Last updated: July 31, 2026
When you create an account, we collect your name, email address, and business details you provide during registration. As you use the platform, it stores the business data you enter — products, sales, customers, employees, and financial records — on your behalf. This data belongs to you and is used solely to operate the service for your account.
We use account information to provide and maintain the service, respond to support requests, and send essential account notifications. We do not sell your data or your customers' data to third parties. If you connect a third-party AI provider (OpenAI or Gemini), messages you send to the AI Assistant are transmitted to that provider under your own API key and are subject to that provider's own data policies.
Passwords are stored using industry-standard hashing (bcrypt) and are never stored or transmitted in plain text. All state-changing requests are protected against cross-site request forgery, and access to your business data is scoped by account and enforced by role-based permissions. No security measure is perfect, and we encourage strong, unique passwords and enabling any additional account protections available to you.
Your business data is retained for as long as your account is active. You may export your data at any time via the Reports module. Upon account cancellation, you may request deletion of your business data, subject to any records we are required to retain for legal or accounting purposes.
We use session cookies to keep you signed in and, if selected, a "remember me" cookie to keep you signed in across visits. We do not use third-party advertising or tracking cookies.
You may access, correct, export, or request deletion of your personal information at any time by contacting us through the contact page.
We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.
Questions about this policy can be sent via our contact form.