Privacy Policy

Introduction

ChemAbout (hereinafter referred to as "we" or "ChemAbout") respects your privacy. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use the ChemAbout platform. ChemAbout is currently in preview; an operating entity and the data-protection framework applicable to it will be announced before any commercial launch. This Policy should be read together with our Terms of Service. By using our services, you acknowledge that we will process your information as described in this Policy.

Information Collection

We collect the following types of information to provide and improve our services:

• Account Information: including your email address, password (encrypted), and other registration details
• Company Information: including company name, country/region, and company website
• Product Information: product names, CAS numbers, and other chemical-related information you publish
• Usage Information: including login times, operation records, and other service usage data

Information Usage

We use the collected information for the following purposes:

• Supply-Demand Matching: match you with potential business opportunities based on your product information
• Communication: provide contact information to relevant parties after your authorization
• Service Improvement: analyze usage data to optimize our services
• Security: detect and prevent fraud, abuse, and other violations

Legal Bases for Processing

Where applicable law (such as the EU/UK GDPR or the China PIPL) requires a legal basis for processing your personal information, we rely on the following bases: performance of the contract with you when providing account, matching, notification, and platform services; our legitimate interests in operating, securing, improving, and promoting the platform, preventing fraud and abuse, and conducting verification and risk-control activities; compliance with legal obligations to which we are subject, including sanctions, export-control, anti-money-laundering, and tax obligations; and your consent where such consent is required and has been obtained, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

Automated Decisions and Matching

Our supply-demand matching uses automated logic — based on product names, CAS numbers, mixture components, regions, market coverage, and other information you provide — to surface potentially relevant counterparties and opportunities. These matching results are recommendations only and do not produce legal or similarly significant effects on you; you decide whether and how to contact any counterparty, and all transactional decisions remain with you. We also apply automated checks for fraud, sanctions exposure, and abuse signals to protect the platform; where such checks materially restrict your access to the services, you may request human review by contacting us.

Verification, risk review, and platform integrity

We may use account, company, website, registration, product, purchase request, contact, login, activity, report, and submission history information to verify identity, assess business legitimacy, prevent fraud and abuse, enforce our Terms, protect users, maintain platform integrity, and support dispute or incident handling.

Accuracy and correction

You are responsible for keeping the personal and business information you provide accurate and up to date. We may ask you to correct, update, verify, or remove information that appears inaccurate, outdated, incomplete, unauthorized, or inconsistent with platform records.

Legal, safety, and compliance disclosures

Where required or permitted by applicable law, or where reasonably necessary to protect ChemAbout, our users, or the public, we may preserve and disclose relevant information to regulators, law enforcement, courts, professional advisers, service providers, affected parties, or other appropriate recipients in connection with suspected fraud, unlawful activity, safety risks, rights violations, disputes, or Terms enforcement.

Information Sharing

We do not sell your personal information. We share information only as follows: with counterparts you have authorized in order to enable supply-demand matching and direct business communication; with the service providers described below who help us operate, secure, and support the platform; in connection with legal obligations and government requests, distinguishing between mandatory compulsion (such as court orders, subpoenas, or other legally binding requests) and discretionary cooperation (which we evaluate against the legitimate interests of users); to protect the rights, safety, integrity, or property of ChemAbout, our users, or third parties, including in connection with suspected fraud, sanctions screening, or abuse; and in connection with a corporate transaction such as a merger, acquisition, financing, or reorganization, subject to appropriate confidentiality safeguards.

Service Providers and Processors

We rely on trusted third-party service providers to operate, host, and support the platform. These include: cloud infrastructure and edge-compute providers that host the application, databases, and uploaded files; transactional email providers used to send account, security, and notification messages; identity-verification, sanctions-screening, and risk-control tools where applicable; and customer-support and analytics tools where applicable. These providers act on our instructions, are bound by confidentiality and data-protection obligations, and are not permitted to use your personal information for their own marketing purposes. We can provide additional information about the categories of providers we use upon reasonable request.

International Data Transfers

ChemAbout uses cloud infrastructure and service providers that are not tied to any single country to deliver and secure the platform. Your information may be transferred to, stored in, or processed in jurisdictions outside your home country, including jurisdictions that may not provide the same level of data protection as your local laws. The platform is currently in preview; once an operating entity is announced, we will publish the cross-border data-transfer safeguards applicable to it. In the meantime, you may contact us with any questions about how your information is handled.

