Legal
Privacy Policy
Last updated: 2026-03-23
1. Information We Collect
We collect the following types of information: - Account information: name, email address, company name, and password (hashed) - Usage data: pages visited, features used, timestamps, and device information - Inventory data: products, stock levels, movements, orders, and barcodes you create - Technical data: IP address, browser type, operating system, and device identifiers - Payment information: processed securely by our payment provider (we do not store card details)
2. How We Use Your Information
We use collected information to: - Provide, maintain, and improve the Service - Process transactions and manage your subscription - Send service-related communications (account verification, security alerts, updates) - Generate AI-powered insights and recommendations for your inventory - Analyze usage patterns to improve user experience - Comply with legal obligations and enforce our Terms of Service
3. Data Storage and Security
Your data is stored on secure servers managed by Supabase (PostgreSQL) hosted in cloud infrastructure. We implement industry-standard security measures including: - Encryption in transit (TLS 1.3) and at rest (AES-256) - Row-Level Security (RLS) ensuring complete tenant data isolation - Regular security audits and vulnerability assessments - Automated backups with point-in-time recovery - Access controls with principle of least privilege
4. Data Sharing
We do not sell, rent, or trade your personal information. We may share data with: - Service providers who assist in operating the platform (hosting, analytics, email delivery) - Law enforcement when required by law or to protect our rights - In connection with a merger, acquisition, or sale of assets (with prior notice) All third-party providers are bound by data processing agreements ensuring equivalent levels of protection.
5. Cookies and Tracking
We use essential cookies for authentication and session management. We use privacy-friendly analytics (no third-party tracking cookies). You can control cookie preferences through your browser settings. The Service functions with essential cookies only.
6. Your Rights
You have the right to: - Access your personal data and request a copy - Correct inaccurate or incomplete data - Delete your account and associated data - Export your data in standard formats (CSV, JSON) - Restrict or object to certain processing activities - Withdraw consent at any time where processing is based on consent To exercise these rights, contact privacy@fluxventory.com or use the Settings page in your account.
7. Data Retention
We retain your data for as long as your account is active. After account deletion, we retain data for 30 days to allow recovery, then permanently delete it. Anonymized usage statistics may be retained indefinitely for service improvement. Billing records are retained as required by applicable tax and accounting laws.
8. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.
9. International Data Transfers
Your data may be processed in Singapore and other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and compliance with applicable data protection regulations.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification at least 30 days before they take effect. We encourage you to review this page periodically.
11. Contact Us
For privacy-related inquiries, contact us at privacy@fluxventory.com.