Home / Privacy Policy
LegalPrivacy Policy
How we handle your data
What we collect, why we collect it, who we share it with, and the rights you have over it — under GDPR, CCPA/CPRA, LGPD and comparable frameworks.
The short version
A summary, not a substitute for the policy below. The policy governs.
- We never sell your personal data. Sharing happens only to run the service, or where the law requires it.
- We collect what you give us. Account details, the briefs and product requirements you write, and your supplier correspondence.
- We also collect usage data. Pages, features, searches, device and IP address — used to operate and improve the platform.
- Your briefs reach the suppliers you pick. That is what an RFQ is for. Once it leaves the platform, we are not a party to it.
- You have real rights over your data. Access, correction, deletion, portability and objection under GDPR, UK GDPR, CCPA/CPRA, LGPD, PIPEDA and POPIA.
- Data is held in the US and Hong Kong. Transferred under Standard Contractual Clauses or an adequacy decision where the law requires it.
Effective Date: March 19, 2026 Last Updated: March 19, 2026
1Introduction
Welcome to SourcingGPT, Inc. (“Company,” “we,” “us,” or “our”). SourcingGPT operates exclusively as an AI-powered information intermediary and SaaS platform designed to assist users in discovering potential suppliers, estimating shipping logistics, generating RFQs, and exploring related services.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website (https://sourcinggpt.ai), use our platform, or otherwise interact with our services (collectively, the “Services”).
We are committed to protecting your privacy and handling your data transparently in accordance with global data protection frameworks, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), the Brazilian General Data Protection Law (LGPD), and other applicable privacy laws.
By accessing or using our Services, you acknowledge that you have read, understood, and agree to our data practices as described in this Privacy Policy. This Privacy Policy is incorporated by reference into our Master Subscription and Platform Use Agreement (Terms and Conditions).
2Information We Collect
2.1Information You Provide to Us
We collect information that you directly provide to us, which includes:
- Account and Profile Information: When you register for an account or subscribe to a Subscription Plan (Basic, Intermediate, or Enterprise), we collect your name, email address, phone number, job title, company name, and account credentials.
- Customer Data: As defined in our Terms and Conditions, this includes all electronic data, text, messages, or other materials submitted by you to the Services, such as business information, product requirements, supplier preferences, and RFQ content.
- Payment Information: If you purchase a subscription, we or our third-party payment processors collect payment details, such as credit card information and billing addresses.
- Communications: When you contact us for customer support, provide feedback, or communicate with suppliers via our platform, we collect the contents of those communications.
2.2Information We Collect Automatically
When you access or use our Services, we automatically collect certain information about your device and usage patterns:
- Usage Data: We collect information about your interactions with the platform, such as the pages you visit, the features you use, AI Outputs generated, search queries, and the time and date of your visits.
- Device and Technical Information: We collect data about the device and network you use to access the Services, including your IP address, browser type, operating system, device identifiers, and referring URLs.
- Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing activities and to personalize your experience. You can manage your cookie preferences through your browser settings.
2.3Information from Third-Party Sources
We may receive information about you from third-party sources, including:
- Third-Party Data Providers: We incorporate Third-Party Data from supplier databases, product catalogs, and logistics providers to enhance our AI Outputs and platform functionality.
- Business Partners and Integrations: If you integrate our platform with third-party software, we may receive data from those services in accordance with their privacy policies.
3How We Use Your Information
We use the information we collect for various business and commercial purposes, including:
- Providing and Maintaining the Services: To create and manage your account, process payments, and deliver the AI-powered sourcing tools, RFQ generation, and supplier analysis features you request.
- Improving and Developing the Platform: To analyze usage trends, train and optimize our proprietary AI algorithms, and develop new features and related services (e.g., logistics support, trade finance).
- Generating AI Outputs: To generate product and supplier recommendations, shipping estimates, and cost projections based on a combination of Customer Data, Third-Party Data, and our proprietary data.
- Communication: To send you technical notices, security alerts, administrative messages, and customer support responses. We may also send promotional communications, subject to your opt-out preferences.
