Privacy Policy

This policy explains what personal information stocura collects, how we use it, and your rights regarding it.

1. Information we collect

• Account information: your name, email address, and the company you represent.
• Business information: company address, country, tax/registration ID (optional), and configuration choices.
• Inventory data: product catalogue, stock levels, suppliers, historical movements — obtained from your connected Cin7 Core account.
• Usage information: server logs, page views, feature usage, and approximate device/browser information for the purpose of operating and improving the service.

2. Information we do NOT collect

• We do not access or store payment card information.
• We do not sell your data to third parties under any circumstances.
• We do not use your data to train AI models for unrelated purposes.

3. How we use your information

To provide the service: syncing your stock data, calculating reorder points, sending alerts you’ve configured. To communicate with you: occasional product updates, billing-related notices (when applicable), and customer support replies.

4. How your data is stored

Data is stored on managed infrastructure in the United States (Railway / AWS). Sensitive credentials such as API keys are encrypted at rest using AES-256-GCM. Passwords are hashed using bcrypt. Connections to the service use HTTPS.

5. Third parties we share data with

We use the following sub-processors:

• Railway — hosting infrastructure (servers, database).
• Cin7 Core / DEAR — the inventory system you authorise stocura to connect to. We send credentials and queries; we receive your inventory data.
• Resend — transactional email delivery (welcome, password reset, alerts).
• Cloudflare — DNS, anonymous web analytics for stocura.com (no individual user tracking).

We never share your data with advertisers or marketing services.

6. Your rights

You can: access your data via the app, correct inaccuracies via Settings, export your data on request, delete your account (which deletes your data within a reasonable period). Email support@stocura.com for any of these.

7. Cookies and tracking

stocura uses a session cookie to keep you signed in. We use Cloudflare Web Analytics on the marketing website, which is privacy-respecting and does not use cookies or fingerprinting. We do not use third-party advertising or tracking cookies.

8. Data retention

We retain your data while your account is active. If you cancel, we retain your data for 30 days in case you wish to reactivate, then delete it. Backups may persist for up to 90 days before being purged. Audit logs may be retained longer for security purposes.

9. Children’s privacy

stocura is a B2B inventory tool. We do not knowingly collect data from anyone under 16.

10. Changes to this policy

We will notify customers via email at least 30 days before any material changes take effect.

11. Contact

Privacy questions: support@stocura.com.

stocura is operated by Mossie Interactive Pty Ltd t/as stocura, ABN 69 155 412 329, Sydney, Australia.