Privacy Policy

This policy explains how RestockGenie LLC handles personal information when providing its U.S. business and household supply-inventory service. It also explains the choices and requests available to you.

Who is responsible

RestockGenie LLC determines how account, authentication, billing, support, and security information is used to operate the service. For personal information in a business customer's content, that customer generally determines its purposes and we process it to provide the service on its instructions. A workspace administrator acts for the Customer; an employee does not personally own the employer's records merely by creating an account. For household customers, the subscribing individual is the Customer. These descriptions do not override responsibilities assigned by applicable law.

Information we collect

• Accounts and sign-in: email address, first and last name, organization name, password hashes, verification and recovery records, and connected-provider identifiers. Google, Apple, or an enabled organization-selected identity provider may supply identifiers, email, and names. We do not store or display provider profile pictures.
• Inventory and team activity: items, descriptions, quantities, locations, sites, tags, supplier details, requests, orders, receipts, and related actor/timestamp records. Imports may retain source spreadsheet identifiers, selected settings, and review snapshots, including rows not ultimately imported.
• Billing and signup: Stripe identifiers, selected prices and intervals, subscription and invoice information, payment history, and whether and when you completed the terms and privacy review during signup. Stripe collects payment-card details on hosted checkout; our payment flow does not send full card numbers to our servers.
• Integrations: supplier contact names, email, shipping information, and order items you choose to send through a supplier workflow; identity-provider settings and identifiers for enabled business sign-in.
• Support and feedback: your message, email, organization details, contact preference, and supplied page, workflow, application version, and device class. Please do not include patient information, credentials, or other prohibited sensitive data.
• Device and usage records: IP addresses used to rate-limit requests and recorded in server logs, request URLs with sensitive authentication values redacted, response status and timing, trusted-device labels and activity, and saved display preferences.

Camera, advertising, and analytics

No photo or video is uploaded by the Scanner: camera processing stays on your device and runs only while Scanner is open. Scan results and recovery information can contain item identifiers, quantities, names, and timestamps. We do not sell personal information or share it for cross-context behavioral advertising. This release does not enable product analytics, advertising networks, or tracking pixels. We do not track your activity over time across other companies' websites, and browser Do Not Track signals do not change that practice. External font delivery and the integrations described below still involve third-party requests; they are not a promise that every resource is first-party.

How we use information

We use information to authenticate accounts, provide shared inventory and chosen integrations, process billing, keep agreement records, send necessary account messages, investigate feedback, prevent abuse, maintain security, resolve disputes, and comply with legal obligations. We do not use inventory content to train AI models or for advertising. Privacy acknowledgment is evidence that the notice was presented, not blanket consent to unrelated processing.

Recipients and service providers

• Your Customer and team: authorized members and administrators can view information according to their roles. A departing member's contributions can remain in the Customer's records.
• Google: Gmail SMTP delivers account and operational email; Google handles optional sign-in and access to spreadsheets selected for import. Google Fonts supplies the site's fonts through browser requests, which disclose network/request metadata even if you do not choose Google sign-in.
• Apple: handles sign-in if you choose it.
• Stripe: processes checkout, payment methods, subscriptions, invoices, and the billing portal when an owner subscribes. Stripe also handles information for its own legal and payment-service purposes.
• Render: hosts the application, database, and hosting logs in the current hosting arrangement.
• Operational monitoring: where enabled in the deployment, Better Stack receives forwarded logs and incident information. Configured incident-notification channels, including Discord, can receive alert metadata. These are operational security and availability services, not product analytics.
• Selected identity providers and suppliers: an enabled business sign-in provider receives authentication requests; a selected supplier receives the information needed for its handoff or integration. Supplier checkout and provider services may be governed by their own notices and terms.

Personnel and providers receive access as needed to operate, secure, or support the service. We may disclose information when legally required, to address fraud or security incidents, or to establish or defend legal claims. We review additional operational providers before enabling transfers to them and update the notice when needed. We do not represent that every recipient acts solely as our processor.

Cookies and storage on your device

We use session and security cookies for sign-in, trusted devices, and protection against cross-site request forgery. Browser sessions and trusted-device cookies can last up to 180 days; revocation or expiry can end access earlier. The optional Remember email cookie stores your email for 30 days. Short-lived authentication state and verification cookies support account flows. Session/security cookies use signing where appropriate; not every preference cookie is signed.

Local storage keeps preferences such as theme, table sizes, dismissed billing messages, installation prompts, and handoff progress. IndexedDB holds pending scan-recovery records, including account/item identifiers, item names, quantities, and timestamps. The service worker caches static application assets. These records are not advertising cookies.

You can manage cookies and site data in your browser. Clearing site data may sign you out and remove local preferences and unresolved scan-recovery information; it does not undo a scan already recorded on the server. Logout, remote session revocation, and account deletion do not guarantee erasure from an offline device. Use the Scanner's recovery controls before clearing pending records where possible.

Retention and deletion

We keep account and Customer content while needed to provide the service. Organization-owned records do not automatically disappear when an individual leaves. Verification and recovery credentials stop working at expiry. Expiry does not necessarily mean a record is immediately removed from the database. Import drafts and review snapshots do not currently have an automatic age-based expiry.

Support reports and mailbox copies can outlast account or business deletion, including reporter email, organization name, message, and context, where needed to resolve the request or document a dispute. Billing, agreement, and consent evidence may be retained for applicable legal, accounting, and dispute purposes. We review requests against those purposes and minimize information no longer needed.

Server-log and backup retention follows the configured hosting and backup schedules. Backup copies may remain until their applicable cycle ends and are restricted to recovery and other necessary operational purposes. A deletion request is not a promise of immediate removal from every backup, support mailbox, or independent provider's records. Contact us for the applicable retention information for your request.

Your choices and requests

Write to restockgenie@gmail.com to request access, a copy, correction, or deletion, or to ask about privacy. We verify identity and authority, protect other people's information, and explain applicable exceptions. Business-content requests may need instructions from the Customer. Depending on applicable law, you may have additional rights to restriction, objection, portability, appeal, or a complaint to a regulator. We will not unlawfully discriminate for exercising privacy rights.

There is no self-service personal-account deletion button. Owners can request business deletion through settings, subject to billing cleanup and the last-business restriction; account closure is handled by request. Cancellation only stops subscription renewal and does not delete content. Disconnecting a Google or Apple identity removes its linked identity record, not the rest of your account or that provider's records. Contact us if you cannot sign in; you need not accept revised terms to submit a privacy request.

Security and prohibited sensitive information

We use password hashing, signed authentication credentials, request limits, role-based organization access, and redaction of common secrets in logs. No system can guarantee complete security and we hold no security certification. Do not submit patient-identifying information, PHI, medical records, highly sensitive identifiers, or credentials through inventory, imports, notes, or support. Ordinary authorized confidential business information is permitted. We do not offer a HIPAA business associate agreement. These restrictions do not remove legal duties that apply if prohibited information is received.

Location and international processing

The service is intended for U.S. customers. Providers can process information in the United States and other countries where they operate; your location does not guarantee that data stays there. Contact us before using the service if you require a particular residency, processor agreement, or international-transfer arrangement. We do not claim that EU/UK transfer agreements, a data processing addendum, or a particular certification have already been arranged for your use. Mandatory privacy rights continue to apply where the law requires.

Changes and contact

Published notices identify their effective date. We notify account owners by email about material changes to data handling and obtain further consent where required by law. Contact restockgenie@gmail.com with questions. The governing-law clause in the Terms does not displace mandatory privacy protections.