Privacy Policy

Focus Network (“we,” “us,” or “our”) operates the Focus Network platform (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using the Service, you agree to the practices described herein.

1. Information We Collect

1.1 Information You Provide

• Account information: When you register, we collect your email address, full name, and a hashed version of your password. We never store your password in plain text.
• Profile information: You may provide your job role, industry, company size, region, a short bio, and an avatar image.
• KPI and benchmarking data: When you submit supply chain KPIs for benchmarking, we collect the values, units, and contextual metadata (industry, company size, region, period). This data is aggregated and anonymized for benchmarking purposes.
• Community content: Posts, comments, and votes you contribute to community discussions.
• Communications: Messages you send us through support channels or feedback forms.

1.2 Information Collected Automatically

• Usage data: Pages visited, features used, timestamps, and interaction patterns to improve the Service.
• Device and browser data: IP address, browser type, operating system, and device identifiers.
• Cookies and similar technologies: We use essential cookies for authentication and session management. See Section 6 for details.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Generate anonymized, aggregated benchmarking data and percentile rankings
• Deliver personalized recommendations and AI-powered advisory features
• Send transactional emails (e.g., email verification, password resets)
• Monitor and analyze usage trends to improve functionality
• Enforce our Terms of Service and protect against misuse
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

• Aggregated and anonymized data: Benchmarking results are displayed only in aggregate. Individual company data is never identifiable in benchmark outputs.
• Service providers: We work with third-party providers that help us operate the Service, including Vercel (hosting), Supabase (database), Resend (email delivery), and Anthropic (AI features). These providers access data only as needed to perform their services and are bound by contractual obligations to protect your information.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., anonymized aggregate data that can no longer be linked to you).

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Passwords are hashed using bcrypt before storage
• All data is transmitted over HTTPS/TLS encryption
• Database access is restricted and monitored
• JWT-based session tokens with secure, httpOnly configuration

While we take reasonable precautions, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

6. Cookies

We use the following types of cookies:

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled.
• Preference cookies: Store your display preferences such as theme (light/dark mode).

We do not use advertising or tracking cookies. You can manage cookies through your browser settings, but disabling essential cookies may prevent you from using the Service.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain processing activities.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at the address below. We will respond within 30 days.

8. International Data Transfers

Your information may be processed in countries other than your own. Our service providers (including Vercel, Supabase, and Anthropic) may store and process data in the United States or other jurisdictions. We ensure appropriate safeguards are in place for any cross-border data transfers.

9. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Focus Network
Email: privacy@focusnetwork.io