Legal & Compliance

Privacy Policy

Learn how we collect, use, store, and protect your information when you use the Supa platform and services.

Effective Date: May 17, 2026
Summary

Supa is a multi-tenant business platform that provides tools for businesses to operate online. We collect only the data necessary to deliver these services, do not sell personal data, and apply tenant isolation to protect business information.

1. Who We Are

Supa is a multi-tenant business platform that provides infrastructure and tools for businesses to operate and manage their operations. This includes capabilities such as storefront management, invoicing, messaging, customer engagement, and analytics.

Each business using Supa operates within its own isolated workspace (tenant).

Supa products and features may be accessed through different subdomains or interfaces, but they all remain part of the same Supa platform.

2. Information We Collect

We collect information to provide and improve our Services.

2.1 Information you provide directly
  • Business account information (such as business name and account details)
  • Contact information (such as email and phone number)
  • Business content (such as products, catalogs, pricing, and media)
  • Customer communications and messages
  • Invoices, orders, and transaction records
  • Support requests and feedback
2.2 Information collected automatically
  • Device information (browser type, operating system)
  • IP address
  • Log data (access times, pages viewed, actions taken)
  • Usage analytics and interaction data within the platform
2.3 Information from third-party integrations
  • Messaging platform data (e.g., WhatsApp Business if connected)
  • Social or identity providers (e.g., Meta platforms if connected)
  • Payment processors and billing providers

3. How We Use Information

We use collected information to:

  • Provide and operate the Supa platform
  • Enable business tools and platform features
  • Process transactions, invoices, and business operations
  • Facilitate messaging and customer communication
  • Improve performance, reliability, and security
  • Provide customer support
  • Comply with legal and regulatory obligations

4. Data Storage and Security

We take reasonable technical and organizational measures to protect your data.

Security Practices

Data is stored securely using industry-standard security practices.

Tenant Isolation

Access is restricted based on tenant isolation boundaries.

Each business’s data is logically separated from others. However, no system is completely secure, and we cannot guarantee absolute security.

5. Data Sharing

Privacy Pledge: We do not sell personal data.

We may share data with:

  • Service providers (such as hosting, analytics, and infrastructure providers).
  • Payment processors (for billing and transactions).
  • Messaging and integration partners (when you enable such services).
  • Legal authorities if required by law.

6. Data Retention

We retain data as long as necessary to provide the Services or comply with legal obligations.

You may request deletion of your data at any time (see Section 9).

Some data may be retained where required for security, legal, or compliance purposes.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Maintain user sessions safely.
  • Remember preferences.
  • Analyze platform usage to optimize speed and responsiveness.

This helps us improve performance and user experience. You can control cookies through your browser settings.

8. Third-Party Services

Supa integrates with third-party services such as payment processors, cloud infrastructure providers, and messaging platforms.

These services operate under their own privacy policies.

We are not responsible for the privacy practices of third-party providers.

9. Your Rights and Data Deletion

You have the following statutory privacy rights:

Access your Data
Correct or Update
Request Deletion

Data Deletion Process

To request deletion of your data, you can:

  • Contact us at our support email.
  • Or use any in-app account deletion feature if available.

We will delete or anonymize your personal data within a reasonable timeframe, except where retention is required by law.

Where applicable, we support platform-specific data deletion requirements for third-party integrations.

10. Children’s Privacy

Supa is not intended for individuals under the minimum legal age in their jurisdiction.

We do not knowingly collect data from children.

11. International Data Transfers

Your data may be processed and stored in countries outside your residence.

By using Supa, you consent to such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time.

We will notify users of significant changes by updating the Effective Date and, where appropriate, providing additional notice.

13. Contact Us

If you have questions about this Privacy Policy, contact us at:

SUPPORT EMAILsupport@usesupa.shop
Email Support