-party visitor cookie, sa_vid, kept for about 180 days. It holds a random identifier, how many visits that identifier has made, and when the last visit was. It is not derived from your IP address. We use it only to tell a new visit from a returning one, and to see return frequency and how recently someone came back. The pages in the current visit are kept in the browser tab until that tab closes. We do not show a cookie banner. If your browser sends Do Not Track or Global Privacy Control, we do not set this cookie and we record nothing.

8A. Website visit statistics

A visit to the public site can be recorded in the same Website Insights store that Big Five Group uses for its investor portal. Vercel may still provide separate daily totals. We do not sell these records, and this site does not email, Slack, or otherwise alert anyone about a visit.

When recording is on, a visit can include:

Organisation label, industry, size and network type — from a server-side lookup of the connection. We do not store the raw IP address in our database, cache, or logs.
Coarse network location — country, region, city and timezone, from our hosting provider’s location headers (Vercel). This is the network’s location, not GPS, and not a precise position. City is the finest level we keep.
Device — device type, browser, operating system, a screen-width band rather than exact pixels, and language.
How you arrived — referrer, and UTM source, medium, campaign, content and term.
What you did — landing page, exit page, the first pages of a multi-page visit, time on page, scroll depth, a PDF download’s file name, the site name of an outbound link, a button label on public pages, and named actions such as “Start free trial” and completing sign-up. Inside the signed-in app we record only the area you used (for example “purchasing” or “finance”), never the page address, record ids, company names or button text.
Page speed — how quickly the page loaded and responded (Core Web Vitals: LCP, INP and CLS), stored per page without a visitor id.
New or returning — using the visitor cookie above, including return frequency and recency.

We do not record email addresses, names, form contents, GPS, or a raw IP address in these visit statistics. Do Not Track and Global Privacy Control remain the opt-out: when either signal is on, nothing is recorded.

9. Children

The platform is intended for business and institutional users, not for children under 18.

10. Changes

We may update this policy. Material changes will be posted on this page with a revised date. Continued use after changes constitutes acceptance of the updated policy.

Privacy Policy