Stickylink Supply Enterprise, Privacy Policy

Last updated: September 7, 2026

This Privacy Policy explains how Stickylink Supply Enterprise (“Supply”) collects, uses, and protects information when you use our B2B infrastructure product. It is separate from the consumer Stickylink Privacy Policy because Supply is designed for organizations, not individual end users.

1. What we collect

• Account and organization data: your name, email address, the organization you represent, your corporate email domain, and your role in the workspace.
• Workspace data: batch names, GTINs, lot numbers, serial numbers, expiration dates, destination URLs, product pages, and any PDFs, links, or descriptions you attach to them.
• Scan data: timestamp, resolved code, requested destination, user-agent string, and coarse geolocation derived from the request IP. This helps you run analytics, trace recalls, and verify distribution.
• Order and billing data: shipping address, order status, and Stripe transaction identifiers. We do not store your full payment card number.
• Technical data: browser type, device type, IP address, and error logs used to keep the service secure and operational.

2. What we do not collect

We do not collect Protected Health Information, payment card data, classified information, or any of the other categories prohibited by the Supply Terms of Service. We do not collect consumer-facing personal data beyond what is required to operate the workspace and process your orders.

3. How we use your information

• Generate, resolve, and route GS1 Digital Link codes for your batches.
• Display product pages and documents to anyone who scans a Supply code.
• Provide scan analytics, batch management, and recall support inside the workspace.
• Process and ship physical roll orders.
• Manage and renew the Supply Management Seat subscription.
• Detect abuse, fraud, and security issues.
• Communicate important updates about your workspace, orders, or account.

4. How we share information

We do not sell your data. We only share it with service providers who help us run Supply, and only when necessary:

• Supabase: database, authentication, and storage (hosted on AWS).
• Cloudflare: edge network and DNS.
• Stripe: payment processing and subscription management.
• Google: optional Google sign-in for workspace authentication.

We may also disclose information if required by law, to protect our rights, or to respond to a valid legal request.

5. Code and product page visibility

Supply stickers are designed to be scanned by retailers, warehouse operators, and consumers. When someone scans a Supply code, they may see the product page, documents, and links you have attached. Do not attach content you are not authorized to share publicly or that contains sensitive personal data.

6. Cookies and similar technologies

We use only the cookies and local storage required to keep you signed in, remember your session preferences, and run essential workspace features. We do not use third-party advertising or tracking cookies.

7. Data retention

Workspace and batch data are retained for the lifetime of your active subscription or as long as you maintain an account. Scan data is retained for the lifetime of the workspace or longer for legal, recall, or business-record purposes. If you delete a product page or batch, we remove it from active service within a reasonable time. Order records are retained for tax, accounting, and fraud-prevention purposes.

8. Security

We protect Supply with encrypted connections, access controls, and database row-level security. However, no online service is completely secure, so we cannot guarantee absolute security. You can help keep your workspace safe by using strong passwords, enabling multi-factor authentication where available, and limiting invites to authorized users.

9. Your rights and choices

You can edit or delete batches and product pages from the workspace, update your organization details, and cancel your subscription at any time. You may also request access to, correction of, or deletion of your personal data by contacting us at hello@stickylink.io. Some records (such as scan logs and order history) may be retained for legal or business reasons even after deletion of the related workspace content.

10. International users

Stickylink Supply is operated from the United States. If you access the service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

11. Changes to this policy

We may update this Privacy Policy as Supply evolves. Material changes will be reflected on this page with a new “last updated” date. We encourage you to review this policy periodically.

12. Contact us

Privacy questions? Contact us at hello@stickylink.io.