LEGAL

Privacy Policy

Effective August 16, 2026

Privacy at a glance

Stocpile provides inventory management, analytics, alerts, billing, and optional sales-channel integrations. This notice explains what personal information we collect, why we use it, who receives it, how long we keep it, and the choices available to you.

We do not sell personal information.
We do not share personal information for cross-context behavioral advertising.
We do not currently use advertising or cross-site tracking cookies.
Stripe processes card details; Stocpile does not store card numbers, CVCs, or expiration dates.

Who is responsible for your information

Stocpile is the product name used for this service. The repository does not currently contain a verified legal operator name, mailing address, or privacy-request contact method. Those details must be added before the service is publicly launched.

When a business customer places personal information into its inventory workspace, that customer determines why the information is used and Stocpile generally acts as its service provider or processor. Requests about customer-controlled workspace data may need to be directed to that customer.

Information we collect

Account and identityEmail address, account identifier, authentication status, and account metadata you provide.

Workspace and inventoryItem names, SKUs, quantities, prices, costs, notes, groups, history, alerts, and settings.

BillingCompany and billing contact details, billing address, Stripe customer identifiers, subscription status, and invoice preferences.

Connected servicesIf you connect Square or another supported service, account, location, catalog, mapping, and synchronization information needed to operate that connection.

Device and usageThe deployed service and its infrastructure providers may generate IP address, browser and device details, timestamps, security events, request logs, and error information when you use Stocpile.

How and why we use information

We use personal information to:

create and secure accounts, authenticate users, and provide the requested service;
store, display, analyze, import, export, and synchronize inventory information;
process subscriptions, provide receipts, and maintain billing records;
display service, security, billing, and user-requested alerts inside the app;
prevent fraud, investigate abuse, debug errors, and protect Stocpile and its users;
comply with legal, accounting, tax, and regulatory obligations; and
improve reliability and product performance using aggregated or operational information.

Where GDPR-style laws apply, our legal bases are performance of our contract with you, compliance with legal obligations, our legitimate interests in operating and securing the service, and consent where we specifically request it. Stocpile does not make solely automated decisions that produce legal or similarly significant effects about users.

We disclose information only as needed to:

Supabase, which provides authentication, database, and related infrastructure;
Stripe, which provides subscription checkout, payment processing, invoices, and billing management;
Square or another integration provider, only when you connect that provider;
hosting, font delivery, security, logging, and technical service providers used by the deployed app;
professional advisers, authorities, or other parties when required by law or necessary to protect rights and safety; or
a successor in a merger, financing, acquisition, reorganization, or sale, subject to appropriate safeguards.

Stocpile does not sell personal information or share it for cross-context behavioral advertising.

Cookies and local storage

Stocpile currently uses only storage necessary to operate the service or remember choices. This includes Supabase authentication session information, interface view preferences, alert-read status, notification preferences, and your acknowledgment of this privacy notice. We do not currently use advertising cookies or cross-site tracking technologies. Stripe and connected services may use their own necessary technologies when you visit their hosted pages.

Because no optional advertising or analytics storage is currently deployed, there is no “accept all” control. If optional tracking is introduced, Stocpile will update this notice and provide consent or opt-out controls before activating it where law requires.

Retention

The current product does not publish fixed retention periods or provide a verified self-service account-deletion process. Account and workspace information may remain while an account exists, and provider logs or backups follow the settings and schedules of the providers used by the deployed service. A documented retention and deletion process must be configured before public launch.

Your privacy rights

Depending on where you live, you may have rights to know or access information, correct it, delete it, restrict or object to processing, receive a portable copy, withdraw consent, and opt out of sale, targeted advertising, or certain profiling. You will not receive discriminatory treatment for exercising a privacy right.

The app does not currently publish a verified channel for submitting or appealing a privacy request. That channel must be configured before public launch. You may also complain to your local data-protection or consumer-protection authority. Because Stocpile does not currently sell or share personal information for targeted advertising, no separate sale/share opt-out is necessary.

International processing

Stocpile and its providers may process information in the United States and other countries. The repository does not establish which international-transfer safeguards apply to a particular production deployment. The operator must verify and document those safeguards before serving users in jurisdictions that require them.

Security

We use administrative, technical, and organizational safeguards designed to protect information, including authenticated access, database policies intended to scope records to the correct user, restricted server credentials, and Stripe-hosted payment collection. These safeguards depend on correct production configuration. No system is completely secure, so we cannot guarantee absolute security.

Children

Stocpile is a business inventory service and is not directed to children under 13. We do not knowingly collect personal information from children.

Changes

We may update this notice when the product, providers, or legal requirements change. Material changes will be highlighted in the service or through another appropriate communication. The effective date identifies the current version.