Privacy Policy

1. Information We Collect

When you use the CYAG platform, we may collect the following types of information:

2. How We Use Your Information

We use the information we collect for the following purposes:

• Processing your orders and quotation requests and sending confirmations
• Communicating with you about your order status or technical inquiries
• Improving our platform and user experience
• Complying with legal and regulatory obligations
• Sending product updates and offers when consented (unsubscribe anytime)

3. Information Sharing

We do not sell your personal information to third parties. We may share your data only in the following cases:

• With supply partners and vendors to fulfill your order
• With service providers helping us operate the platform (under strict confidentiality agreements)
• When required by a legal or regulatory obligation

4. Data Security

We implement appropriate technical and administrative security measures to protect your data from unauthorized access, disclosure, modification, or destruction. These measures include:

• Data encryption in transit using HTTPS/TLS
• Hashed passwords — we never store passwords in plain text
• JWT authentication for user sessions
• Restricted access to sensitive data on a need-to-know basis

Despite our efforts, no internet transmission can be guaranteed to be 100% secure. Please notify us immediately upon suspecting any security breach.

5. Cookies

Our platform uses localStorage to save your preferences, login session, and cart data on your device. This data is not sent to external servers and can be cleared at any time from your browser settings.

6. Your Rights

You have the right at any time to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to processing your data for marketing purposes

To exercise any of these rights, contact us at the email below.

7. Data Retention

We retain your personal data for as long as your account is active and for as long as necessary to fulfill legal and contractual obligations. You may request deletion of your account and data at any time by contacting us.

8. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes via a prominent notice on the platform or via email. The "Last updated" date at the top of this page always reflects the most recent version.