Privacy policy

Last updated: October 2, 2026.

This page explains in plain language which data SupplyFlow keeps and why, following the principles of LGPD (Brazil's Law 13,709/2018).

1. What we keep

   From your account: name, e-mail, WhatsApp (if given) and the password, kept only as a hash. From the distributor: name, CNPJ, contact and logo. And what the team registers: customers, contacts, products, opportunities, quotes, tasks and history.

2. What we use it for

   Only to make the system work: show the data to your team, send quotes to your buyers, compute the dashboard and send the password-reset e-mail. We don't sell data and use no ads or trackers.

3. Who sees what

   Each distributor sees only its own data. A buyer sees only the quotes sent to them, never cost, margin or internal notes. The platform operator sees only each account's plan and usage, not business data.

4. Cookies

   Only necessary cookies: the session one (to keep you logged in), the language one and the light/dark theme one. No advertising cookies.

5. Your rights

   You can ask to see, fix, export or delete your data. Today these requests go through support on WhatsApp; on the Profissional and Escala plans the distributor already exports everything as CSV on its own.

6. Who is responsible

   The distributor is the controller of its customers' data. SupplyFlow processes that data on its behalf, only to run the system.

7. Security

   Hashed passwords, protection against forged forms, every query tied to the right distributor, and invite and password links that expire and work only once.

Questions about this document? Talk to support

← Back to the home page