This policy explains how the company that operates Client Supply ("Client Supply", "we", "us") collects, uses and shares personal information when you visit our websites, sign up for or use Client Supply (the "Service"), or join our partner program.
1. Two kinds of data, two roles
Data about you, our customer and visitor. For your account, billing, our website and our own marketing, we decide how the data is used. This policy covers that data.
Data our customers put into the Service. Businesses use Client Supply to manage their own contacts, leads, conversations, calls and pages. For that data ("Customer Data") we act as a service provider (processor) for the business, under our Data Processing Addendum: we use it only to provide the Service to that business, never sell or share it, and never use it to train AI models. If you are a contact of one of our customers (for example you received a message from a business that uses Client Supply), that business's own privacy notice applies, and you should send requests to that business. If you write to us, we will pass your request to the business where we can identify it.
2. What we collect about you
- Account and profile: name, email, password (stored hashed by our authentication provider), phone if you add it, company, role, workspace settings, team members you invite.
- Billing: plan, invoices, billing address, tax details, and payment status. Card details are collected and kept by Stripe, not by us.
- Use of the Service: actions, pages and features used, device and browser information, IP address, approximate location from IP, crash and error logs, and product analytics events collected with PostHog (pages viewed and clicks). PostHog runs only in the Client Supply app and on our own pages, not on pages our customers publish.
- Chats with Aria and support: what you write to Aria and to us. Aria runs on the Claude account you connect; those conversations are processed by Anthropic under your agreement with Anthropic.
- Connected accounts: tokens and keys for the services you connect (stored encrypted), and the account identifiers we need to use them for you. We never see or store your Claude.ai credentials.
- Website and sign-up: how you found us (referral link, campaign parameters).
- Partners: contact and payout details, tax forms, referral and commission records.
- Voice and likeness you choose to create: if you clone your own voice or create an avatar of yourself, the audio or images you provide and the resulting voice or avatar. Some states treat voiceprints as biometric information; we use them only to generate audio or video you ask for, never to identify you, and we delete them when you delete the voice or close your account.
3. How we use it
To provide and secure the Service; to bill you; to send service messages (receipts, trial reminders, security notices, changes to terms); to give support; to measure and improve the product; to send you product news and offers (you can unsubscribe at any time from any email); to run the partner program; to prevent fraud and abuse and enforce our terms; and to comply with the law.
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising.
4. Who we share it with
- Service providers that host and run the Service for us: Supabase (database, authentication, storage), Vercel (hosting), Resend (email delivery), PostHog (product analytics), Modal (built-in voice model), Stripe (payments). They may use the data only to provide their service to us.
- The services you connect, when you ask the Service to use them (for example sending your email through Gmail, your texts through TextGrid or Twilio, or your AI requests through your Claude account).
- Your organization: workspace owners and admins can see members' activity in their workspace; an agency that manages your workspace can see it according to the access you give it.
- Legal and safety: when required by law or to protect rights, people or the Service, including notices to a carrier or platform about abuse.
- Business transfers: in a merger, acquisition, reorganization or sale of assets, under this policy.
5. Google user data
When you connect a Google account, we access only the data needed for the features you use (for example reading and sending email in Gmail, labeling threads, reading your calendar, finding files in Drive, publishing to YouTube). Client Supply's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not let humans read it except with your permission, for security, or as the law requires, and do not use it to train generalized AI models.
6. Meta data
When you connect Facebook, Instagram, Messenger, WhatsApp or Lead Ads, we receive the data Meta permits for the features you use (pages, messages, comments, leads, ad performance). We use it only to provide those features to you. To delete it, disconnect Meta in Settings, Connections, and delete the related contacts or conversations, or write to us from Settings, Help in the app and we will delete it within 30 days.
7. How long we keep it
Account data: while your account is open and for up to 30 days after closure (so you can come back or export), then deleted, except billing and tax records we must keep (generally 7 years) and records needed to resolve disputes or enforce our terms. Backups roll over within 35 days. Analytics events:.
8. Security
We use measures such as tenant isolation, encryption of connected-account credentials, encryption in transit, and access controls. No system is perfectly secure; tell us from Settings, Help in the app if you find a problem.
9. Your choices and rights
You can view and update your account details in Settings, export your workspace data, and close your account. You can unsubscribe from marketing emails with the link in each one. Depending on your state of residence, you may have rights to know, access, correct, delete or obtain a copy of your personal information, and to opt out of targeted advertising, sale or profiling. We do not sell or share personal information or use it for targeted advertising or profiling with legal effects. To make a request, write to us from Settings, Help in the app; we may need to verify your identity, and you may use an authorized agent. We will not discriminate against you for using your rights. If we deny a request, you can appeal by replying to our decision.
10. Children
The Service is for businesses and is not directed to children under 13 (or under 16 where relevant). We do not knowingly collect their personal information.
11. Where data is processed
We are based in the United States and store data in the United States, except product analytics, which PostHog processes in its EU cloud. The Service is not offered to people in the European Economic Area, the United Kingdom or Switzerland at this time.
12. Changes
We will post changes here and, if they are material, tell you by email or in the Service before they take effect.
13. Contact
Write to us from Settings, Help in the app.