Privacy Policy

1. Information We Collect

• Account data: name, email address, login metadata, and encrypted authentication credentials.
• Workspace data: items, quantities, locations, photos, serial/lot records, and activity history.
• Usage and diagnostics: IP address, browser/device info, page visits, crash and error data.
• Billing records processed by Stripe for subscriptions and invoices.

2. How We Use Your Information

• Provide and secure the service, including authentication, syncing, and notifications.
• Operate customer support and respond to product, billing, or security requests.
• Improve reliability and performance through product analytics and diagnostics.
• Process subscription billing and account management.

3. Information Sharing

We do not sell personal data. We share information only with service providers required to run StockZip, such as:

• Supabase for database and authentication infrastructure.
• Stripe for payments and subscription billing.
• Sentry for error monitoring and diagnostics.
• Google for analytics and optional OAuth login.
• Email delivery providers for account emails and notifications.

4. Data Retention

Active account data is retained while your account remains active. If you delete your account, we delete workspace data within 30 days, subject to legal obligations and backup retention windows. Backups are retained on a rolling basis for up to 30 days.

5. Your Rights and Choices

• Access, correct, or export your account and workspace data.
• Request account deletion from Settings > Profile.
• Control optional analytics or marketing communication preferences where available.

6. Security Measures

We use TLS in transit, encrypted storage at rest, tenant-isolated access controls, and audit logging. Learn more on our Security page.

7. Cookies and Tracking

StockZip uses essential cookies for authentication and session continuity. We may also use diagnostics and analytics tools to understand product usage and stability.

8. Children's Privacy

StockZip is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

9. International Transfers

Data may be processed in the United States and other jurisdictions where our service providers operate. We apply contractual and technical safeguards where required by law.

10. Changes to This Policy

We may update this Privacy Policy over time. Material changes will be communicated in-product or by email before they take effect.

11. Contact

For privacy questions or requests, contact privacy@stockzip.app.