Privacy Policy

Effective August 19, 2026

1. Information We Collect

We collect information you provide directly, such as your name, work email, company, role, and sourcing challenges when you request a demo or contact us. If you use the OK2Source application, we may process business data you upload or submit, including supplier quote files, quote metadata, and related workflow information.

We may also collect limited technical information, such as browser type, device information, IP address, timestamps, pages viewed, and interactions with our website or application.

2. How We Use Information

• To respond to demo requests, questions, and support needs.
• To provide, secure, maintain, and improve OK2Source services.
• To analyze product usage and website performance.
• To communicate about product updates, security notices, and administrative matters.
• To comply with legal obligations and enforce our agreements.

3. How We Share Information

We do not sell personal information. We may share information with service providers that help us operate the website, application, hosting, analytics, email, form collection, authentication, storage, and AI processing services. We may also disclose information if required by law, to protect rights or safety, or in connection with a merger, acquisition, financing, or sale of assets.

4. Customer Content

Business files and data submitted to the OK2Source application remain customer content. We use customer content to provide and improve the service, troubleshoot issues, maintain security, and perform requested processing. Customers are responsible for ensuring they have the right to submit supplier or business information to the service.

5. Google User Data and Gmail Access

If you connect a Gmail account to OK2Source, we ask for Google's Gmail modify permission and for permission to see your email address so we can show which account is connected. We use Gmail access only to run the supplier conversations your organization manages in OK2Source: sending the messages you initiate, reading and storing the supplier replies that belong to those conversations. Other mail in your mailbox is not read or stored. We never delete or trash your mail.

Supplier replies are processed to match them to the right conversation and extract quote details, including by the AI processing provider we engage under contract for that purpose. We do not use Google user data for advertising, and we do not use it to develop, improve, or train generalized AI or machine learning models. OAuth tokens are stored encrypted and are not shared with third parties, and no one reads Google user data except with your permission, for security, or as required by law. You can disconnect your Gmail account at any time in OK2Source or at myaccount.google.com/permissions; disconnecting stops synchronization and deletes the stored credential.

OK2Source's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Cookies and Similar Technologies

We may use cookies and similar technologies to keep the service secure, remember preferences, understand usage, and improve site performance. In the application, we use analytics and session-recording cookies to understand how signed-in users use the product; form inputs are masked in recordings. Browser settings may allow you to limit cookies, but some service features may not work as intended.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If we confirm a security incident that affects your information, we will notify affected customers within 72 hours of that confirmation. The notice will describe what occurred, what information was affected, what we are doing in response, and what steps you may want to take. Where we act as a processor on a customer's behalf, we will also provide the information that customer needs to meet its own notification obligations.

8. Data Retention and Deletion

We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain business records. Retention periods may vary based on the nature of the data and customer configuration.

When a customer account is closed, or on written request from the customer, we delete that customer's content within 30 days, except for information we are required to retain for legal, regulatory, tax, or dispute-resolution purposes, and security and audit records of how the service was accessed. Deletion covers the application database, stored documents, and connected email credentials, and we revoke the access tokens for any connected mailbox.

9. Your Choices

You may request access, correction, deletion, or export of personal information where applicable. We may need to verify your identity and may retain certain information where permitted or required by law.

10. International Use

OK2Source is operated from the United States. If you use the service from another jurisdiction, you understand that information may be processed in the United States and other locations where our service providers operate.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date.

12. Contact

For privacy questions, contact your OK2Source representative or email info@ok2source.ai.