Privacy Policy
Last updated: June 13, 2026
1. Introduction
StockWise AI ('we', 'us') is committed to protecting your privacy and the data of your customers. This policy explains what information we collect, how we use it, and the safeguards we apply.
2. Information We Collect
Account data (email, name, password hash). Merchant data you provide or sync (product catalogs, inventory levels, sales history, cost data). Usage data (feature interactions, error logs, IP address) to operate and improve the Service.
3. How We Use Your Data
To deliver core features (forecasting, alerts, analytics), to personalize recommendations, to provide customer support, to detect abuse and secure our infrastructure, and to comply with legal obligations. We do not sell your data, and we do not use merchant data to train shared AI models.
4. Secure Storage
All data is stored on a managed, enterprise-grade cloud database (Postgres) with encryption at rest (AES-256) and in transit (TLS 1.2+). Access is gated by Row-Level Security policies: each merchant can only ever read and write their own records. Service-level credentials are rotated and stored in an encrypted secret vault.
5. Authentication & Access
Passwords are hashed using industry-standard algorithms. Sessions are managed via secure HTTP-only tokens. We support breach-protection checks against known leaked password databases. Internal staff access to merchant data is restricted, logged, and used only for support with your consent.
6. Third-Party Processors
We rely on a limited set of trusted sub-processors to operate: cloud hosting (Cloudflare), database & auth (Supabase), payment processing (Stripe/Paddle), and email delivery. Each is contractually bound to confidentiality and security standards equivalent to ours.
7. Data Sharing
We never sell or rent your data. We disclose data only when required by law (e.g., valid subpoena), to protect rights and safety, or to facilitate a corporate transaction (with notice and equivalent protections).
8. Your Rights
You can access, export, correct, or delete your data at any time from your account settings, or by emailing privacy@stockwise.ai. Residents of the EU, UK, and California have additional rights under GDPR and CCPA, including the right to object to processing and to lodge a complaint with a supervisory authority.
9. Data Retention
We retain merchant data for as long as your account is active. After cancellation, data is retained for 90 days to allow restoration, then permanently deleted. Anonymized, aggregated analytics may be retained longer for internal benchmarking.
10. International Transfers
Your data may be processed in regions where our cloud providers operate. We rely on Standard Contractual Clauses and equivalent safeguards for cross-border transfers.
11. Children
The Service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us with information, contact us and we will delete it.
12. Changes
We may update this Policy from time to time. Material changes will be announced at least 14 days in advance by email or in-app.
13. Contact
Privacy questions? Email privacy@stockwise.ai.