Privacy Policy

This Privacy Policy describes how Altrusion (“Altrusion,” “we,” “us”) collects, uses, and shares information when you use our websites, supplier and buyer portals, and related services (collectively, the “Services”).

Information we collect

• Account and registration data: name, business email, company name, role, phone number, and company details you provide when registering or being invited to an organization.
• Quote and RFQ data: part descriptions, specifications, quantities, technical drawings, and files you submit to receive quotes or respond to requests.
• Usage data: log data, device information, and interactions with the Services, used to operate and improve the platform.
• Payment data: billing is processed by Stripe; we do not store full payment card numbers on our systems.

How we use information

• To provide the Services, including matching buyers with suppliers and generating quotes and proposals.
• To process submitted specifications and drawings with AI systems in order to produce estimates, capability matches, and related analysis. Your submissions are not used to train third-party foundation models. De-identified, aggregated data (for example, price, quantity, and specification ranges with company-identifying details removed) may be used to improve Altrusion’s own estimation and benchmarking tools, as described in the platform Terms.
• To send transactional communications such as sign-in links, quote results, and order updates.
• To maintain security, prevent abuse, and comply with legal obligations, including export-control screening (e.g., ITAR review).

How we share information

We share information with service providers that help us operate the platform, each bound by contractual confidentiality obligations. When you participate in a quote or RFQ workflow, relevant business information is shared with the counterparty as needed to complete that workflow. We do not sell personal information.

Subprocessors

We currently use the following providers to process customer data:

• Supabase — database, file storage, and authentication
• Railway — application hosting
• Anthropic — AI processing of submitted text and documents (API access; not used to train Anthropic’s models)
• Voyage AI — text embeddings for capability matching
• Stripe — payment processing
• Resend — transactional email delivery
• Expo — mobile push notification delivery
• Microsoft 365 — business email correspondence

We will update this list as our providers change.

Data retention

We retain account and transaction records for as long as your account is active and as required for legal, tax, and audit purposes. Platform account admins can delete their account and data self-service from the portal’s Account tab (with a 30-day cancellation window), or you may request deletion by contacting us at the address below; certain records may be retained where required by law.

Your rights

Depending on your jurisdiction (including under GDPR and CCPA), you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Platform account admins can download a copy of their organization’s data directly from the portal’s Account tab. To exercise any of these rights, email info@altrusion.com.

Security

We use industry-standard safeguards: all traffic is encrypted in transit (HTTPS/TLS) and your data is encrypted at rest (AES-256) in our database and file storage. Sign-in is passwordless (one-time email links and codes), so we never store account passwords. Uploaded documents live in private storage that is not publicly reachable and are shared only through short-lived signed links; access to your information is authorized server-side against your organization on every request, and sensitive actions are recorded in audit trails. Staff systems run on a separate, separately-authenticated service. No method of transmission or storage is completely secure, and we do not currently hold third-party certifications such as SOC 2 — we describe only what we actually do.

Cookies

We use cookies and similar technologies that are necessary to operate the Services, such as keeping you signed in. You can control cookies through your browser settings.

Changes

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above, and where appropriate, communicated directly.

Contact

Questions about this policy can be sent to info@altrusion.com.