This Privacy Policy describes how PartsTable ("we," "us," or "our") collects, uses, discloses, and protects your information when you use our platform, website (partstable.com), API, and related services (collectively, the "Service"). By using the Service, you consent to the practices described in this policy.
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, company name, job title, billing address, and payment information when you register or subscribe.
- Profile Information: Warehouse location (ZIP code), business preferences, and configuration settings.
- Support Communications: Messages, emails, and feedback you send to us.
1.2 Information Collected Automatically
- Usage Data: Search queries, API calls, feature interactions, part numbers queried, and selections made within the platform.
- Device and Log Data: IP address, browser type, operating system, device identifiers, access times, and referring URLs.
- Cookies and Similar Technologies: Session identifiers, preference cookies, and analytics cookies (see Section 7).
1.3 Information from Integrations
When you connect third-party data sources (such as your CRM, inventory system, or marketplace accounts) to the Service, we receive data from those sources as authorized by you. This may include:
- Inventory records and part numbers.
- Vendor and customer lists.
- Transaction history.
We only access integration data that you explicitly authorize. We do not access data beyond the scope of permissions you grant.
2. How We Use Your Information
We use your information to:
- Provide the Service: Process searches, normalize part numbers, generate cross-references, calculate scores, and deliver intelligence results.
- Improve the Service: Train and refine our algorithms, scoring models, and normalization logic using anonymized, aggregated usage patterns.
- Personalize Your Experience: Learn from your selections to improve result ranking and recommendations over time.
- Process Payments: Manage billing, subscriptions, and invoicing.
- Communicate with You: Send service notifications, security alerts, billing updates, and respond to support requests.
- Ensure Security: Detect and prevent fraud, abuse, and unauthorized access.
- Comply with Legal Obligations: Respond to legal requests and enforce our Terms of Service.
3. How We Share Your Information
3.1 We Do NOT Sell Your Data
PartsTable does not sell, rent, or trade your personal information or business data to third parties. We are an intelligence platform, not a data broker.
3.2 Limited Sharing
We may share your information only in the following circumstances:
- Service Providers: With trusted third-party vendors who assist in operating the Service (e.g., payment processing, cloud hosting, email delivery). These providers are contractually bound to use your data only for the purposes we specify.
- Legal Requirements: When required by law, regulation, legal process, or governmental request.
- Protection of Rights: When necessary to protect the rights, property, or safety of PartsTable, our users, or the public.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, in which case your information would be transferred as part of the transaction. We will notify you of any such change.
- With Your Consent: When you explicitly authorize us to share specific information.
3.3 Aggregate Data
We may share anonymized, aggregated data that cannot reasonably identify you (e.g., market trend statistics, average query volumes) for industry analysis or research purposes.
4. Data Retention
- Account Data: Retained for as long as your account is active, plus 30 days after termination to allow data export.
- Usage Data: Retained for up to 24 months for service improvement purposes, then anonymized or deleted.
- Billing Data: Retained for 7 years as required for tax and financial compliance.
- Support Communications: Retained for up to 36 months after resolution.
- Integration Data: Deleted within 30 days of disconnecting an integration, unless you request earlier deletion.
You may request deletion of your data at any time (see Section 5).
5. Your Rights
5.1 All Users
Regardless of your location, you have the right to:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Export: Request your data in a portable, machine-readable format.
- Opt-Out: Opt out of non-essential communications at any time.
5.2 California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You may request details about the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the categories of third parties with whom we share it.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
- No Sale of Personal Information: We do not sell personal information as defined by the CCPA.
To exercise CCPA rights, contact us at privacy@partstable.com. We will respond within 45 days.
5.3 European Economic Area and UK Residents (GDPR)
If you are located in the EEA or UK, you have additional rights under the General Data Protection Regulation (GDPR):
- Legal Basis: We process your data based on: (a) your consent, (b) performance of a contract, (c) our legitimate interests, or (d) legal obligations.
- Right to Restrict Processing: You may request that we limit how we use your data.
- Right to Object: You may object to processing based on our legitimate interests.
- Right to Portability: You may request your data in a structured, commonly used format.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority.
To exercise GDPR rights, contact us at privacy@partstable.com. We will respond within 30 days.
6. Data Security
We implement industry-standard security measures to protect your information, including:
- Encryption: Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
- Access Controls: Role-based access controls limit employee access to personal data on a need-to-know basis.
- Credential Management: API keys and authentication tokens are stored using secure hashing. Credentials are never logged or displayed in plaintext.
- Infrastructure: Hosted on reputable cloud infrastructure with SOC 2 compliance.
- Monitoring: Continuous monitoring for unauthorized access and anomalous activity.
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Cookies and Tracking
7.1 Types of Cookies We Use
| Category |
Purpose |
Required |
| Essential |
Authentication, session management, security |
Yes |
| Functional |
User preferences, location settings |
No |
| Analytics |
Usage patterns, feature adoption, performance metrics |
No |
7.2 Managing Cookies
You can manage cookie preferences through your browser settings or through the cookie consent banner on our website. Disabling essential cookies may impair Service functionality.
7.3 Do Not Track
We respect Do Not Track (DNT) browser signals. When we detect a DNT signal, we disable non-essential analytics tracking for that session.
8. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information.
9. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete it promptly.
10. International Data Transfers
Your information may be transferred to and processed in the United States, where our servers are located. If you are accessing the Service from outside the United States, you consent to the transfer of your information to the US. We will ensure appropriate safeguards are in place for international transfers in compliance with applicable law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our website with a new "Last Updated" date.
- Sending an email notification to your registered email address for material changes.
Your continued use of the Service after the effective date of the updated policy constitutes acceptance.
12. Contact Us