1. Scope
This Privacy Policy explains how Sourcing Repository processes personal and organizational data when you use our public directory, authenticated buyer and manufacturer workspaces, and related services.
The Platform is a professional B2B service. We process data primarily in a business context (organization contacts, memberships, and operational records) rather than as a consumer social network.
Public manufacturer profiles and RFQ previews are privacy-scrubbed projections. Private contacts, drawings, NDA-bound files, and commercial terms are never exposed on indexable public pages.
2. Data We Process
Depending on your role, we may process:
- Account identity (name, email, authentication factors) and organization membership.
- Public profile content you publish (capabilities, certifications, facility regions).
- Requirement, quote, and messaging metadata required to operate the marketplace.
- Technical logs (request IDs, security events) for reliability and abuse prevention.
- Consent records for cookies, marketing preferences, and NDA acknowledgements where applicable.
3. Your Rights
Where GDPR or similar laws apply, you may request access, correction, deletion, or restriction of personal data, subject to legal retention and security obligations. Organization admins control membership and organizational content within tenant boundaries.
Contact privacy@sourcingrepository.example for privacy requests. We may verify your identity and organization role before acting.
4. Security & Retention
We apply encryption in transit, role-based access, row-level tenancy controls, and audit logging for sensitive actions. CAD and RFQ files exchanged under NDA are access-controlled and are not used for public SEO content.
Retention periods vary by record type (accounts, audit logs, billing, consent). When a public RFQ closes or expires, its public preview becomes non-indexable per platform policy.