Privacy Policy

Last updated 15/04/2026

Welcome to supy.io (the "Website", "Site", "we", "us" or "our"), a website and service operated by Supy Inc., a company incorporated in the British Virgin Islands, together with its affiliated entities (collectively, "Supy").

For the purposes of applicable data protection laws, Supy is the primary data controller in relation to Personal Information collected through the Website and the Platform, and may process such Personal Information directly or through one of its affiliated entities acting as processors or sub-processors on its behalf.

This Privacy Policy explains in detail:

the types of information we may collect from you or about you through your access to and use of the Website and the Supy platform (the "Platform" or "Services");
the legal basis on which we process such information;
how such information may be used, stored, transferred, and shared with third parties;
the safeguards we implement to protect your information; and
your rights in relation to your Personal Information and how you may exercise them.

This Privacy Policy applies to:

visitors to the Website;
prospective customers requesting demonstrations or information;
clients who subscribe to the Services; and
authorized users accessing the Platform on behalf of a client.

This Privacy Policy is designed to comply with applicable data protection and privacy laws, including, where applicable:

the UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data (PDPL);
the EU General Data Protection Regulation (EU) 2016/679 (GDPR); and
other applicable data protection laws in jurisdictions where our users are located.

Please read this Privacy Policy carefully before accessing or using the Website or Services.

By accessing or using the Website and/or Services, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable law, we will obtain your consent to specific processing activities (such as the use of non-essential cookies or marketing communications). Otherwise, your continued use of the Website or Services constitutes your acknowledgment of the terms of this Privacy Policy.

This Privacy Policy should be read together with our Terms and Conditions, which govern your use of the Platform.

1. Information we collect

We may collect and process different types of information depending on how you interact with the Website and the Services. This includes information collected automatically, information you provide directly, and information obtained through third parties.

For the purposes of this Privacy Policy, "Personal Information" (or "Personal Data") means any information that relates to an identified or identifiable individual.

1.1 Information Collected Automatically (Usage Information)

Whenever you access, browse, or interact with the Website or Services, we and our authorized third-party service providers may automatically collect certain technical and usage-related information ("Usage Information").

Usage Information may include, without limitation:

browser type and version;
operating system and device type;
device identifiers and technical configuration;
internet protocol (IP) address;
approximate geographic location derived from IP address;
referring URLs and exit pages;
pages viewed, features accessed, and interactions within the Website or Platform;
date, time, and duration of visits; and
other information typically transmitted in HTTP requests.

This information is collected to understand how the Website and Services are used, to improve performance and functionality, to enhance user experience, and to maintain the security and integrity of our systems.

While Usage Information is generally aggregated and does not directly identify individuals, it may be combined with other information (such as account or registration data) in a manner that enables identification. In such cases, it will be treated as Personal Information in accordance with this Privacy Policy.

1.2 Device Identifiers and Technical Data

We may automatically collect information relating to the device you use to access the Website or Services, including unique device identifiers ("Device Identifiers").

A "Device" includes any computer, mobile phone, tablet, or other technology used to access the Website or Services.

Device Identifiers and related technical data may be used for:

authentication and account security;
fraud detection and prevention;
system diagnostics and troubleshooting; and
analytics and performance monitoring.

Our Site uses several different technologies to collect Usage Information, including Device Identifiers. These may include, without limitation:

1.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies (such as scripts, pixels, and web beacons) to collect Usage Information and enhance your experience when using the Website and Services.

Cookies are small text files placed on your device when you visit a website. They are widely used to enable website functionality, improve performance, and provide analytics and marketing insights.

We may use the following types of cookies:

Strictly necessary cookies: required for the operation, security, and basic functionality of the Website and Services;
Performance and analytics cookies: used to analyze how users interact with the Website and improve functionality;
Functional cookies: used to remember preferences and enhance user experience; and
Marketing or advertising cookies: used to deliver relevant content and measure the effectiveness of marketing campaigns (where applicable).

Cookies may collect information such as browser type, time spent on the Website, pages visited, and interactions with content. In some cases, cookies may be associated with Device Identifiers or other Personal Information.

Where required by applicable law, we will obtain your consent before placing non-essential cookies on your device.

You can manage or disable cookies at any time through your browser settings. Please note that disabling certain cookies may impact the functionality and performance of the Website or Services.

1.4 Third-Party Analytics and Tracking Technologies

We may use third-party analytics providers to help us understand how users interact with the Website and Services.

For example, we use Google Analytics to:

analyze traffic and usage patterns;
understand user behavior; and
improve the performance and usability of the Website and Services.

Google Analytics may collect information such as IP address, device information, browsing activity, and interactions with the Website. This information may be transmitted to and stored by Google on servers located outside your jurisdiction.

For more information on how Google processes data, please refer to: https://www.google.com/policies/privacy/partners

We may also use similar analytics or tracking technologies provided by other service providers from time to time.

