Privacy Policy

1. Information We Collect

• Account data: name, email address, login metadata, and encrypted authentication credentials.
• Workspace data: items, quantities, locations, photos, serial/lot records, and activity history.
• Usage and diagnostics: IP address, browser/device info, page visits, crash and error data.
• Billing records for subscriptions and invoices, processed by Stripe (web purchases), the Apple App Store (iOS in-app purchases), or Google Play (Android in-app purchases).

2. How We Use Your Information

• Provide and secure the service, including authentication, syncing, and notifications.
• Operate customer support and respond to product, billing, or security requests.
• Improve reliability and performance through product analytics and diagnostics.
• Process subscription billing and account management.

3. Information Sharing

We do not sell personal data. We share information only with service providers required to run StockZip, such as:

• Supabase for database and authentication infrastructure.
• Stripe, the Apple App Store, and Google Play for payments and subscription billing.
• Sentry for error monitoring and diagnostics.
• Google for analytics, advertising measurement and optional OAuth login.
• AI assistant providers only when you choose to connect StockZip to an assistant such as ChatGPT or Claude.
• Email delivery providers for account emails and notifications.

4. Data Retention

Active account data is retained while your account remains active. If you delete your account, we delete workspace data within 30 days, subject to legal obligations and backup retention windows. Backups are retained on a rolling basis for up to 30 days.

5. Your Rights and Choices

• Access, correct, or export your account and workspace data.
• Request account deletion from Settings > Profile.
• Control optional analytics or marketing communication preferences where available.

6. Security Measures

We use TLS in transit, encrypted storage at rest, tenant-isolated access controls, and audit logging. Learn more on our Security page.

7. Cookies and Tracking

StockZip uses essential cookies for authentication and session continuity. We may also use diagnostics and analytics tools to understand product usage and stability.

When you arrive from one of our ads, we keep the ad click reference (such as Google's click ID) and the campaign tags for up to 90 days, and store them with your account if you sign up, so we can see which ads bring new customers and report sign-up results back to Google Ads.

If you visit from the UK, the European Economic Area, Switzerland, Guernsey, Jersey, the Isle of Man or Gibraltar, we ask first. Google Analytics (site analytics) and our ad measurement (which of our Google ads led to a sign-up) are only used after you choose Accept. We do not use your data to personalise ads. You can change your choice at any time with "Cookie settings" at the bottom of our website or under the log-in and sign-up forms.

• sz_consent — remembers your cookie choice and when you made it; 6 months.
• sz_region — tells the page whether to ask about cookies; ends when you close the browser.
• sz_ad — the ad click reference and campaign tags described above; 90 days.
• _ga and _ga_… — Google Analytics; up to 2 years; only after Accept where we ask.
• _gcl_… — Google Ads click cookies, set by Google when you arrive from one of our ads; up to 90 days; only after Accept where we ask.

Google's use of data from sites that use its services is explained at https://policies.google.com/technologies/partner-sites

8. Children's Privacy

StockZip is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

9. International Transfers

Data may be processed in the United States and other jurisdictions where our service providers operate. We apply contractual and technical safeguards where required by law.

10. AI Assistants and Connected Apps

If you choose to connect StockZip to an AI assistant such as ChatGPT or Claude, you authorize the assistant to read or change inventory on your instructions, within the permissions of your StockZip role.

For a request, the assistant may receive the StockZip records returned by the connector, including names, SKUs, barcodes, quantities, minimum levels, prices, notes, folders, photo links, and dates. Cost prices are included only when your StockZip role permits access to them.

StockZip does not receive or store your full conversation. We receive only the tool request the assistant sends to carry out your instruction, such as an item lookup, a quantity, or a note, and process or store it like the same action made in the StockZip app.

Inventory changes use your connected StockZip login, so the activity log records your name. You can disconnect in the assistant or in StockZip Settings under Integrations and Connected AI apps; access ends within about an hour. The assistant provider handles your conversation under its own privacy policy.

11. Changes to This Policy

We may update this Privacy Policy over time. Material changes will be communicated in-product or by email before they take effect.

12. Contact

StockZip is operated by SIMPLIFY STANDARDS SDN BHD, A-5-9, Level 5, Block A, Empire Tower, Jalan SS16/1, SS 16, 47500 Subang Jaya, Selangor, Malaysia, which is the controller of the personal data described in this policy. For privacy questions or requests, contact contact@stockzip.app.