Privacy Policy

Effective 28 September 2026

Stocfore is run by a single independent developer, not a company with a legal department. This policy is written in plain language and meant to be read. Where it is specific, it is specific because something is actually done that way.

What we collect

• Account: your email address, the name you enter, and a hashed password. Your password is hashed before it is stored; the plain text is never kept.
• Business details: the business name, type, country and currency you choose to enter.
• Inventory data: the product rows, sales history, stock levels, suppliers and purchase orders you upload or enter.
• Billing: if you subscribe, your email and the transaction. Card details go straight to the payment provider and never reach our servers.
• Optional analytics: if you accept in the cookie banner, which pages are visited, the referrer and an approximate region. Cookie-free, and you can decline.

What we do not collect

• No advertising or marketing trackers.
• No session recording, keystroke capture or screen capture.
• No third-party cookies set by us.
• No contacts, location history or browsing history.
• We do not buy, rent or sell data about you. Ever.

Who processes your data

Four services handle data on our behalf, and your data goes to them only for the reason listed:

• Supabase — database and authentication. Receives your account and everything you upload.
• OpenRouter — AI analysis. Receives the figures for a specific analysis you trigger, and only when you trigger it.
• Polar — payments. Receives your email and the transaction.
• Vercel — hosting. Receives the request metadata any host receives, such as IP address and user agent.

What we do with your inventory data

It is used to calculate your figures and to answer questions you ask about them. It is not used to train a model, and it is not shared. Calculations such as sales velocity, stockout risk and reorder quantity are computed arithmetically; a language model is asked to explain those results in plain English, and is given the numbers rather than asked to produce them.

How long we keep it

Your data is kept while your account is open. If you delete your account it is removed immediately and permanently — there is no soft-delete and no recovery window. Server logs may retain basic request metadata for a short period for security and reliability.

Your rights

You can see and change your details in Settings, export your data on a paid plan, and delete your account outright. To export or delete at any time, email support@stocfore.com. Requests are answered within 30 days.

Security

Traffic is encrypted in transit, passwords are hashed, database access is restricted to the application server, and each account can only read its own data. No system is perfect, and a breach affecting your data will be disclosed to you.

Changes and contact

If this policy changes materially, the effective date above changes too. Questions go to support@stocfore.com.