Deployment policy draft · operator identity, retention periods and jurisdiction must be configured before public launch.
Information stored
The service records account names and email addresses, password hashes, session metadata, organization memberships and inventory records entered by members. Uploaded photos and documents are stored privately. Audit records include actor identifiers, timestamps and changes.
Use and access
Data supports authentication, inventory operations, support and recorded billing. Workspace access is controlled by organization membership and role. Platform administrators can administer accounts and billing. No customer information is embedded in QR codes.
Optional services
If a vision provider is configured, an authorized photo is sent only after the user requests a suggestion and confirms consent. Email is delivered through the configured SMTP provider. External payment checkout is not enabled.
Your account
Account settings provide a profile export and account deletion. Organization owners must transfer ownership before deleting their account. Profile identifiers are pseudonymized; organization business records and immutable audit records are retained. The operator must establish a documented retention policy and process for organization data erasure before public production use.
Contact
Use the contact form to submit a privacy request to the operator. This policy does not claim legal certification.