1.5 Log Files

As is common practice for websites and cloud-based platforms, we automatically collect and store certain information in log files.

Log file data may include:

IP addresses;
browser type;
internet service provider (ISP);
referring and exit pages;
operating system;
date and time stamps; and
clickstream data.

We use this information to:

monitor system performance;
analyze trends and usage patterns;
detect and prevent fraud or misuse;
administer and secure the Website and Services; and
generate aggregated statistical insights about our user base.

Log file data is generally used in aggregated form, but may be associated with Personal Information where necessary for security or operational purposes.

1.6 Pixels and Similar Technologies

We may use pixel tags (also known as web beacons or tracking pixels) in our Website or communications.

A pixel tag is a small graphic embedded in a webpage or email that allows us to:

determine whether a page has been viewed;
measure the effectiveness of communications; and
understand user engagement.

Pixel tags may cause your browser to connect to third-party servers and may collect information such as IP address, device information, and interaction data.

1.7 Links to Third-Party Websites

The Website may contain links to third-party websites, services, or content.

If you click on a link to a third-party site, you will be subject to that third party's privacy policy and practices. We do not control and are not responsible for the privacy practices of such third parties.

We encourage you to review the privacy policies of any third-party websites you visit.

2. Information you provide to us

In addition to information collected automatically, we may collect Personal Information that you voluntarily provide to us when you interact with the Website or use our Services.

This may include the following:

(a) Account and Business Information

When you request a demo, create an account, or subscribe to our Services, we may collect information such as:

your name;
email address;
phone number;
job title;
company name and business details; and
any other information you choose to provide.

If you are acting on behalf of a company or organization, you confirm that you are authorized to provide such information.

(b) Communications

If you contact us (for example, through a contact form, email, or demo request), we may collect your contact details and the content of your message.

We use this information to respond to your inquiries and manage our relationship with you.

(c) Client Data (Platform Use)

When Clients and their authorized users use the Platform, they may input or upload business-related data ("Client Data"), which may include limited Personal Information (such as names and contact details of employees or suppliers).

In this context:

the Client acts as the data controller; and
Supy processes such data on behalf of the Client solely to provide the Services.

(d) Recruitment Information

If you apply for a role with us or submit your CV, we may collect information such as your contact details, professional background, and any information you include in your application.

Providing this information is voluntary. We recommend that you do not include sensitive personal information unless specifically requested.

(e) Optional Information

You may choose to provide additional information (such as feedback or survey responses). Any Personal Information included will be handled in accordance with this Privacy Policy.

In general, you are not required to provide Personal Information to browse the Website. However, certain Services (such as demos, account creation, or support) may require it. If you choose not to provide the necessary information, we may not be able to offer those Services.

3. How we use the Information we collect

We use the information we collect about and from you for a variety of business purposes, including: responding to your questions and requests; providing you with access to certain functions and features of the Site; providing and maintaining your platform account(s); verifying your identity; communicating with you about your account and activities on the Site; communicating changes to our policies; for marketing or solicitation purposes (where applicable); tailoring the content or offers presented to you; improving the Site or Services for internal business purposes; processing applications and transactions; and for other lawful purposes that we may disclose at the time you provide your Personal Information or to which you otherwise consent.

4. Sharing of Information

We may disclose Personal Information as follows:

To our current or future affiliates, parent companies, or subsidiaries.
To vendors, service providers, agents, contractors, or others who perform functions on our behalf (such as maintenance, data analysis, customer relationship management, email marketing, surveys, payment processing, data hosting, or fraud detection).
To Customers, where applicable. For example, we may provide information to customers or partners to inform them about conversion rates or analytics, provided that such information does not identify you directly.

We may also disclose Personal Information:

where required to do so by law or regulation;
to cooperate with law enforcement or other legal proceedings;
to protect against misuse or unauthorized use of the Website or Services;
to limit our legal liability and protect our rights; or
to protect the rights, property, or safety of users, our Services, or the public.

In addition, we may share non-Personal Information, such as aggregated user statistics, demographic information, and Usage Information with third parties. We may combine your Usage Information with that of other users to share trend information in aggregated and anonymized form.

5. Your Privacy Rights and Choices

We will provide reasonable opportunities for individuals to access, update, or delete Personal Information that we hold about them. We will not use Personal Information for purposes that are incompatible with those for which it was originally collected without obtaining appropriate authorization.

Individuals' principal rights under applicable data protection laws may include:

(a) the right to access;

(b) the right to rectification;

(d) the right to restrict processing;

(e) the right to object to processing;

(f) the right to data portability;

(g) the right to complain to a supervisory authority; and

(h) the right to withdraw consent.

You have the right to request confirmation as to whether or not we process your Personal Information and, where we do, to access such Personal Information, together with certain additional information. This may include details of the purposes of processing, the categories of Personal Information concerned, and the recipients of the Personal Information.

Provided that the rights and freedoms of others are not adversely affected, we will supply you with a copy of your Personal Information. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee.

