Privacy Policy

Your privacy matters to us. This Privacy Policy explains how SupliiChain Inc. ("Prospector," "we," "us") collects, uses, shares, and protects your information.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password, phone number
• Payment Information: PayPal email, bank account details for withdrawals
• Profile Information: Shopping preferences, favorite stores, interests
• Communications: Support inquiries, feedback, survey responses

1.2 Information We Collect Automatically

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, clicks, time spent
• Shopping Data: Stores visited through our links, purchase amounts (not specific items), cashback earned
• Location Data: General location based on IP address (not precise GPS)

1.3 Browser Extension Data

Our browser extension collects:

• URLs of shopping websites to detect cashback opportunities
• Shopping cart totals on supported merchant sites
• Coupon codes found on checkout pages

We DO NOT collect: Passwords, credit card numbers, personal messages, browsing history on non-shopping sites, or any data from banking/financial websites.

2. How We Use Your Information

Purpose	Data Used	Legal Basis
Provide cashback services	Account info, shopping data	Contract performance
Process withdrawals	Payment info	Contract performance
Personalize recommendations	Shopping preferences, usage data	Legitimate interest
Improve our services	Usage data, feedback	Legitimate interest
Send notifications	Email, preferences	Consent / Legitimate interest
Prevent fraud	Device info, usage patterns	Legitimate interest
Marketing communications	Email, preferences	Consent

3. How We Share Your Information

3.1 With Merchants

We share order identifiers and referral information with merchants to track your cashback. We do NOT share your personal information with merchants.

3.2 With Service Providers

We use trusted service providers for:

• Payment processing (Stripe, PayPal)
• Analytics (Google Analytics, Mixpanel)
• Email services (SendGrid)
• Cloud hosting (AWS)
• Customer support (Zendesk)

3.3 For Legal Reasons

We may disclose information to comply with laws, respond to legal process, protect our rights, or prevent fraud.

3.4 Business Transfers

In the event of a merger, acquisition, or sale, your information may be transferred to the acquiring entity.

3.5 We Never Sell Your Data

We do NOT sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Cookies & Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for site functionality and cashback tracking
• Analytics Cookies: Help us understand how you use our services
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Deliver relevant advertisements (with your consent)

You can manage cookie preferences in your browser settings or through our cookie consent banner.

5. Your Rights & Choices

5.1 All Users

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Opt-out: Unsubscribe from marketing emails
• Extension Control: Disable or uninstall the browser extension

5.2 California Residents (CCPA)

California residents have additional rights:

• Right to know what personal information we collect
• Right to delete personal information
• Right to opt-out of sale (we don't sell data)
• Right to non-discrimination for exercising rights

5.3 European Residents (GDPR)

EU/EEA residents have additional rights:

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

6. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and penetration testing
• Access controls and employee training
• Secure data centers with SOC 2 compliance

However, no system is 100% secure. Please protect your account credentials.

7. Data Retention

We retain your data:

• Account data: Until you delete your account + 30 days
• Transaction records: 7 years (legal/tax requirements)
• Marketing preferences: Until you opt-out
• Analytics data: 26 months (aggregated/anonymized)

8. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us.

9. International Transfers

Your data may be transferred to and processed in countries outside your residence, including the United States. We use Standard Contractual Clauses and other safeguards for international transfers.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification. Continued use after changes constitutes acceptance.

11. Contact Us

For privacy inquiries or to exercise your rights:

SupliiChain Inc.
Privacy Team
Email: privacy@prospect.io
Address: 123 Innovation Way, Wilmington, DE 19801

For GDPR inquiries, our Data Protection Officer can be reached at dpo@prospect.io