Privacy Policy

1. Introduction

This Privacy Policy explains how ClerStock ("we", "our", "us") collects, uses, and protects information when you use the Service. By using ClerStock, you agree to the practices described here.

2. Information We Collect

• Account information: email address, full name, and (for password accounts) a securely hashed password.
• Profile data from social sign-in: when you sign in with Google or Facebook, we receive your email, name, and profile picture URL from the provider. We do not receive your provider password.
• Business data you upload: products, stock levels, stores, team members, and related inventory records you create in the Service.
• Usage data: basic logs (timestamps, IP address, user agent) necessary to operate and secure the Service.

3. OAuth Scopes

When you use social sign-in, ClerStock requests only the minimum scopes needed to identify you:

• Google: email, profile, and openid. We use these to retrieve your email address, name, and profile picture.
• Facebook: email and public_profile. We use these to retrieve your email address, name, and profile picture.

ClerStock does not post to your social accounts or read any content beyond the scopes listed above.

4. How We Use Information

• To provide and maintain the Service.
• To authenticate you and keep your account secure.
• To communicate about your account, including email verification, sign-in links, and password resets.
• To diagnose issues and improve the Service.

We do not sell your personal data.

5. Data Sharing

We share data only with service providers that help us operate ClerStock:

• Authentication (SuperTokens) for sign-in and session management.
• Email delivery to send verification, sign-in link, and password reset emails.
• Cloud hosting and object storage for the application and its assets.

These providers access data only to perform services on our behalf and are bound by confidentiality obligations.

6. Data Retention

We retain account and business data for as long as your account is active. Inactive accounts and associated data may be removed after an extended period of inactivity. You can request deletion at any time (see below).

7. Data Deletion

To request deletion of your account and associated data, email [email protected] or follow the instructions on our Data Deletion page.

8. Security

We use industry-standard measures including TLS in transit, hashed passwords (via SuperTokens), and access controls to protect your information. No method of transmission or storage is perfectly secure.

9. Children's Privacy

ClerStock is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Policy. Material changes will be reflected on this page with a new "Last updated" date.

11. Contact

Questions about this Policy? Email [email protected].