1. Information We Collect

Account information: Email address, company name, and display name provided at registration.

Inventory data: Product descriptions, UPCs, quantities, prices, conditions, and pallet session details you enter or scan.

Usage data: Basic analytics on feature usage to improve the product. We do not use third-party analytics trackers.

Contact form submissions: Name, email, company, and message when you reach out through our website.

2. How We Use Your Information

• To provide and operate the StockIntake service
• To sync your data across devices via Google Firebase
• To improve product lookup accuracy through our shared UPC library
• To respond to support requests and contact form submissions
• To send important account and service notifications

3. Shared UPC Library

When a product is successfully identified from a barcode, the product information (description, brand, category, estimated pricing) is stored in our shared product database. This helps all users get faster, more accurate results. This data contains no personal information, no business names, and no pricing you entered — only publicly available product catalog data.

4. Data Storage and Security

Your data is stored in Google Firebase (Firestore), which provides enterprise-grade security, encryption at rest, and SOC 2 compliance. We use Firebase Authentication for secure login with industry-standard password hashing. We never store payment card information — that is handled by Stripe, which is PCI-DSS compliant.

5. Data Sharing

We do not sell, rent, or share your personal information or business data with third parties, except:

• Service providers: Google Firebase (data storage), Stripe (payments), Netlify (hosting). These providers are bound by their own privacy policies and data processing agreements.
• Legal requirements: If required by law, court order, or to protect our rights.
• Business transfer: In the event of a merger or acquisition, with notice provided to users.

6. Third-Party Product Lookup

To identify products, we query third-party services including eBay, UPCitemdb, Go-UPC, and Google Gemini AI. UPC codes are sent to these services for lookup. We do not send any personal or business information to these services.

7. Your Rights

You have the right to:

• Access all data we hold about your account
• Export your inventory data at any time via the Excel/CSV export
• Request deletion of your account and associated data
• Correct inaccurate account information

To exercise these rights, contact us through the contact form.

8. Data Retention

Your account and inventory data is retained for as long as your account is active. Upon account deletion, your personal data and private inventory data is permanently deleted within 30 days. Product catalog data you contributed to the shared UPC library may be retained as it contains no personal information.

9. Cookies

StockIntake uses only essential cookies and browser localStorage for authentication and application state. We do not use advertising cookies or third-party tracking pixels.

10. Children's Privacy

StockIntake is a business tool not intended for users under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this policy periodically. We will notify users of significant changes via email and update the "Last updated" date above.

12. Contact

For privacy questions or data requests, reach us through the contact form on our website.