Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Demandly ("we," "our," or "us") operates the Demandly platform, including our website at demandly.io and all related services (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our Service.
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
1. Information We Collect
Information You Provide
We collect information you voluntarily provide when using the Service, including:
- Account Information: Name, email address, company name, and password when you create an account.
- Business Data: Products, inventory levels, purchase orders, sales data, supplier information, and other operational data you import or enter into the platform.
- Payment Information: Billing address and payment method details processed securely through our payment provider, Stripe.
- Communications: Messages you send through our contact forms, chat features, or support channels.
- Operator Profiles: If you join as an Operator, professional background, expertise areas, and availability information.
Information Collected Automatically
When you access the Service, we automatically collect certain information:
- Usage Data: Pages visited, features used, actions taken, and time spent on the platform.
- Device Information: Browser type, operating system, device type, and screen resolution.
- Log Data: IP address, access times, referring URLs, and error logs.
- Cookies: Small data files stored on your device to improve your experience (see Section 6).
Information from Third Parties
We may receive information from third-party integrations you connect, such as:
- Shopify, Amazon, and other platforms: Product catalogs, order history, inventory levels, and customer data necessary to provide our services.
- Authentication providers: Basic profile information when you sign in using third-party authentication.
2. How We Use Your Information
We use the information we collect to:
- Provide the Service: Operate, maintain, and deliver the features and functionality of Demandly, including demand forecasting, inventory management, and analytics.
- Improve the Service: Analyze usage patterns to improve features, fix bugs, and develop new functionality.
- AI and Forecasting: Process your business data through our AI models to generate demand forecasts, recommendations, and insights specific to your organization.
- Communications: Send you service-related notifications, respond to inquiries, and provide customer support.
- Operator Marketplace: Facilitate connections between businesses and operators, including sharing relevant profile information with potential clients.
- Security: Detect, prevent, and address fraud, abuse, and security issues.
- Legal Compliance: Comply with applicable laws, regulations, and legal processes.
We do not sell your personal information. We do not use your business data to train AI models for other customers. Your data remains isolated within your organization.
3. Data Sharing & Disclosure
We may share your information only in the following circumstances:
- Service Providers: With trusted third-party providers who help us operate the Service (hosting, analytics, payment processing), bound by confidentiality agreements.
- Operator Engagements: When you hire an Operator, we share necessary business context to enable them to perform their role. Operators are bound by strict confidentiality agreements.
- With Your Consent: When you explicitly authorize sharing with a specific third party.
- Legal Requirements: When required by law, regulation, subpoena, or court order.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users.
- Safety: To protect the rights, safety, and property of Demandly, our users, or the public.
4. Data Storage & Security
We implement industry-standard security measures to protect your information, including:
- Encryption in transit (TLS 1.3) and at rest (AES-256).
- Multi-tenant data isolation ensuring your organization's data is completely separate from other organizations.
- Regular security audits and penetration testing.
- Role-based access controls within your organization.
- Automated backups with geographic redundancy.
- SOC 2 Type II compliance (in progress).
Your data is stored on secure servers hosted by Google Cloud Platform in the United States and the European Union, depending on your region preference. While we strive to use commercially acceptable means to protect your data, no method of electronic storage is 100% secure.
5. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete personal information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Data Portability: Request your data in a structured, machine-readable format.
- Opt-Out: Unsubscribe from marketing communications at any time.
- Restriction: Request that we restrict processing of your personal information in certain circumstances.
- Objection: Object to processing of your personal information for certain purposes.
To exercise any of these rights, please contact us at privacy@demandly.io. We will respond to your request within 30 days.
GDPR (European Economic Area)
If you are located in the EEA, we process your personal data under the following legal bases: performance of a contract, legitimate interests, consent, and compliance with legal obligations. You have the right to lodge a complaint with your local data protection authority.
CCPA (California)
California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.
6. Cookies & Tracking
We use cookies and similar technologies for the following purposes:
- Essential Cookies: Required for the Service to function properly, including session management and security features.
- Preference Cookies: Remember your settings, such as theme preferences and display options.
- Analytics Cookies: Help us understand how you use the Service so we can improve it. We use privacy-respecting analytics tools.
You can control cookies through your browser settings. Note that disabling essential cookies may affect the functionality of the Service. We do not use advertising or tracking cookies from third-party ad networks.
7. Third-Party Services
The Service integrates with and uses the following categories of third-party services:
- Cloud Infrastructure: Google Cloud Platform for hosting, storage, and computing.
- Payment Processing: Stripe for secure payment handling. We never store your full credit card information.
- Analytics: Privacy-respecting analytics to understand aggregate usage patterns.
- AI Processing: Anthropic (Claude) for AI-powered features. Your prompts are not used to train their models.
- Ecommerce Integrations: Shopify, Amazon, and other platforms you choose to connect. We only access data you explicitly authorize.
Each third-party service has its own privacy policy. We encourage you to review the privacy policies of any third-party services you connect to Demandly.
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you the Service. Specifically:
- Account Data: Retained while your account is active and for 90 days after deletion request.
- Business Data: Retained while your account is active. Upon account deletion, business data is permanently removed within 30 days.
- Analytics Data: Aggregated and anonymized usage data may be retained indefinitely for product improvement.
- Legal Compliance: Certain data may be retained longer if required by applicable law or regulation.
- Backups: Data in encrypted backups is purged according to our backup rotation schedule (maximum 90 days).
9. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@demandly.io.
10. International Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards, including:
- Standard Contractual Clauses approved by the European Commission.
- Ensuring recipients are certified under applicable frameworks.
- Obtaining your explicit consent where required.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice, such as an email notification or a prominent notice within the Service.
Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of those changes. We encourage you to review this Privacy Policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy, your personal information, or our data practices, please contact us:
- Email: privacy@demandly.io
- General Inquiries: hello@demandly.io
- Mail: Demandly, Attn: Privacy Team