Your data deserves restraint.

This Privacy Policy explains how Webframe, Inc., doing business as Import Supply (“Import Supply,” “we,” “us,” or “our”), handles personal information when you visit import.supply, create an account, connect a store, import product information, or otherwise use our services.

For account, billing and website information, Import Supply generally acts as the organization responsible for deciding how information is used. For product, supplier and store data you submit for processing, you remain responsible for that data and Import Supply processes it to provide the service on your instructions.

Information you provide

• Account details such as name, email address and authentication information.
• Billing, plan and transaction records. Complete payment-card details are handled by our payment provider and are not stored by Import Supply.
• Supplier URLs, product content, images, descriptions, SKUs, pricing, SEO fields and edits.
• Store connection details and credentials you choose to provide for publishing.
• Support messages, feedback and communications.

Information collected through use

• Device, browser, IP address, request, diagnostic and security information.
• Import, enrichment, review, export and publishing activity.
• Cookie and preference information described in our Cookie Policy.

• Provide, secure and operate accounts, workspaces, imports and store connections.
• Extract, translate, organize, enrich and publish product information at your direction.
• Process subscriptions, prevent fraud and maintain transaction records.
• Maintain durable job checkpoints, troubleshoot failures and support retries.
• Communicate service notices, respond to support requests and improve usability.
• Comply with law, enforce our Terms and protect users, stores and the platform.

Your supplier content, product drafts, store connection and catalog data are treated as private workspace information. We do not sell this data or use it to stock, operate or market an unrelated store.

Store credentials are used only to test the connection and perform actions you request. Where server persistence is enabled, credentials are encrypted at rest and are not returned to the browser after storage. You should still use narrowly scoped, revocable credentials and remove access when it is no longer needed.

You are responsible for ensuring that you have lawful rights to collect, transform and publish supplier content, product images, trademarks and other materials submitted to the service.

We may share information with service providers that host or support the service, including providers for cloud infrastructure, database storage, account authentication, payment processing, error monitoring and email delivery. They may process information only to provide their services to us, subject to their agreements and applicable law.

We may also disclose information when required by law; to investigate fraud, security or abuse; to protect legal rights; or as part of a corporate transaction subject to appropriate safeguards. We do not sell personal information for money or share it for cross-context behavioral advertising.

We retain account and workspace information while your account is active and for a reasonable period afterward to provide recovery, meet legal obligations, resolve disputes and prevent abuse. Job logs and publishing records may be kept for operational history. Payment and tax records may be retained for legally required periods.

You may request account deletion. Some records may remain in backups or be retained where required by law, necessary for security, or needed to establish or defend legal claims. We will delete or anonymize information when it is no longer reasonably required.

We use reasonable administrative, technical and organizational safeguards designed for the nature of the information we handle. These include access controls, encrypted transport, credential encryption where server storage is enabled, service logging and restricted production access.

No service can guarantee absolute security. Protect your account, use unique credentials, keep store permissions limited, and contact us promptly if you suspect unauthorized access.

Depending on where you live, you may have rights to access, correct, delete, receive a copy of, or restrict certain uses of personal information. You may also withdraw consent where processing relies on consent and object to certain processing. We will not discriminate against you for exercising an applicable privacy right.

To make a request, email privacy@import.supply. We may need to verify your identity and authority. You may also contact your local privacy regulator.

Import Supply and its service providers may process information in Canada, the United States and other countries. Privacy laws may differ from those in your location. Where required, we use appropriate contractual or legal measures for international transfers.

The service is intended for businesses and people who are at least 18 years old or the age of legal majority where they live. We do not knowingly collect personal information from children.

We may update this policy as the service changes. Material changes will be communicated through the service or other appropriate means, and the effective date will be updated.

Questions or requests may be sent to privacy@import.supply. Import Supply is operated by Webframe, Inc.