Right to Erasure - In certain circumstances, you have the right to request the erasure of your Personal Information. These circumstances may include where the Personal Information is no longer necessary for the purposes for which it was collected, where you withdraw consent (where processing is based on consent), where you object to processing under applicable law, where the data has been unlawfully processed, or where the data is used for direct marketing purposes.

This right is subject to certain limitations. For example, we may retain Personal Information where processing is necessary for compliance with a legal obligation, for the establishment, exercise, or defense of legal claims, or for other lawful purposes.

In some circumstances, you have the right to request restriction of the processing of your Personal Information. This may apply where you contest the accuracy of the data, where processing is unlawful but you oppose deletion, where we no longer require the data but you need it for legal claims, or where you have objected to processing pending verification.

Where processing is restricted, we may continue to store your Personal Information but will only process it with your consent, for legal claims, to protect the rights of others, or for reasons of public interest.

You have the right to object to the processing of your Personal Information for direct marketing purposes. If you exercise this right, we will cease processing your Personal Information for such purposes.

Where processing is based on your consent or is necessary for the performance of a contract, and is carried out by automated means, you may have the right to receive your Personal Information in a structured, commonly used, and machine-readable format, subject to applicable limitations.

If you believe that our processing of your Personal Information infringes applicable data protection laws, you have the right to lodge a complaint with a competent supervisory authority.

Where processing is based on your consent, you may withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing carried out prior to such withdrawal.

Please note that:

it may take a reasonable period of time to process your request in accordance with applicable law (and in any event no longer than 30 days, where applicable); and
you cannot opt out of receiving transactional or service-related communications (such as account or operational notifications).

In accordance with our record-keeping practices, we may delete certain records containing Personal Information when they are no longer required. We are not obliged to retain Personal Information indefinitely and disclaim any liability arising from, or related to, the deletion of such information.

Please also note that it may not always be possible to completely remove or delete all of your Personal Information from our systems due to backups or other technical reasons.

6. Managing Cookies ("Opt-Out") or Unsubscribing

If you do not want cookies to be used on your device, you can disable or delete them through your browser settings.

Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can however obtain up-to-date information about blocking and deleting cookies via these links:

(a) https://support.google.com/chrome/answer/95647?hl=en (Chrome);

(b) https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (Firefox);

(d) https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);

(e) https://support.apple.com/kb/PH21411 (Safari); and

(f) https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy (Edge).

Blocking all cookies will have a negative impact on the usability of many websites. If you block cookies, you might not be able to use all the features on our Site.

7. Data Retention and Deletion

We will not retain Personal Information for longer than is necessary to fulfill the purposes for which it was collected or as required by applicable laws or regulations.

We retain identifiable data collected for the purpose of providing our Services to Customers or serving content to end-users for a period of twenty-four (24) months from the end-user's last interaction with the Site or Services. After this period, we may delete such data or de-identify it (for example, by removing unique identifiers or aggregating the data).

We may retain aggregated data, which does not identify any individual or device, for as long as commercially necessary for reporting and analysis purposes.

8. Children

The Site and Services are not directed to children under the age of 13. We do not knowingly collect Personal Information from individuals under 13 years of age.

If we become aware that we have collected Personal Information from a child under 13 without appropriate consent, we will take reasonable steps to delete such information.

9. Security of your Information

We implement appropriate technical and organizational measures to protect the Personal Information we collect, including storing data in secure environments with controlled access.

Where you have been provided with, or have chosen, a password to access certain features of the Site or Services, you are responsible for keeping this password confidential.

Please note that the transmission of information over the internet is not completely secure. While we take reasonable steps to protect your Personal Information, we cannot guarantee the security of data transmitted to the Site or Services, and any transmission is at your own risk.

Once we have received your information, we will use appropriate procedures and security measures to help prevent unauthorized access.

10. Other Sites

The Site or Services may contain links to third-party websites that we do not own or operate, including links provided by customers, sponsors, or partners.

We do not control and are not responsible for the content, services, or privacy practices of such third-party websites. These websites may independently collect data or request Personal Information.

We encourage you to review the privacy policies of any third-party sites you visit.

11. Consent to Processing and Transfer of Information

As an international business, we may transfer and process your Personal Information in jurisdictions outside your country of residence.

If you are located in the European Union or other jurisdictions with data protection laws, please note that your Personal Information may be transferred to and processed in countries that may not provide the same level of data protection as your home jurisdiction.

By using the Site or Services, or by providing us with your Personal Information, you acknowledge such transfer and processing.

12. Changes

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the "Last updated" date will be revised accordingly.

We encourage you to review this Privacy Policy periodically.

13. Contact Us

We regularly review our compliance with this Privacy Policy. Questions, comments, and requests regarding this Privacy Policy are welcomed and should be addressed to sales@supy.io.

You can contact our appointed Data Protection Officer at: sales@supy.io