Privacy Policy

Who we are

SC Agents, Inc. ("SC Agents," "we," "us," or "our") provides AI‑powered supply chain software, including agent automations and control‑tower dashboards (the "Services"). We are headquartered in the United States.

Scope

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our websites (including scagents.ai) and when you use our Services, attend our events, or otherwise interact with us. It also describes choices and rights you may have under applicable laws.

Information we collect

We collect information in the following categories (depending on your relationship with us):

Account & contact data

Name, business email, phone, company, role, billing contact, login identifier.

Transactional & subscription data

Plan tier, seats, order forms, billing and payment metadata (processed by PCI‑compliant processors), invoicing history.

Usage & device data

Product interaction events, feature usage, performance telemetry, IP address, device type, browser, time zone, page views, referrers, session duration, crash logs.

Customer content & model inputs/outputs

Data you or your organization upload or connect (e.g., inventory, orders, supplier records) and any prompts, configurations, or AI agent outputs generated within the Services. You (the Customer) control this Customer Data.

Support communications

Requests, tickets, chat or call recordings where permitted by law, feedback, and surveys.

Marketing data

Preferences, cookies, campaign interactions, opt‑in status.

Integrations

Identifiers and metadata necessary to connect third‑party systems (e.g., SAP S/4HANA, ERPs, TMS, HRIS, SSO/IdP like Keycloak/Okta). We do not pull more data than configured by your admins.

We obtain data directly from you, from your employer (as our customer), automatically via cookies and similar technologies, from service providers (analytics, hosting, customer support), and from publicly available sources.

How we use information

We use personal information to:

• Provide and secure the Services; authenticate users; maintain availability; prevent fraud, abuse, and security incidents.
• Operate and improve features, models, and user experience; develop new capabilities; run A/B tests; perform analytics and benchmarking in aggregated/de‑identified form.
• Support & communicate about service updates, billing, renewals, and product changes.
• Comply with law and enforce agreements, including defending our rights.
• Market our Services (with your consent where required) and measure campaign effectiveness; you can opt out anytime.

Legal bases (EEA/UK only). We process personal data as needed to perform a contract (to provide the Services), based on our legitimate interests (e.g., product security, improvement, limited B2B marketing), with consent (where required for cookies/marketing), and to comply with legal obligations.

Sharing and disclosures

We share personal information with:

• Service providers/sub‑processors (e.g., cloud hosting, storage, analytics, email delivery, customer support) under data‑protection agreements.
• Integration partners you choose to connect, as configured by your admins.
• Affiliates for internal operations consistent with this policy.
• Professional advisors (legal, auditors) and authorities when required by law.
• Business transfers in connection with a merger, acquisition, or sale of assets.

We do not sell personal information or share it for cross‑context behavioral advertising where prohibited by applicable law. Where U.S. state laws classify certain analytics/advertising activities as a "sale" or "share," we honor your opt‑out preferences, including Global Privacy Control (GPC) signals.

International data transfers

We are U.S.‑based and may transfer personal data internationally, including to the U.S. Where required, we use recognized transfer mechanisms (e.g., EU Standard Contractual Clauses and UK IDTA/UK Addendum) and implement appropriate safeguards.

Retention

We keep personal information only as long as necessary for the purposes above, for the duration of our contract with your organization, and to meet legal, tax, or audit requirements. Customer Data retention follows your organization's settings and our agreement.

Security

We employ administrative, technical, and physical safeguards (access controls, encryption in transit/at rest, SSO/SCIM support, audit logging, vulnerability management, least‑privilege, and employee training). No system is 100% secure; we cannot guarantee absolute security.

Your privacy rights

Depending on your location, you may have rights to access, correct, delete, receive a copy (portability), or object/restrict certain processing. California and other U.S. state residents may also opt out of sale/share and limit use of sensitive personal information. To exercise rights, email contact@scagents.ai. We will verify your request and respond within applicable timelines. If we deny your request, you may appeal via the same contact method.

Children

Our Services are B2B and not directed to children. We do not knowingly collect personal information from children under 16.

Changes

We may update this policy from time to time. Material changes will be posted on our website with an updated effective date. If required by law, we will request your consent.

Contact us

Controller: SC Agents, Inc.