Privacy
Effective April 14, 2026.
What we collect
- Your account email.
- Your customer data from Stripe or Polar, once you connect them.
- The content of emails sent and received through SuppyHQ.
- Basic logs (IP, browser) for security and debugging.
What we don't do
- Sell your data. Ever.
- Share it beyond the subprocessors below.
- Use your customer data to train AI models.
Subprocessors
- Stripe and Polar, because you connect them.
- Postmark, for sending and receiving email.
- OpenRouter, for AI features. To write a summary, SuppyHQ sends that thread, your team's notes on that customer's threads, and the customer's payment summary. To find suggested replies and emails about the same issue, it sends each message's text to turn it into numbers it can compare. To tidy a guide, it sends that question and answer. If TypeSafe is down, it sends a stranger's first email to check for a cold pitch. Nothing else. OpenRouter only uses AI providers that keep no copy and never train on it.
- TypeSafe, for sorting email. To decide whether a stranger's first email is a cold pitch, SuppyHQ sends that email. To decide whether a customer's email can't wait, it sends that email, their earlier emails in the thread, and a short summary: purchase status, lifetime spend, and how many past conversations they've had. To check a suggested reply, it sends the question and the past reply. To find people who wrote about the same issue, it sends the new email and up to 10 of the closest emails other customers sent within a week of it, each with its subject, and with the question before it when the email is a short follow-up. Nothing else.
- Hetzner, for hosting servers in Germany.
- Cloudflare, for DNS and domain proxy.
Your rights
Export your data anytime from settings. You get a zip with everything. Delete your account from settings too; we wipe your data within 15 days.
Cookies
One session cookie so you stay logged in. No analytics cookies, no third-party trackers.
Changes
We'll email you before anything material changes.