Privacy Policy

Stockr is a software-as-a-service platform designed for hospitality operators in Australia. We provide inventory management, stock control, recipe costing, reporting, and related back-of-house tools.

For privacy enquiries, contact us at: stockraustralia@gmail.com

2.1 Account Information

When you create an account, we collect your name, email address, role, and the name of your organisation or venue.

2.2 Usage Data

We collect information about how you use the Platform, including pages visited, features used, actions taken, timestamps, and session duration. This helps us improve the Platform and diagnose issues.

2.3 Device and Technical Data

We automatically collect browser type, operating system, IP address, and device identifiers when you access the Platform.

2.4 Business Data You Enter

Data you input into the Platform — including inventory items, supplier details, stock counts, recipes, costs, waste logs, and financial records — is your data. We process it solely to provide the service to you.

2.5 Error and Diagnostic Data

We use Sentry (sentry.io) to automatically capture error reports when something goes wrong in the Platform. Sentry may receive your user ID, email address, IP address, browser information, and the actions you were performing at the time of the error. When an error happens in your browser, Sentry may also receive a short screen recording of what led up to it. We do not record sessions at random, and all text and form inputs in these recordings are masked and all images and media are blocked. This data is used solely for debugging and improving Stockr. Sentry is a GDPR-compliant data processor and we have a Data Processing Agreement in place with them.

We use your personal information to:

• —Provide, operate, and improve the Platform
• —Authenticate your identity and manage your account
• —Send transactional emails such as invitations, password resets, and account notifications
• —Diagnose and fix technical errors
• —Respond to support requests
• —Comply with legal obligations

Stockr includes AI-assisted features, including invoice scanning and data extraction. When you use these features, relevant document data (such as invoice content) is processed by an AI model to extract structured information. This processing occurs to fulfil the service you have requested. We do not use your business data to train external AI models.

We choose and engage the following service providers to run Stockr. Each processes data only as necessary to provide their service:

• —Supabase — database hosting and authentication (Sydney region). Receives all data you enter into the Platform and your account details.
• —Vercel — application hosting and deployment. Receives your requests to the Platform, including IP address and browser information.
• —Sentry — error monitoring. Receives error reports and, only when an error happens, a screen recording of the lead-up with all text and inputs masked.
• —Resend — transactional email delivery. Receives recipient email addresses and the content of emails we send you.
• —Anthropic — AI processing. Receives invoice content you submit for scanning, and the messages you send to the help chat.
• —Upstash — rate limiting. Receives request identifiers (such as user or IP address) used to limit request volumes.

Stockr can connect to other services at your direction. These are not our service providers: you choose whether to connect them and you authorise what they can access. Once connected, data passes between Stockr and that service on your instruction, and the service's own terms and privacy policy apply to the data it holds.

These include accounting integrations (MYOB and Xero), point-of-sale integrations (Square and HioPos), rostering and payroll integrations (Tanda), and API partners that you give an API key. Each receives only the data covered by what you enable or the scope of the key you issue. You can disconnect an integration or revoke an API key at any time.

Your data is stored in Australia (Supabase Sydney region). We implement industry-standard security measures including row-level security, encrypted connections (TLS), and role-based access controls. Access to your data is restricted to authorised personnel only.

While we take reasonable steps to protect your data, no system is completely secure. We encourage you to use a strong password and notify us immediately if you suspect any unauthorised access.

We retain your personal information for as long as your account is active or as required to provide the service. If you close your account, we will delete or anonymise your personal data within 90 days, unless we are required by law to retain it.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We may disclose your information:

• —To our third-party processors listed in Section 5, for the purpose of operating the Platform
• —If required by law, court order, or regulatory authority
• —To protect the rights, property, or safety of Stockr, our users, or the public

Under the Australian Privacy Act, you have the right to:

• —Access the personal information we hold about you
• —Request correction of inaccurate or outdated information
• —Request deletion of your personal data (subject to legal obligations)
• —Complain about how we handle your personal information

To exercise any of these rights, contact us at stockraustralia@gmail.com. We will respond within 30 days.

If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

The Platform uses the following cookies:

• —Supabase sign-in session cookies (strictly necessary) - keep you signed in and authenticate your requests.
• —Operating-as cookie (Stockr staff only) - set only when a Stockr platform administrator temporarily operates inside a customer organisation to provide support. It is never set for customers.

We do not use advertising cookies or analytics cookies.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Platform. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated Policy.

For any privacy-related questions or concerns, contact us at:

Stockr

Email: stockraustralia@gmail.com

Website: stockrinventory.com