ChemicalsIQBack to the app

Privacy Policy

ChemicalsIQ by StackSutra.ai · Last updated 10 November 2026

1. Who we are

ChemicalsIQ is operated by StackSutra.ai. This policy explains what we collect, why, who we share it with, and the choices you have.

2. What we collect

• Account: name, company, email address and a salted hash of your password (we never store the password itself). If you use Google sign-in, your Google name and verified email.
• Chats: your questions, the answers and the results shown, so you can reopen a chat.
• Uploaded order lists: the files you upload and the table we read from them.
• My chemicals: the chemicals you save.
• Link clicks: which supplier link you opened, for which chemical, when, and your IP address. We use it for analytics and to improve results.
• Technical data: a session cookie, and basic server logs (IP address, time, page).

3. Email codes

To verify your email or sign you in we send a 6-digit code. It is valid for 10 minutes, allows 5 tries, and we store only a keyed hash of it, not the code.

4. Cookies

We set one signed session cookie to keep you signed in. It is needed for the service to work. We do not use advertising cookies.

5. How long we keep data

• Chats are deleted after 30 days without activity, unless you mark them as kept. You can delete a chat at any time.
• Uploaded files stay until you delete them.
• Click records and account data stay until you ask us to delete them or close your account.
• One-time codes expire after 10 minutes.

6. Who else sees data (service providers)

• AI language model provider: your questions and the data needed to answer them are sent to it to write answers.
• Web search provider: search queries about chemicals and suppliers.
• PubChem (US National Library of Medicine): chemical names and CAS numbers used to look up identity and hazard data.
• Email provider: your email address and the code message.
• Supplier websites: when you click a link you leave our service and their policy applies.
• Google: only if you choose Google sign-in.
• We do not sell your personal data.

7. Security

Passwords are hashed with scrypt, sessions are signed, and traffic uses HTTPS. No system is perfectly secure; please use a strong, unique password.

8. Your rights

• Ask what data we hold about you, and ask for a copy.
• Correct or delete your data, or close your account.
• Object to or limit some uses, and withdraw consent where we rely on it.
• Complain to your local data-protection authority.
• To use any of these, write to the contact address below.

9. Children

The service is for business and professional use and is not meant for children.

10. Changes

We may update this policy. The date at the top shows the latest version.

11. Contact

Privacy questions: info@stacksutra.ai.