Effective Date: July 17, 2026 | Last Updated: July 17, 2026
Sourceably · East Amherst, New York 14051, United States
This Privacy Policy describes how Sourceably collects, uses, discloses, and protects information in connection with the Sourceably platform and related services. Please read it carefully.
This Privacy Policy (“Policy”) explains how Sourceably (“Sourceably,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information when you access or use the Sourceably websites, platform, applications, and related services (collectively, the “Services”). Sourceably is located in East Amherst, New York 14051, United States, and provides the Services from the United States.
Sourceably operates an online, workflow-based Software-as-a-Service (SaaS) platform that functions as a global customer and supplier collaboration marketplace. The Services support the publishing of requirements, RFP/RFQ/RFI processes, full-cycle contracting, award and acceptance workflows, pre-assessed vendor data and vendor evaluations, favorite lists, multi-user collaboration across distributed locations, an auditable messaging system, project resource management, invoicing, billing and payment processes, and a cybersecurity self-assessment framework together with related cybersecurity advisory services.
By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, you must not access or use the Services.
This Policy applies to: (a) visitors to our websites; (b) organizations that subscribe to the Services (“Customers”); (c) suppliers and providers who register to search requirements and submit proposals (“Suppliers”); and (d) individual authorized users acting on behalf of Customers or Suppliers (“Users”).
Where a Customer or Supplier organization uploads or controls data relating to its own personnel, counterparties, or business, that organization acts as the controller of such data, and its own privacy notice governs its relationship with those individuals. This Policy governs Sourceably’s own processing of information.
We collect the following categories of information:
We use information to: provide, operate, maintain, and improve the Services; create and administer accounts and authenticate Users; facilitate the marketplace, proposals, awards, escrow, invoicing, billing, and commission processing; enable collaboration and operate the auditable messaging system; perform vendor pre-assessment and evaluation; deliver the cybersecurity self-assessment framework and advisory services; provide customer support; ensure security, detect and prevent fraud, and enforce our agreements and policies; comply with applicable legal, tax, and regulatory obligations; and communicate with you about the Services.
Sourceably operates primarily under the data protection laws of the United States and processes and stores data in the United States. Where applicable data protection laws such as the EU or UK General Data Protection Regulation (GDPR) or Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) apply to a given individual, we process personal data on one or more of the following bases: performance of a contract; our legitimate interests in operating, securing, and improving the Services; compliance with legal obligations; and, where required, consent.
We share information as follows:
Sourceably does not sell personal information for monetary consideration.
We retain information for as long as an account is active and as needed to provide the Services. Consistent with the Sourceably Terms & Conditions, upon termination or expiration of a subscription: (a) Users retain access to the Services until the end of the paid subscription window; (b) thereafter, data is made available in read-only form for a period of three (3) months; and (c) after that three-month period, the data is permanently purged and cannot be recovered. If an organization subsequently re-registers, previously purged data will not be restored or accessible.
Notwithstanding the foregoing, Sourceably retains financial and transactional records as required by United States law, including recordkeeping periods consistent with U.S. Internal Revenue Service (IRS) expectations, and may retain other information as necessary to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements.
Sourceably is based in the United States and processes and stores information in the United States. If you access the Services from outside the United States, you understand and agree that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your jurisdiction.
We maintain administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account.
We use cookies and similar technologies to operate the Services, maintain sessions, remember preferences, support security, and analyze usage. You can manage cookies through your browser settings; however, disabling certain cookies may affect the availability or functionality of the Services.
Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent.
To exercise your rights, contact us using the details in Section 14. Where Sourceably processes data on behalf of a Customer or Supplier, please direct your request to that organization, which acts as the controller of that data. We may need to verify your identity before responding.
The Services are intended for business use and are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
The Services may link to or integrate with third-party websites, applications, and services. We are not responsible for the privacy practices or content of those third parties, and this Policy does not apply to them. We encourage you to review the privacy policies of any third parties you interact with.
We may update this Policy from time to time. Material changes will be posted with a revised “Last Updated” date, and where required by law, we will provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.
If you have questions or requests regarding this Policy or our privacy practices, contact us at:
Sourceably — East Amherst, New York 14051, United States
Email: murali.osuraman@sourceably.com | Website: www.sourceably.com