CCPA Policy

Depending on how you use the Service, we may collect the following categories of personal information, consistent with the categories described in our Privacy Policy:

• Account data — name, work email, organisation name, and authentication identifiers, handled through our identity provider (Clerk).
• Billing data — subscription status and payment metadata. Card details are handled directly by Stripe; we never see or store full card numbers.
• Sourcing data — the sourcing briefs, requirements, and supplier information you create or that our AI agents discover, including supplier names, countries, websites, and business contact details.
• Communications data — the content of Requests for Information (RFIs) sent through the Service and supplier replies received, processed to advance your sourcing funnel.
• Usage & technical data — log data, approximate token/cost usage, and standard server logs generated when you use the Service.

If you are a California resident, you have the following rights with respect to your personal information:

• Right to know what personal information is collected, used, and disclosed.
• Right to delete personal information, subject to certain exceptions (e.g. information we must retain for legal, tax, or accounting obligations).
• Right to opt out of the sale or sharing of personal information — SourceGPT does not sell or share personal data with third parties for cross-context behavioral advertising.
• Right to correct inaccurate personal information we maintain about you.
• Right to non-discrimination for exercising any of your CCPA rights — we will not deny you the Service, charge you a different price, or provide a different level of quality because you exercised a privacy right.

To exercise any of the rights above, contact us at hello@sourcegpt.org. To protect your information, we will take reasonable steps to verify that the request is being made by you (or your authorised agent) before honoring it — typically by confirming details associated with your account. We will respond within the timeframe required by the CCPA/CPRA.

At the time you create an account, we collect the account data described in Section 1 above (name, work email, organisation name) for the business purpose of providing the Service and administering your subscription. As you use the Service, we collect sourcing, communications, and usage data for the business purpose of operating the AI-driven discovery and outreach features you direct us to run on your behalf.

SourceGPT does not offer any financial incentive, discount, or other benefit in exchange for the collection, sale, or retention of your personal information.

Questions about this notice or our data practices can be directed to hello@sourcegpt.org.