Crate SupplyFree spend audits
When you submit an audit, we collect your name, work email, company, industry, purchasing line items, and consent choices. A preview stays in your browser until you submit. We store parsed purchasing fields and generated reports. Original CSV files are not retained; uploaded PDF and photo invoices are retained for manual review. Audits are accessible to Crate Supply platform administrators for review.
Report links and retention
Reports are retained in the audit system for 30 days, after which the audit record, its purchasing lines, and uploaded invoice attachments are removed. Anyone with your private report link can view that report, so share it carefully. Downloaded or emailed copies remain wherever you or your recipients save them. Cloudflare keeps standard security logs under its own policies.
Email and follow-up
Your report request authorizes delivery and necessary communication about that audit. A separate optional checkbox lets you request a savings discussion. It is not required to run an audit. You can also download your report from the report page. You can decline further follow-up by contacting info@cratesupply.ai.
Client purchasing
Client price files become workspace-specific product records. Budgets, user limits, purchase requests, approval decisions, and supplier email status are stored on the server. Explicit PO sending shares the approved order, delivery address, and buyer contact with the supplier. Approval notifications go to assigned workspace members. Email acceptance is not proof that a supplier accepted the purchase.
Client workspaces and demos
Real accounts use password hashes, session cookies and workspace memberships. Client workspace records are stored separately from the public demo. Workspace data does not use the audit service’s 30-day expiration; contact us to request removal. The demo uses sample data and browser storage, and does not give access to client workspaces.
Demo requests and questions
When you use the Book a demo or contact form, we collect the details you enter: your name, work email, optional phone, organization, job title, industry, number of locations, optional spend range, interests, how you heard about us and your message, plus the country your request came from. We store them in our account system and email them to info@cratesupply.ai so we can reply. Only Crate Supply administrators can see them. We keep them for up to two years, or until you ask us to delete them.
Website measurement
We count how many visits reach the Book a demo and free audit pages, how many start each form and how many finish. These are anonymous daily totals: we don’t use cookies for this and we don’t store IP addresses or anything that identifies you. Totals are kept for about 13 months. Cloudflare Web Analytics also measures page views without cookies.
Service providers
Cloudflare hosts the website and account/audit storage. Google Workspace sends our emails from info@cratesupply.ai. Report emails include your report’s purchasing summary and contact address. Free-audit invoice data is not automatically sent to retailer search providers. Audit calculations don’t use an external AI service.
Customer quotes
Client workspaces store customer names and email addresses, quoted items, internal costs, markups, and delivery status. Authorized workspace users can access these records. Customer exports and emails include selling prices and the creator’s contact email, but omit internal costs, markups, and profit. When a user sends a quote, the configured email provider processes the customer-facing content and recipient address. Demo quotes remain in browser storage. Quote records remain with the client workspace until removed through an administrator-assisted deletion request.
What not to upload
Do not upload patient or customer records, payment-card details, bank details, passwords or unrelated personal information. This audit intake is for supply purchasing data. It is not a clinical record system.
Corrections, access and deletion
Email info@cratesupply.ai with your report ID or workspace name to request a correction, ask how your data is used, or request deletion. We confirm you’re authorized before we change or share any record.