- Creating Aggregate Data: As outlined in our Terms and Conditions, we may de-identify and aggregate Customer Data to create Aggregate Data, which we use for industry benchmarking, analytics, and any other lawful business purpose.
- Security and Compliance: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities, and to enforce our Master Subscription and Platform Use Agreement.
5Global Data Protection Rights
We recognize and respect the privacy rights of our users globally. Depending on your jurisdiction, you may have specific rights regarding your personal data.
5.1European Union and United Kingdom (GDPR / UK GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom (UK), you have the following rights:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data under certain conditions.
- Right to Restrict Processing: You can ask us to suspend the processing of your personal data.
- Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format.
- Right to Object: You can object to our processing of your data, particularly for direct marketing purposes.
- Right to Withdraw Consent: If we process your data based on consent, you can withdraw it at any time.
Legal Basis for Processing: We process your personal data based on the necessity to perform our contract with you (Terms and Conditions), our legitimate business interests (e.g., improving our platform), compliance with legal obligations, and your consent.
To exercise your EU consumer rights or data subject rights, please contact us at legal@sourcinggpt.ai.
5.2California Residents (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you specific rights:
- Right to Know: You can request details about the categories and specific pieces of personal information we have collected about you over the past 12 months.
- Right to Delete: You can request the deletion of your personal information, subject to certain exceptions.
- Right to Correct: You can request the correction of inaccurate personal information.
- Right to Opt-Out of Sale or Sharing: SourcingGPT does not sell your personal information. However, if we share data for cross-context behavioral advertising, you have the right to opt out.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
5.3Other Global Frameworks
We also strive to comply with other international privacy frameworks, including the Brazilian General Data Protection Law (LGPD), Canada’s PIPEDA, and South Africa’s POPIA. Users in these jurisdictions may exercise their respective statutory rights regarding access, correction, deletion, and objection by contacting us.
6International Data Transfers
SourcingGPT is headquartered in the United States, with an additional office in Hong Kong. The information we collect may be transferred to, stored, and processed in the United States, Hong Kong, or any other country where we, our affiliates, or our service providers maintain facilities.
If you access our Services from outside the United States, please be aware that your information may be transferred to jurisdictions with data protection laws that differ from those of your home country. When we transfer personal data from the EEA, UK, or Switzerland to other countries, we rely on legally approved transfer mechanisms, such as Standard Contractual Clauses (SCCs) or adequacy decisions, to ensure your data remains protected.
7Data Security
We implement robust technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, loss, misuse, alteration, or destruction. These measures include encryption, secure server hosting, and access controls.
However, please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your login credentials.
8Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (such as for tax, accounting, or legal dispute resolution purposes).
When your data is no longer needed, we will securely delete, anonymize, or aggregate it. Aggregate Data, which cannot identify you, is retained indefinitely and used to improve our AI models and platform services.
9AI and Automated Decision-Making
Our platform utilizes proprietary algorithms to generate AI Outputs (e.g., supplier recommendations, shipping estimates). While these outputs assist in your sourcing workflow, they are advisory in nature. As stated in our Terms and Conditions, you bear sole responsibility for independently verifying all AI Outputs before making business decisions. We do not use your personal data for automated decision-making that produces legal or similarly significant effects concerning you without human oversight.
10Third-Party Links
Our Services may contain links to third-party websites, supplier pages, or partner services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party websites you visit, as we are not responsible for their data practices or content.
11Children's Privacy
Our platform is intended for B2B use by professionals and businesses. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected personal data from a minor, we will take steps to delete such information promptly.
12Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on our Site and updating the “Last Updated” date. Your continued use of the Services after the effective date of the revised policy constitutes your acceptance of the changes.
13Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our privacy team at:
SourcingGPT, Inc. 4730 S. Fort Apache Rd., Suite 300 Las Vegas, NV 89147
General Legal Inquiries: legal@sourcinggpt.ai
Billing Support: billing@sourcinggpt.ai
Website: https://sourcinggpt.ai
Questions about this document?
We answer legal and data-protection questions directly. There is no ticket queue.
SourcingGPT, Inc. · 4730 S. Fort Apache Rd., Suite 300, Las Vegas, NV 89147, United States