Privacy Policy
What we collect, why we collect it, who we share it with, and how to exercise your rights.
1. Overview
This Privacy Policy describes how PartsPort, Inc. collects, uses, and shares information about you when you visit our website, create an account, place an order, or otherwise interact with our Service. It applies to buyers, suppliers, manufacturers, and visitors.
2. Information we collect
Account information you provide directly, such as your name, work email, company name, role, password (stored hashed), and optional two-factor secret.
Order and transaction information generated when you use the Service, including products viewed and ordered, shipping addresses, invoices, freight tracking, returns, RFQs, and messages between buyers and suppliers.
Payment information processed by our payment partner (currently Stripe). PartsPort does not store full card numbers or bank account numbers; we retain last4, brand, and a token reference.
Technical information such as IP address, browser, device, referring URL, and high-level usage events captured for security monitoring and error tracking (currently via Sentry, when enabled).
3. How we use information
To operate the Service: authenticate sessions, surface relevant listings, fulfill orders, route payouts, generate invoices, and coordinate freight.
To prevent fraud and abuse: rate-limit endpoints, monitor for anomalies, verify supplier identity, and respond to security incidents.
To communicate with you: send order, shipping, and RFQ notifications, password resets, security alerts, account changes, and infrequent product announcements.
To improve the Service: aggregate usage statistics and search queries to refine the catalog and the AI search engine.
5. Data retention
Account information is kept while your account is active. After account closure, identifying details are anonymized and the account is hard-deleted after a 30-day grace period during which you can recover it.
Transaction records (orders, invoices, payouts) are retained for the period required by tax, accounting, and fraud-prevention obligations, typically seven years.
6. Your rights
Depending on where you live, you may have the right to access, correct, port, or delete personal information we hold about you, and to object to certain processing. To exercise these rights, email privacy@partsport.io from the address on your account. We may need to verify your identity before acting on a request.
California residents have specific rights under the CCPA / CPRA, including the right to know, the right to delete, the right to correct, and the right not to be retaliated against for exercising these rights.
7. Security
We protect your information with industry-standard measures: TLS in transit, bcrypt-hashed passwords, JWT session tokens, rate limiting on authentication endpoints, optional TOTP-based two-factor authentication, and access controls on internal admin tooling. No method of transmission or storage is perfectly secure; report any suspected vulnerability to security@partsport.io.
9. Children
PartsPort is a B2B service intended for industrial buyers and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have, email privacy@partsport.io and we will delete it.
10. International transfers
PartsPort is operated from the United States. If you access the Service from outside the United States, your information may be processed in the U.S. and other jurisdictions whose data protection laws may differ from yours. By using the Service, you consent to that processing.
11. Changes to this Policy
We may update this Policy from time to time. Material changes will be announced by email to the address on file. The version posted at /legal/privacy is the operative version.
12. Contact
Questions about this Policy or requests to exercise your privacy rights can be sent to privacy@partsport.io.