Privacy Policy

1. Introduction

Welcome to Stash ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our inventory management service.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account Information: Name, email address, password
• Organization Information: Company name, business details
• Inventory Data: Items, stock levels, locations, purchase orders
• Payment Information: Processed securely by Stripe (we do not store card details)
• Usage Data: How you interact with our service, features used

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our inventory management service
• Process your transactions and manage your subscription
• Send you technical notices, updates, and support messages
• Respond to your comments and questions
• Analyze usage patterns to improve our service
• Detect, prevent, and address technical issues or fraudulent activity

4. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL) with industry-standard encryption. We implement appropriate technical and organizational measures to protect your personal information, including:

• Row-level security policies to ensure data isolation between organizations
• Encrypted data transmission (HTTPS/TLS)
• Regular security audits and updates
• Secure authentication via Supabase Auth

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: Stripe (payment processing), Supabase (hosting), Vercel (hosting)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Your Rights (GDPR & CCPA)

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your inventory data at any time
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at privacy@stash.com

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal purposes.

8. Cookies and Tracking

We use essential cookies to maintain your session and provide core functionality. We do not use third-party advertising or tracking cookies. You can control cookies through your browser settings.

9. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@stash.com