Privacy Policy

Overview

Ascension Supply Co. ("Ascension," "we," "us," or "our") operates https://www.ascensionsupply.co and related services for retail browsing and inquiries, wholesale applications and partner ordering, and an internal sales workspace for approved team members. This Privacy Policy describes how we collect, use, and share personal information when you interact with us.

We use information supplied by visitors, applicants, customers and authorized staff, information returned by our authentication provider, and technical information generated when the services are used. We use this information to operate the website, manage approved accounts and business relationships, and support orders and internal sales work.

Information we collect

The information we collect depends on how you use our services.

• Website requests and security: our hosting services may process IP addresses, requested page URLs, browser/device information and diagnostic or security logs to serve and protect the website. This does not mean every visitor has an account or has confirmed their age.
• Contact inquiries: name, email address, message content, and any information you choose to provide through our contact form or by email.
• Wholesale applications: business name, contact names, email addresses, phone numbers, business addresses, business type, trade references, and other details submitted through /apply.
• Website and wholesale accounts: account identifiers, email addresses, authentication/session tokens managed through Supabase, approved account links, order and invoice history, shipping addresses, and related account information. Existing email/phone and password methods remain available where configured. Google sign-in is described below and applies when that option is enabled.
• Future retail checkout: when online retail ordering becomes available, we will collect billing and shipping addresses, order details, payment confirmation data from our payment processor (a PCI-compliant third-party payment processor (details to be published at retail launch)), and transactional email preferences. Payment card numbers are processed by our payment provider and are not stored on our servers.
• Cookies and browser storage: authentication/session cookies, a browser-local retail bag, and a local age-confirmation preference. We do not request a date of birth or identity document through the storefront age-confirmation dialog. Reading /privacy or /terms does not set the age-confirmation preference or approve access to products.

How we use information

We use personal information to:

• Operate, maintain, and secure the website, wholesale portal and approved sales workspace
• Review and respond to contact messages and wholesale applications
• Verify sign-ins, create and manage approved accounts, connect approved team members to existing sales profiles, and process wholesale orders
• Communicate about applications, orders, invoices and account matters, and support business contacts, sales notes, follow-ups, assignments and sample requests
• Prepare for and, when launched, process retail orders and provide order support
• Comply with law, respond to lawful requests, and enforce our terms
• Improve site performance and diagnose technical issues

How we share information

We share personal information only as needed to operate our business:

• Service providers: hosting (Vercel), database and authentication (Supabase), email delivery (Resend), and — when retail checkout is live — payment processing (a PCI-compliant third-party payment processor (details to be published at retail launch)) and shipping carriers used to fulfill orders. Each provider also has its own applicable privacy and service terms; the provider settings and arrangements for a feature affect how information is handled.
• Google sign-in, when enabled: Google verifies the Google account you choose, and Supabase handles authentication and session exchange for Ascension. We use the returned identity information for account access and security, as described below.
• Internal access: approved employees and administrators can view business and sales information available through their authorized account and team views. An owner controls sales membership and wholesale approval.
• Sales assistant, when used and configured: questions, recent conversation context and selected sales-record information are sent through Vercel AI Gateway to the configured model provider, currently OpenAI. Do not put passwords, private links or other secrets into a question. This is a separate feature from Google sign-in.
• Legal and safety: when required by law, court order, or to protect rights, safety, and integrity of our operations.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to continued protection of personal information.

We do not sell or rent personal information to third parties for their marketing purposes.

Google sign-in and account approval

When Continue with Google is offered, Google and Supabase provide basic identity information such as a Google account identifier, email address and verification status, and name or profile image when supplied. Ascension uses verified identity information to sign you in, maintain your website account, connect approved account access, and protect the service. Ascension does not receive your Google password.

The Google sign-in integration is designed for basic identity permissions (openid, email and profile). It does not request access to Gmail messages, Google Drive files, calendars or contacts. We do not use the Google sign-in integration to send email or read files on your behalf.

A first Google sign-in may create a basic website profile. It does not automatically make you a sales rep, wholesale buyer or owner. Sales access requires an owner-approved link to an existing sales profile; wholesale access requires the appropriate approved account. Existing sales assignments and history belong to that sales profile, not to a newly created Google login.

You can manage Ascension’s Google connection in your Google Account’s third-party connections settings. Removing that connection does not itself delete Ascension business records or necessarily end existing Ascension sessions. Sign out on your devices and contact us for account-access or deletion requests.

Sales accounts, work records and device access

Approved team members use a dedicated sales database, separate from the website’s authentication and commerce database. Records can include the member’s name, phone number or email where provided, display preferences, access status, links to website accounts, and business contacts, notes, visits, assignments, follow-ups, samples, orders and saved account pricing. Authorized team views can include shared business records; they are not limited in every case to one rep’s assignments.

Existing private sales sign-ins also use device labels, session creation/expiry/revocation records, hashed session or activation tokens, access audit records and security/rate-limit counters. Where a sales password has been configured, the sales system stores a password hash rather than the plaintext password. Private sales device sessions can last up to 90 days unless signed out or revoked; this is not a guarantee about Google or website-session duration.

Disabling access and deleting work records are different actions. Access records, business history or audit information may need to be retained after a person stops using the portal, subject to the retention purposes below.

Optional sales assistant

If an approved user asks the sales assistant a question, the service can send that question, recent conversation messages and a limited relevant sales snapshot to the model provider through Vercel AI Gateway. This may include business names, notes, follow-ups, assignments, prices or sample/order details. Some contact and link patterns are filtered, but this does not guarantee that every item of personal information is removed.

The current application keeps the conversation in browser memory and does not save the conversation as a sales-database chat history. It does maintain usage/security counters. Hosting, gateway and model-provider processing or retention are separate from the application’s database behavior; clearing the chat is not a promise that all provider-side records are deleted.

Data retention

We retain personal information for as long as needed to fulfill the purposes described in this policy, unless a longer period is required by law.

Your choices and rights

You may contact us to request access to, correction of, or deletion of personal information we hold about you, subject to legal and operational requirements.

Approved users can update the information made editable in their portal. Contact us for other corrections, access changes or deletion requests. Removing a Google connection, signing out, or revoking sales access does not automatically delete orders, notes, audit records or other business history.

Children

Our products are intended for adults 21 and older. Privacy and terms notices are publicly readable without age confirmation or login; technical requests for those pages may still be processed by the hosting service. If you believe we hold personal information from someone under 21 inappropriately, contact us so we can review the information and take appropriate action.

Security

We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Third-party links

Our website may link to third-party sites. We are not responsible for the privacy practices of those sites. Review their policies before providing personal information.

Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the latest revision. Material changes will be posted on this page before they take effect.

Contact

Questions about this Privacy Policy or our data practices may be directed to info@ascensionsupply.co.

Ascension Supply LLC

825 N Federal Hwy, Fort Lauderdale, FL 33304