Privacy Policy

Information we collect

When you request a demo, we may receive your work email address, company name, and any information you choose to include in your message. We also receive basic technical information needed to deliver and secure the website, such as browser and device details.

When you create an account, we collect your name, email address, and a securely hashed password, along with the workspace you belong to and your role in it. If you subscribe to a paid plan, our payment processor handles your card details — we never receive or store the card number itself, only the subscription and customer references needed to manage your plan.

When you use the product, we store the business records you enter: products, stock levels and movements, warehouses, purchase and sales orders, shipments, returns, price lists, and the activity log that records who changed what and when.

Information you enter about other people

Stockavo is inventory and order software, so the records you enter often include personal information about other people — typically the names, email addresses, phone numbers, and delivery or billing addresses of your customers and suppliers, whether typed in directly or brought in through a CSV import.

That information is yours. We process it only to operate the service for your workspace: storing it, showing it to the members of your workspace, and — when you choose to send a purchase order, sales order confirmation, return notice, or backorder notification — delivering that email to the supplier or customer you addressed it to, through our email provider. We do not use it to contact those people for our own purposes, and we do not sell it. You are responsible for having a proper basis to enter it and for what you send.

How we use information

We use information to respond to enquiries, arrange product demonstrations, provide and secure the product, process subscription payments, send service and transactional email, diagnose faults, and operate and improve the service. We do not sell personal information or use it for unrelated advertising.

Data storage and security

Stockavo uses Supabase and Postgres for application data, with organization-scoped access controls and row-level security so one workspace cannot read another's records. Access to the production database is limited to those who need it. We take regular database backups, held in private storage, so a workspace can be recovered after a failure, and we use reasonable technical and organizational measures to protect information — but no internet service can guarantee absolute security.

Service providers

We rely on the following providers to run Stockavo. Each processes information only as needed to provide its part of the service:

• Supabase — database, authentication, file storage, and server-side functions.
• Vercel — hosting and delivery of this website and the application.
• Stripe — subscription payments and billing. Stripe handles card details directly under its own privacy policy.
• Resend — delivery of transactional and service email, including the order emails you send from the app.
• Sentry — error and crash reporting, so faults can be diagnosed.
• UptimeRobot — availability monitoring of our public endpoints.
• GitHub — source code, and private storage of the database backups described above.

These are global cloud services, so information may be stored or processed outside the country you are located in. We will update this list as our providers change.

How long we keep information

We keep your workspace's information for as long as the workspace exists, because it is the operating record of your business. When an Owner deletes a workspace, it enters a 30-day period during which it can be restored, after which the records are permanently deleted from the live database. Backups are kept on a rolling 30-day cycle, so a deleted workspace can persist in a backup for up to a further 30 days before ageing out. Demo enquiries are kept only as long as needed to respond and keep a record of the conversation.

Your choices

An organization's Owner can permanently delete that organization and all of its data directly from the app's Settings page, with a 30-day period to change their mind before it's final. For anything else — accessing, correcting, or deleting personal information outside that flow, or a request from someone who isn't an Owner — contact us at hello@stockavo.shop, subject to legal and operational requirements.

Changes to this policy

We may update this policy as the product or legal requirements change. The date at the top of this page shows when it was last revised.

Contact

Questions about privacy can be sent to hello@stockavo.shop.