Data Security

We apply technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, loss, or destruction. These measures include encryption in transit (HTTPS/TLS), encryption at rest for uploaded files and sensitive data fields, salted and hashed password storage, role-based access controls and least-privilege principles for internal access, audit logging for security-relevant operations, automated abuse and intrusion detection, and periodic review of our security controls. No method of internet transmission or electronic storage is completely secure; while we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Security Incident Notification

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and affected users in accordance with applicable law, and, for jurisdictions such as the EU/UK, generally within 72 hours of becoming aware of the breach where required. Notifications will describe, to the extent known, the nature of the incident, the categories of data and users affected, the measures we have taken to address the incident, and the steps you can take to mitigate any potential harm.

Data Retention

We retain personal information only for as long as it is needed for the purposes described in this policy, including providing services, security, fraud prevention, dispute handling, legal compliance, and audit. Account deletion requests are reviewed before completion; after approval, we delete or anonymize personal information within 30 days where practicable, unless a longer retention period is required or permitted by law. Security logs, consent records, and minimal audit records may be retained for compliance and platform integrity, and then deleted or anonymized when no longer necessary.

Uploaded files and attachments

Files you upload for assisted onboarding or related support requests may be stored securely by us or our service providers and linked to your account or request record. When an account deletion request is approved, we will delete associated attachments unless we must retain limited records for legal, security, dispute, fraud-prevention, or compliance reasons.

Your Rights

You have the following rights regarding your personal information. We will honor these rights to the extent they apply to you under the data-protection law of your jurisdiction:

• Right of access: you can view the personal information we hold about you.
• Right to rectification: you can update or correct inaccurate or incomplete information.
• Right to deletion: you can request deletion of your account and related personal data, subject to legal retention requirements.
• Right to data portability: you can request a machine-readable export of your personal data.
• Right to object and to restrict processing: you can object to processing based on legitimate interests and ask that we restrict processing while a request is under review.
• Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing already carried out.
• Right to lodge a complaint: where applicable in your jurisdiction, you may file a complaint with the competent data-protection or privacy authority.

Data subject requests

You may submit requests relating to your personal data through your account or by contacting us. We will verify the requester before disclosing, exporting, correcting, or deleting personal data.

• Request process: we record the request type, status, requester, due date, and outcome so that privacy requests can be tracked and audited.
• Data export: logged-in users may request a machine-readable export of account, company membership, purchase request, matching, notification, security, feedback, supplier lead, and onboarding request data associated with them.
• Account deletion: deletion requests are first recorded as pending for administrator review. We review company ownership, active requests, R2 attachments, D1 records, security records, and any legal retention requirements before deleting or anonymizing data.
• Verification: we may ask for additional information where reasonably needed to confirm that the requester is the data subject or an authorized representative.
• Limits and retention: some records may be retained, restricted, or anonymized instead of deleted where required or permitted for legal claims, security, anti-abuse, accounting, audit, or regulatory compliance.

Children and Minors

ChemAbout is a business-to-business platform intended for enterprises, professional users, and their authorized representatives. We do not knowingly direct our services to, or knowingly collect personal information from, individuals under the age of 18 (or the higher minimum age required by applicable law in your jurisdiction). If we become aware that we have collected personal information from a minor without appropriate authorization, we will take reasonable steps to delete such information.

Browser storage and similar technologies

We use necessary browser storage and similar technologies to provide core platform functions, such as keeping you signed in, protecting your account, and remembering basic preferences. If we introduce non-essential analytics, advertising, or similar tracking technologies, we will provide additional notice and choices where required by applicable law.

• Essential storage: used to operate login, security, and authenticated platform features.
• Preference storage: used to remember basic interface settings you choose.
• Non-essential tracking: not currently used for third-party advertising or similar tracking; future use will be disclosed with appropriate choices where required.

Cookie Policy

We use cookies and similar technologies to provide, protect, and improve our services. You can manage cookies through your browser settings, but this may affect the use of certain features.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, or applicable laws. Updated versions will be published on this page and the "Last Updated" date will be revised accordingly. For material changes that adversely affect your rights, we will provide reasonable advance notice through in-product notification or email before the changes take effect. Your continued use of the services after the effective date constitutes acknowledgement of the updated Policy; if you do not agree, you should stop using the services.

Contact Us

If you have questions about privacy matters or wish to access, correct, or delete your data, please contact us at [email protected]. We will respond and act on your request within a reasonable time. The platform is currently in preview; data handling processes will be further formalized once the operating entity is established.