Last updated: April 24, 2026

Privacy Policy

This Privacy Policy describes how mrsupplychain.ai ("the Site"), operated by Ismael López (México), collects, uses, and protects information from visitors and users of its tools. The Site is committed to minimal data collection, transparency, and user control.

1. Information We Collect

1.1 Information you provide

When you use the SCM Practice Tools (Maturity Model, Resilience Index, Agility Diagnostic), we collect:

• Authentication data — email, display name, and profile photo provided by Google OAuth when you sign in
• Assessment responses — the answers you enter in diagnostic tools, stored privately and associated with your authenticated account
• Tool usage events — which tool you launched and when (for improving the Site)

1.2 Information collected automatically

Like most websites, the Site may collect basic technical information (browser type, approximate geographic region derived from IP, referral source) for analytics and security purposes. No personally identifying information is collected beyond what you voluntarily provide.

2. How We Use Your Information

• To provide access to the SCM Practice Tools and store your diagnostic results privately
• To improve the Site and the quality of the research content published
• To respond to direct inquiries initiated via LinkedIn
• To comply with applicable legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage and Security

Data from the SCM Practice Tools is stored in Google Firebase (Firestore and Authentication). Access is restricted by Firestore security rules: only the authenticated user can read or modify their own assessment data. No other user can access your results.

The Site uses HTTPS encryption for all data transmission. However, no online service can guarantee absolute security. Sensitive data (banking, government IDs, health records) should never be entered into any field on this Site.

4. Third-Party Services

The Site relies on the following third-party services, each with their own privacy policies:

• Google Firebase — authentication and data storage (Firebase Privacy)
• Google OAuth — sign-in flow (Google Privacy)
• Hostinger — static site hosting (Hostinger Privacy)

5. Your Rights

You have the right to:

• Access the data we have stored about you
• Correct inaccurate information in your profile
• Delete your account and all associated assessment data
• Port your data to another service
• Withdraw consent at any time by signing out and ceasing to use the tools

To exercise any of these rights, please reach out via LinkedIn.

6. Cookies and Tracking

The Site uses the minimum cookies required to operate (essential session cookies for authentication). The Site does not use advertising cookies or cross-site tracking technologies. Firebase may set cookies required for its authentication flow.

7. Children's Privacy

The Site is designed for supply chain professionals and academic researchers. It is not directed at children under 16. We do not knowingly collect information from children. If you believe a child has provided information to the Site, please contact us via LinkedIn and we will delete it promptly.

8. International Data Transfers

The Site operates from México, but uses globally distributed services (Google Firebase, Hostinger). By using the Site, you consent to your data being processed in those regions. If you are located in the European Union, we rely on standard contractual clauses or equivalent safeguards offered by our third-party providers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced on the homepage.

10. Contact

Questions, requests, or concerns regarding this Privacy Policy or your data can be directed to Ismael López via LinkedIn.