Privacy Policy.

SkaiVendor (skaivendor.com) is operated by ClearSkai Technologies ([LEGAL ENTITY NAME AND TYPE — owner to supply]), referred to here as "ClearSkai", "we" or "us". ClearSkai also operates SkaiScraper ([CONFIRM — same entity operates SkaiScraper]).

Contact for privacy questions and requests: [LEGAL CONTACT — owner to supply].

This policy covers the SkaiVendor public site and the SkaiVendor workspace at skaivendor.com/account. Records that SkaiScraper holds are also covered by the SkaiScraper privacy policy ([SKAISCRAPER PRIVACY POLICY URL — owner to supply]).

SkaiVendor is a business tool for suppliers. A contractor who runs jobs in SkaiScraper invites a supplier company; the supplier's team then uses SkaiVendor to answer requests for quotes (RFQs), send quotes, handle orders, record deliveries and message the contractor about shared jobs. SkaiVendor is invite-only and in private beta.

Sign-in and identity. When you create a login, our authentication provider, Clerk, collects your name, email address, whether that email is verified, and your sign-in method (email and password, or Google if you choose it). Clerk stores your password; SkaiVendor never sees it. We receive a Clerk user ID, your name and email, and their verification status.

Company and team. Your company's name; each member's email, role (owner, admin or rep) and status; who created the company; and team invitations (the invited email, role, expiry and who sent it). Invitation links are one-time codes; we store only a cryptographic hash of each code, never the code itself.

Your rep profile. If you fill it in: display name, title, phone, a photo link, branch, a short bio, the trades you cover and the products you carry. These are stored by SkaiScraper (see section 5) so contractors see who is handling their job.

Connection to SkaiScraper. Your company's SkaiScraper vendor ID, connection IDs and granted scopes, and a separate access token and refresh token for each team member. Tokens are encrypted (AES-256-GCM) before they are stored.

Work you do in the workspace. Jobs a contractor shares with you, RFQs, your quotes, orders and their status, delivery records and links to proof of delivery, message threads and notifications. SkaiScraper is the system of record for all of these. SkaiVendor shows them to you and sends your actions back; it does not keep its own copy.

Notifications from SkaiScraper. SkaiScraper sends SkaiVendor signed event notices (for example "a new RFQ was sent"). We record each one once, to avoid processing it twice. They contain IDs and statuses only: no prices, names, notes or message text.

Activity log. A record of security-relevant actions, such as connecting or disconnecting SkaiScraper, creating, accepting or revoking invitations, and adding or removing members, with who did it and when.

Contact Sales. If you use the form on our contact page: your name, business email, company, and anything else you choose to give (title, phone, company type, number of locations and reps, categories, markets, how you take orders today, your ERP, delivery model and your message). To limit abuse, your IP address is passed along with the request for rate limiting.

Technical data. Our host keeps request logs (IP address, browser user agent, page requested, time and response status) and error logs. We do not run analytics or advertising scripts.

Cookies and browser storage. Essential only. The full list is in the Cookie Policy.

• To sign you in and keep your account secure, including requiring a verified email.
• To set up your company workspace and let owners and admins manage the team.
• To connect your workspace to SkaiScraper and carry out what you do there.
• To answer Contact Sales requests and give support.
• To prevent abuse, investigate problems and keep the service running.
• To meet legal obligations.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

SkaiVendor only works through SkaiScraper, so sharing with SkaiScraper is part of the service:

• When you accept an invitation, SkaiVendor sends SkaiScraper the invitation code, your SkaiVendor user ID and company ID, your email and whether it is verified, your company name, and your display name and title.
• When an admin adds or removes a teammate, SkaiVendor sends that person's user ID, email, role and, if set, name, title and branch.
• Everything you do on a shared job, including quotes, order updates, delivery records and messages, is sent to SkaiScraper and is visible to the contractor and their team on that job.
• Your rep profile is visible to contractors you work with.

Job access grants. The contractor decides which jobs a supplier can see and what is included (for example, whether the property address is shown). The contractor can end access at any time. Other suppliers never see your quotes, and you never see theirs.

Contact Sales requests are recorded as a lead in ClearSkai's own sales records, which run on SkaiScraper.

We use these providers to run SkaiVendor. Each processes data only to provide its service to us.

Email. SkaiVendor does not send email itself today. Clerk sends sign-in and verification emails. Invitations from contractors come from SkaiScraper or from the contractor directly. The Contact Sales form is not sent by an email provider: it goes to ClearSkai's sales records on SkaiScraper, and we reply from our own mailbox.

Signing in with Google is optional. If you use it, Google shares your name, email and profile picture with Clerk under Google's own privacy policy.

• Your login: while your account is open. When it is deleted, Clerk removes it under its own retention schedule.
• Company, membership and activity-log records: while your company has a workspace. Removed members are marked as removed rather than deleted, so the company's history stays accurate. Period after closure: [RETENTION PERIODS — counsel to set].
• SkaiScraper tokens: deleted when a member is removed or the company disconnects from SkaiScraper. Access tokens expire after 15 minutes; refresh tokens rotate and expire after 30 days.
• Team invitations: an invitation stops working when it is used, revoked or expired; the record (with the hashed code) is kept for [RETENTION PERIODS — counsel to set].
• Sign-in hand-off cookie for team invitations: 30 minutes.
• SkaiScraper notification records: [RETENTION PERIODS — counsel to set].
• Contact Sales requests: [RETENTION PERIODS — counsel to set].
• Hosting logs: [HOSTING LOG RETENTION — owner to confirm].

Past-order receipts. When a contractor ends your access to a job, you lose the job, its notes, messages and documents. You keep a read-only receipt of each order your company won on that job: the order, its lines, the quoted amounts and the delivery record. Receipts never include job notes, messages, unrelated documents, client contacts or other suppliers' information. The full street address appears on a receipt only if the contractor's grant allowed you to see the property address, and only for 395 days after the order date; after that, or without that permission, the receipt shows city and state only. [RECEIPT RETENTION — counsel to confirm]

You can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct it;
• delete it, unless we must keep it (for example, a company's order receipts or records required by law);
• stop using it for a purpose you object to.

Send requests to [LEGAL CONTACT — owner to supply]. We will verify your identity first and answer within [RESPONSE TIME — counsel to set]. If we decline, we will say why, and you can ask us to reconsider. We will not treat you differently for using these rights.

Some records belong to your company or to the contractor's job rather than to you personally. Your company's owner or admin can remove you from the team; quotes and orders on a contractor's job stay on that job in SkaiScraper.

You may have additional rights under the law of the US state where you live. [STATE PRIVACY LAWS — counsel to confirm which apply]

• All traffic to skaivendor.com is encrypted in transit (HTTPS).
• Workspace access requires a signed-in account with a verified email.
• SkaiScraper tokens are encrypted at rest, and each person has their own.
• Invitation codes are stored only as hashes, and each works once.
• Every workspace action is checked against your role and your company, and every request to SkaiScraper is checked again there.

No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.

SkaiVendor is for businesses and their employees. It is not meant for anyone under [MINIMUM AGE — counsel to confirm], and we do not knowingly collect information from children. If you think a child has given us information, contact us and we will delete it.

SkaiVendor is built for businesses in the United States. Our providers process data in the United States and possibly other countries where they operate.

We will post any change on this page with a new date. For material changes, we will tell account holders by email or in the workspace at least [NOTICE PERIOD — counsel to set] before they take effect.

ClearSkai Technologies, [LEGAL CONTACT — owner to supply]. You can also reach us through the contact page.