1. Scope and roles
Total.Supply is the product and service name for our hosted commerce platform and is operated by Total Supply Online Store LLC. This policy applies when you visit total.supply, create or administer a merchant account, contact us, or use platform-operated services. Total Supply Online Store LLC is the contracting provider unless an applicable order form expressly identifies another provider.
A merchant ordinarily determines why and how its buyer, employee, and catalog data is used. For that store data, the merchant is the controller or business and Total.Supply acts as its processor or service provider. Each merchant publishes its own storefront privacy policy. We act as controller for platform accounts, billing, security, sales, and our own website operations. In those contexts, Total Supply Online Store LLC is the controller or business responsible for the processing.
2. Information we collect
- Account and business data: name, email, phone, company and legal name, role, address, domain, staff membership, authentication events, and onboarding responses.
- Store and commerce data: catalogs, products, prices, inventory, files, customer records, addresses, carts, orders, quotes, returns, shipping events, messages, and merchant-created content.
- Billing and transaction data: plan, subscription, invoice, payment-status, processor-account identifiers, and transaction metadata. Payment providers handle full card or bank credentials; Total.Supply does not intentionally store complete payment-card numbers.
- Connection data: credentials, tokens, permissions, account identifiers, configuration, and synchronization records for services a merchant connects, including payment, marketplace, social, messaging, email, storage, shipping, analytics, and AI providers.
- Device and usage data: IP address, browser, device, referring page, approximate location, page and feature activity, diagnostics, audit events, security logs, cookies, and similar technologies.
- Communications: support messages, sales inquiries, feedback, attachments, call or meeting details, and preferences.
3. How we use information
We use information to create and operate accounts and stores; provision infrastructure; process billing; authenticate users; deliver catalogs, checkout, RFQ, order, inventory, shipping, messaging, analytics, and channel features; provide support; detect abuse and fraud; secure and monitor the service; maintain backups; comply with law; enforce terms; and improve the platform. We use contact information for service messages and, where permitted, product or marketing communications that can be opted out of.
4. AI-assisted features
Total.Supply includes AI-assisted catalog import, product content, search, recommendations, images, translation, customer support, analytics, and administrative workflows. A request may send the minimum relevant prompt, catalog, conversation, or operational context to the selected AI provider. Merchants connect their own AI provider credentials; Total.Supply provides only shared infrastructure services. Customer data is not used to train external providers' general-purpose models on our behalf unless a merchant separately directs or agrees to that use with its provider.
5. How information is disclosed
We may disclose information to:
- the merchant whose store you use and its authorized staff;
- hosting, database, storage, identity, security, analytics, communications, support, AI, and infrastructure providers;
- merchant-selected payment processors, carriers, warehouses, suppliers, marketplaces, social networks, and other connected services;
- professional advisers, auditors, insurers, and financing partners subject to appropriate duties;
- authorities or other parties when required by law or reasonably needed to protect rights, safety, security, or the service; and
- a buyer, successor, or participant in a merger, financing, restructuring, or sale, subject to customary safeguards.
We do not sell personal data for money. Some analytics or advertising activity may be treated as “sharing,” targeted advertising, or a sale under certain laws; applicable cookie and opt-out controls remain available.
6. Integrations and merchant-provided credentials
When a merchant connects an external service, Total.Supply exchanges data as needed to perform the requested workflow. The external provider's terms and privacy notice also apply. Secrets and tokens are restricted, encrypted or protected using platform security controls, and are not displayed in full after storage where masking is supported. Merchants control which services they connect and can revoke connections through Total.Supply or the provider.
7. International transfers
Total.Supply and its providers may process information in the United States and other countries. Where required, we rely on recognized safeguards such as adequacy decisions, standard contractual clauses, or contractual and technical protections.
8. Retention
We keep information only as long as reasonably needed for the purposes described here, contractual commitments, security, disputes, and legal obligations. Current categories and default periods are described in our Data Retention Policy. Merchants may configure different storefront periods where permitted.
9. Security
We use administrative, technical, and organizational safeguards appropriate to the nature of the service, including transport encryption, access controls, secret handling, audit logging, monitoring, backups, and isolation of merchant environments. No system is perfectly secure, and users must protect their credentials and connected accounts.
10. Your choices and rights
Depending on your location, you may request access, correction, deletion, portability, or restriction; object to or opt out of certain processing; withdraw consent; or appeal a decision. If your request concerns a merchant store, contact that merchant first because it controls the store data. For Total.Supply-controlled data, email legal@total.supply. We may verify your identity and authorized-agent status.
11. Children
The Total.Supply platform is intended for businesses and adults and is not directed to children under 18. Merchant stores must set and disclose any different age requirements applicable to their products and customers.
12. Changes and contact
We may update this policy as the platform, providers, or law changes. Material updates will be communicated when required. Questions or requests can be sent to legal@total.supply, through our contact page, or by mail to Total Supply Online Store LLC, 410 S 15th St STE 2307, McAllen, TX 78501, United States.