Privacy Policy

Last updated: June 27, 2026

BuyerSuite (“we”, “our”, or “us”) operates buyersuite.com. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information. By using BuyerSuite, you agree to this policy.

1. Information we collect

Account information — When you sign up, we collect your email address, password (hashed — never stored in plain text), and your workspace/agency name.

Client data you enter — When you create client portals, you provide your clients’ names, email addresses, and company names. You control this data entirely.

Usage data — We collect the pages you visit on our public site (path and referrer URL) to understand traffic patterns. This data is stored in our own database and not shared with advertising networks.

Payment information — Billing is handled by Stripe. We store only your Stripe customer ID; we never see or store full card numbers.

Files — Files uploaded to portals are stored securely in Supabase Storage. You and your clients can access them via signed URLs.

Communications — When you or your clients interact with portals (comments, approvals, uploads), the content is stored in our database to power the portal experience.

2. How we use your information

  • To provide and operate the BuyerSuite service
  • To send transactional emails (invoice notifications, portal updates, file approvals)
  • To send onboarding emails on Day 3 and Day 7 after signup to help you get started
  • To process subscription payments and manage billing
  • To analyze site traffic and improve the product
  • To contact you about your account or the service when necessary

We do not sell your personal information. We do not use your data for advertising.

3. Third-party services

We use the following third-party services to operate BuyerSuite:

  • Supabase — Database, authentication, and file storage. Data is stored on servers in the United States.
  • Stripe — Payment processing for subscriptions and invoice payments. Subject to Stripe’s Privacy Policy.
  • Resend — Transactional email delivery. Email content passes through Resend’s servers.
  • Google Analytics (GA4) — Aggregate website traffic analysis. GA4 uses cookies. You can opt out via Google’s opt-out tool.
  • Railway — Application hosting. Application code and logs run on Railway’s infrastructure.
  • Anthropic Claude — Used to generate blog content and AI-assisted update drafts. No personal data is sent to Anthropic.

4. Cookies

BuyerSuite uses cookies in two ways:

  • Authentication cookies — Set by Supabase to keep you logged in. These are strictly necessary and are set as soon as you sign in.
  • Analytics cookies (Google Analytics) — Only set if you explicitly accept analytics on your first visit. If you decline, Google Analytics is never loaded and no tracking cookies are placed. You can change your preference at any time by clearing your browser’s local storage for this site.

Our first-party analytics (pageview counts and referrers) are cookieless and run regardless of your analytics preference. No personal information is collected in these first-party logs.

5. Data retention

We retain your account data for as long as your account is active. If you delete your account, your workspace, client data, portals, files, and personal information are permanently deleted from our systems within 30 days. Stripe may retain billing records for their own compliance purposes.

6. Your rights

Depending on where you are located, you may have the following rights:

  • Access — Request a copy of the personal data we hold about you.
  • Correction — Ask us to correct inaccurate data.
  • Deletion — Request deletion of your account and associated data. You can do this directly in Settings → Workspace → Delete Account, or by emailing us.
  • Portability — Request your data in a machine-readable format.
  • Objection — Object to processing for direct marketing purposes.

To exercise any of these rights, email us at privacy@buyersuite.com. We will respond within 30 days.

If you are in the European Union, you also have the right to lodge a complaint with your local data protection authority.

7. Children’s privacy

BuyerSuite is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Security

We use industry-standard measures to protect your data: HTTPS encryption in transit, row-level security policies on all database tables, hashed passwords via Supabase Auth, and private storage buckets with signed URLs for file access. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised “Last updated” date. For material changes, we will notify you by email. Continued use of BuyerSuite after changes constitutes acceptance of the updated policy.

10. Contact

Questions or requests regarding this Privacy Policy should be directed to: privacy@buyersuite.com