Privacy
What we collect, why, and what leaves the system. Short, because there isn't much.
This is a plain-language summary published ahead of a reviewed legal document. It describes what the product actually does today.
What we collect
Account details for the people you invite: name, email, role and branch assignment. Operational records your business creates — orders, shifts, stock movements, purchases. Standard server logs.
What we do with it
Run the service, and nothing else. We do not sell it, we do not build advertising profiles from it, and we do not use one workspace's data to inform another's.
How it's kept apart
Every tenant record carries an organisation identifier, and access is enforced by row-level security in the database — not only by application code.
Getting it back
Export is available at any time, including after cancellation and after a lapsed trial. A lapsed workspace stays read-only, with no end date. After cancellation, data is kept for 90 days before it can be deleted. It is never silently deleted.
Asking us about your data
Write to us and a human will answer. Access, correction and deletion requests are handled by people, not a form that goes nowhere.