# Privacy policy Effective October 6, 2026 Fulment is AI quote and order automation for distributors. It reads customer emails, RFQs and purchase orders and prepares quotes and orders your team confirms. This policy explains what personal information we collect on our website and in the service, why, who helps us, and the choices you have. ## Who we are Fulment is run by Ravi Chandel and team ("Fulment", "we", "us"). For our website, demo requests and user accounts, we decide how personal information is used. For the emails, documents and ERP records a distributor connects to Fulment, we process them on that distributor's behalf and under its agreement with us. If your supplier uses Fulment and you have a question about that data, contact them first; we will help them answer. ## What we collect - Demo requests: your name, work email and company, the ERP you use if you tell us, and which link brought you to the form (for example utm_source), the landing page and referring site, and first and recent campaign context. If you allow analytics, we also retain pseudonymous analytics identifiers to connect your request to later sales outcomes. - Accounts: your work email, company, team and role. - Order inbox: emails and attachments (PDFs, scans, spreadsheets) that reach the shared order inbox your company connects, read with read-only access. These can include the names and contact details of your customers' buyers. - Uploads: purchase orders, RFQs and other documents your team uploads. - ERP data your company connects read-only: items, price lists, customer pricing, stock by location and customer part numbers. - Activity: the quotes, orders and replies your team reviews, edits or approves, with who did it and when. - Technical data: IP address, browser and pages requested, which our servers record to keep the service secure. ## How we use it - To provide Fulment: reading requests, matching items and part numbers, applying pricing, checking stock, preparing quotes, orders and replies, and watching orders until they ship. - To answer demo requests and support customers. - With analytics consent, to understand which pages and campaigns lead to demos and paying customers. - To secure the service, prevent abuse and fix problems. - To meet legal obligations and enforce our agreements. We send marketing emails only to people who ask for them, and every one has an unsubscribe link. We do not sell personal information or use it for advertising. Where the GDPR or UK GDPR applies, we rely on our contract with the customer, our legitimate interest in running and securing the service and answering demo requests, legal obligations, and consent where we ask for it. ## AI and your data Fulment uses an AI model provider to read emails and documents and prepare drafts. The provider processes that content only to return results to Fulment. Your data is never used to train AI models, ours or the provider's. Nothing is sent to a customer or written to your ERP without your team's approval. Fulment cites the source of every value so your team can check it, and no decision that affects a person is made by AI alone. ## Google user data If your company connects a Gmail or Google Workspace inbox, Fulment reads its emails and attachments with read-only access to prepare quotes and orders. Fulment's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. It is not used to train generalized AI models, not sold, and not used for advertising. ## Who helps us We share personal information only with providers that help us run Fulment, such as hosting, AI processing and email services, under contracts that limit them to that work. The main ones are: - Amazon Web Services: hosting, database and file storage. - OpenAI: AI processing of emails and documents. - Google: the Gmail API, when a customer connects a Google inbox; Google Analytics for website measurement when you allow it. We may also disclose information when the law requires it, to protect people's safety or our rights, or in a merger or acquisition, where it stays covered by this policy. ## Cookies We use only the cookies the service needs: one that keeps you signed in and a short-lived one that protects the sign-in step. Google Analytics measures our public pages. In the US and India, analytics may load without a prompt unless you reject it or your browser sends a privacy signal. Elsewhere, or when your location cannot be identified, analytics loads only after you choose Allow. It measures page visits, campaign sources, button clicks and successful demo requests using analytics cookies. Advertising storage and personalization remain disabled. We do not send names, email addresses, company names or form contents to Google Analytics. You can reject analytics and still book a demo, or change your choice through Analytics preferences in the footer. We remember your choice for 180 days and, when analytics is enabled, campaign context for up to 90 days. When analytics is disabled, your browser tab remembers demo-link and campaign context only until you close it. ## How long we keep it We keep personal information only as long as we need it for the purposes in this policy. Account data lasts as long as the account. Demo requests are kept while they are useful to us, and you can ask us to delete yours at any time. Customer data is kept while the customer's agreement runs and is deleted when the customer asks us to or the agreement ends. Server logs expire on our hosting provider's schedule, and we keep records the law requires, such as invoices, for as long as it requires. ## Security and storage Your data is encrypted, kept separate from every other company's, and accessed only by people who need it. Fulment starts with read-only access to your inbox and ERP. Data is stored with Amazon Web Services in India (Mumbai). If we move it to another region, such as the United States, we will update this policy first. Our providers may process it in other countries, including the United States, with standard contractual clauses or an equivalent safeguard where the law requires. If a breach affects your data, we will tell you promptly. ## Your rights Depending on where you live, you can ask what personal information we hold about you, get a copy in a portable format, correct it, delete it, or object to how we use it, and withdraw consent at any time. Email saket@digitalregister.in; we answer within 30 days. California residents also have the right to opt out of the sale or sharing of personal information; we do neither. In the EEA or UK you can complain to your data protection authority. Fulment is for businesses and not meant for anyone under 16. ## Other sites and Do Not Track Our site may link to other sites. Their own privacy policies apply there. Because there is no common standard for browser Do Not Track signals, we do not respond to them; our public pages do not track you across sites either way. ## Changes and contact We will post any change here with a new effective date, and email customers before a material change takes effect. Questions: saket@digitalregister.in.