CL SourceBOM

Privacy Policy

Last updated: July 1, 2026

1. Who we are

Connect Logic ("we", "us") operates CL SourceBOM and acts as the data controller for personal data processed through the Service. Contact: nayyier@connect-logic.com.

2. Data we collect

  • Account data: name, email, hashed password or OAuth identifier.
  • BOM content: files you upload (CSV, PDF), reference designators, MPNs, quantities, sourcing instructions.
  • Usage data: sourcing runs, timestamps, feature interactions, error logs.
  • Device data: IP address, browser, OS, approximate location.
  • Support data: messages you send us.

3. Why we process it

  • Provide, operate, and improve the Service (contract performance).
  • Authenticate you and secure the Service against fraud and abuse (legitimate interest).
  • Enforce quotas and subscription tiers (contract performance).
  • Send transactional emails and respond to support requests (contract / legitimate interest).
  • Comply with legal obligations (legal obligation).

4. Who we share it with

  • Merchant of Record: Paddle.com handles payments, subscription management, tax, and invoicing. Paddle collects payment data directly.
  • Infrastructure and hosting: Cloud hosting and database providers under contract.
  • Distributor APIs: MPN and query strings from your BOM are sent to Digi-Key and Mouser to retrieve offers.
  • AI providers: PDF-extracted text and natural-language sourcing instructions are sent to a language-model provider (Google Gemini via Lovable AI Gateway) to parse BOMs and re-rank offers.
  • Authorities: where required by law.

5. International transfers

Some processors are located outside your country. Where personal data leaves the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses.

6. Retention

We keep account and BOM data for as long as your account is active. Deleted projects are removed within 30 days. Backups may retain data for a limited additional period. Billing records are kept as required by law.

7. Your rights

Depending on your location you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. You may also complain to your supervisory authority. To exercise your rights email nayyier@connect-logic.com; we respond within one month.

8. Security

We use encryption in transit, access controls, and industry-standard technical and organizational measures to protect your data. No system is completely secure — report suspected incidents to the address above.

9. Cookies

We use strictly necessary cookies for authentication and session management. We do not use advertising cookies. You can control cookies in your browser settings; disabling essential cookies will break sign-in.

10. Changes

We may update this notice. Material changes will be notified in-app or by email.