Legal

Privacy Policy

Last updated: October 2026

This page explains which personal data we process when you use supplychat.ai or contact us, why we do it, who receives it, and what rights you have.

Controller

Honr, Inc. (doing business as SupplyChat), 1111b S Governors Avenue, STE 25649, Dover, DE 19904, USA.
Operating address in Germany: Lenbachstraße 7, 10245 Berlin.
Privacy contact: privacy@supplychat.ai

What we process, why, and on which legal basis

  • Visiting the website. Our hosting provider processes technical access data (IP address, time, requested page, browser) to deliver the site and keep it secure. Legal basis: our legitimate interest in a working, secure website (Art. 6(1)(f) GDPR).
  • Email and inquiries. If you write to us or send us a spec, we process your name, email, company, and what you send us, to answer and to run the requested work. Legal basis: steps prior to a contract or the contract itself (Art. 6(1)(b) GDPR).
  • Booking a call. The scheduler (Cal.com) loads only when you click "Schedule Demo". Cal.com then processes the details you enter for the booking. Legal basis: Art. 6(1)(b) GDPR; access to your device for a service you explicitly request (§ 25(2) no. 2 TDDDG).
  • Waitlist. If you join the waitlist on /tech/, we store your email to send you one message when self-serve access opens. No newsletter. Legal basis: your request (Art. 6(1)(b) GDPR).
  • Analytics. Only if you allow analytics cookies, we use Google Analytics to measure how the site is used. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time under "Cookies" in the footer.
  • Business contacts. We keep contacts from inquiries in our CRM to follow up on the conversation. Legal basis: our legitimate interest in managing business relationships (Art. 6(1)(f) GDPR).

Providing data is voluntary. Without an email address we cannot answer you. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Recipients

  • Amazon Web Services (USA, region us-east-1): website hosting, form processing, data storage, and sending emails.
  • Attio (Attio Ltd., United Kingdom): CRM for inquiries and waitlist entries.
  • Cal.com (USA): appointment booking, only after you click "Schedule Demo".
  • Google (Ireland and USA): Google Analytics, only with your consent.
  • Stripe (Stripe Payments Europe Ltd., Ireland, and Stripe, Inc., USA): payment processing when you book a paid offer through a payment link, for example on /shenzhen/.

We do not sell personal data.

Transfers outside the EU

Transfers to the USA are based on the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on standard contractual clauses (Art. 46(2)(c) GDPR). For the United Kingdom, an adequacy decision of the European Commission applies.

How long we keep data

  • Inquiries, specs, and booking details: as long as needed to handle the inquiry and any resulting business relationship. Business correspondence is kept for 6 years (§ 257 HGB), accounting records for 10 years (§ 147 AO).
  • Waitlist: until we have sent the access email, at most 24 months after signup, or earlier if you ask us to delete it.
  • Google Analytics: at most 14 months.
  • Your cookie choice: stored in your browser until you change or clear it.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future. Write to privacy@supplychat.ai.

You can also lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.

Schedule Demo