Draft for legal review. This text is a starting point written by the software developers, not legal advice. Have a lawyer review and adapt it, then set legalReviewed: true in site-config.js to remove this notice.
Privacy policy
operates . This describes what the software actually collects.
What we collect
- Account details: name, work email address and a salted hash of your password (never the password itself).
- Security records: sign-in sessions with IP address and browser type, and an audit log of changes made in your organisation (who, what, when).
- Business data you enter: locations, items, stock movements, users and settings.
Cookies and local storage
The app uses one strictly necessary cookie to keep you signed in, and your browser’s local storage to remember light or dark mode. This website only stores your light or dark choice. We do not use advertising or analytics cookies.
How we use it
To provide and secure the service, to send account emails (invitations, email confirmation, password reset), and to respond to support requests. We do not sell personal information.
Who processes it
Our hosting provider stores the data. Account emails are sent through an email delivery provider (SMTP2Go), which receives the recipient address and message content.
Retention, access and deletion
Audit and security records are kept as part of the service. You can ask us to access, correct, export or delete personal information at , subject to legal requirements.