SupplierRadar
Draft

This is a plain-English draft pending legal review. It is not final and may change before launch.

Legal

Privacy Policy

Draft of October 22, 2026

SupplierRadar stores your email address, the suppliers you watch and your notes, uses Google Firebase, PayPal, Resend and Vercel to run the service, does not sell your data and shows no advertising; reading supplier pages and the free bulk check need no account.

01The short version

Reading any supplier page, the guides and the free bulk check needs no account and stores nothing about you. If you create an account we store your email address, the suppliers you watch and your notes. We do not sell your data, we do not show advertising, and the only companies that handle it for us are the ones listed below.

The supplier records themselves are public FDA data about businesses. They are not data about you.

02What we collect

Information SupplierRadar stores, why, and who processes it
InformationWhy we keep itProcessed by
Email addressTo sign you in and to send the emails you asked forGoogle Firebase (sign-in, database), Resend (email)
Plan, trial and billing statusTo give you the right plan; we store the PayPal subscription reference and status, not card detailsPayPal, Google Firebase
Suppliers you watch, your notes and import listsTo run the watchlist and send alertsGoogle Firebase
Evaluation PDFs you generateTo rebuild the dated PDF for your FSVP file on requestGoogle Firebase
Emails we send youA copy of each email is kept as an audit logGoogle Firebase, Resend
Correction requests: email and messageTo check the record and reply to youGoogle Firebase
Bulk check listsUsed only to return the result; the list is not storedNot stored
A hashed form of your IP addressKept briefly to limit how often the correction form can be submittedGoogle Firebase
Technical logs: IP address, browser, pages requestedSecurity, abuse prevention and fixing errorsOur hosting provider, Vercel

We do not collect your name, phone number or payment card number. PayPal handles payment and tells us whether a subscription is active.

03How we use it

  • To sign you in, with a one-time email link.
  • To watch the suppliers you chose and email you when their FDA record changes, as a weekly summary or the day a change is found, depending on your plan and settings.
  • To send the few service emails that go with an account: a welcome, a short guide, a plan reminder when you reach your supplier limit, and reminders for the three-year FSVP reevaluation of suppliers you watch.
  • To bill paid plans through PayPal and to prevent abuse.
  • To answer correction requests and questions.

04Who we share it with

Only the service providers that run SupplierRadar for us, under their own privacy terms: Google Firebase (authentication and database), PayPal (billing), Resend (sending email) and Vercel (hosting). We may also disclose information when the law requires it.

We do not sell personal information, we do not share it for advertising, and there are no advertising or analytics trackers on the site at the time of this draft.

05Cookies and local storage

Only what signing in needs:

  • __session: your sign-in session. It is HTTP-only, lasts up to 14 days and is removed when you sign out.
  • sr_signed_in: a plain flag that lets pages show "signed in" without asking the server.
  • Your email in browser storage: kept in your browser only while you complete the sign-in link, then removed.

We do not use advertising cookies.

06How long we keep it

We keep account data while your account exists. Technical logs are kept by our hosting provider for a limited time. Correction requests are kept so we can show how a record was reviewed. Specific retention periods will be stated here before launch.

Public FDA records, and our history of when a firm was added to or removed from an import alert, are part of the service and are not tied to you.

07Your choices

  • Change how often we email you, or turn emails off, in your settings.
  • Stop watching a supplier, or cancel a paid plan, from your dashboard and the billing page.
  • Pro and Team plans can export the watchlist as CSV.
  • Ask us to see, correct or delete the personal information we hold about you, or to close your account. Self-service account deletion is not available yet; for now, write to us as described in the last section.

Depending on where you live, such as California, you may have additional legal rights over your personal information. We will honor them.

08Businesses named in FDA records

Supplier pages repeat what FDA published about a business: its name, address, FEI and records. If you think a record is wrong, or it names you personally, request a correction. We check it against FDA's source and reply, usually within 48 hours.

09Security

Data is stored with Google Firebase and sent over encrypted connections. Sign-in uses one-time email links, sessions use a secure HTTP-only cookie, and billing details stay with PayPal. No system is perfectly secure, so we limit what we store.

10Children

SupplierRadar is for businesses. It is not meant for people under 16 and we do not knowingly collect their information.

11Changes and contact

If we change this policy in a way that matters, we will email account holders and update the date at the top of this page. For questions or requests about your information, reply to any email we send you, or use the corrections form and say it is a privacy request. The legal name and postal address of the company behind SupplierRadar will be added here before launch.

Open items for legal review

  • Controller identity, postal address and a monitored privacy contact
  • Retention periods for accounts, email logs, correction requests and server logs
  • A self-service way to delete an account and its data, and the response time for requests
  • State privacy law notices (California and others) and whether any sale or sharing language is needed
  • Cookie and analytics wording if analytics or advertising are ever added
  • Data processing terms with Google, PayPal, Resend and Vercel, and where data is stored

Built for the person who signs the FSVP file

Look before you order.

Check up to five suppliers against every FDA record in one paste, no account needed. Watch the ones you buy from and get the source the day a record changes.

SupplierRadar is not affiliated with the U.S. Food and Drug Administration. Data comes from public FDA records and may contain errors. This is not legal advice; importers remain responsible for their supplier evaluations.