📦 StockCraft Privacy Policy

Last Updated: September 18, 2026

TL;DR: We collect only the data necessary to provide our service. We don't sell your data. We use industry-standard security. You control your data and can delete it anytime.

At StockCraft, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our inventory and order management platform.

1. Information We Collect

1.1 Information You Provide

When you create an account or use StockCraft, you provide us with:

Category	Examples	Purpose
Account Information	Email, password, business name, full name	Account creation and authentication
Business Data	Materials, components, products, inventory levels, pricing	Core service functionality
Sales Data	Orders, transactions, customer names (if provided)	Sales tracking and reporting
Integration Data	API keys, marketplace credentials	Third-party integrations (e.g., Shopify)
AI Processing Data	Business metrics, product data, sales summaries, user queries, uploaded images	AI-powered insights, greetings, email generation, and chat assistance

1.2 Information Automatically Collected

We automatically collect certain information when you use StockCraft:

Usage Data: Pages viewed, features used, time spent, click patterns
Device Information: Browser type, operating system, device model, IP address
Log Data: Access times, error logs, performance metrics
Cookies: Session cookies, preference cookies, analytics cookies
Bot Protection: Our contact form uses Google reCAPTCHA v3 to prevent spam and abuse. reCAPTCHA collects hardware and software information (such as device and application data) and sends it to Google for analysis. Your use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

1.3 Information from Third Parties

We may receive information from third-party marketplace integrations when you connect them to your StockCraft account:

Marketplace Integrations: Order data and product information from connected e-commerce platforms (when you authorize such integrations)
Authentication Service: Login verification through AWS Cognito

1.4 Shopify App Data

When you install our Shopify app and connect a store, StockCraft accesses the following store data through Shopify's Admin API, using the permissions you approve during authorization:

Products and variants: titles, descriptions, SKUs, prices, images, and category, so your catalogue stays in step between Shopify and StockCraft.
Orders: order and line-item details, so orders placed in Shopify appear against the right products and can be costed and fulfilled.
Customers: the name, email, and shipping address attached to an order, so orders can be attributed and fulfilled. We do not read customer data for any other purpose.
Inventory and locations: item identifiers, unit costs, and stock levels, so cost and stock changes can be pushed back to Shopify.

We access Shopify data only to provide the synchronization you have enabled. We do not sell it, use it for advertising, or share it with third parties other than the service providers listed in section 3. Shopify access tokens are encrypted at rest using AWS KMS envelope encryption. You can stop syncing and revoke our access at any time by disconnecting the integration in StockCraft, or by uninstalling the app from your Shopify admin.

Our Shopify app subscribes to Shopify's mandatory privacy webhooks. On a customer data request we return the data we hold for that customer; on a customer or shop redaction request we delete or anonymize the relevant data; and uninstalling the app clears the stored Shopify credentials and stops all synchronization.

2. How We Use Your Information

2.1 Service Provision

Create and manage your account
Process and store your business data
Calculate costs and generate reports
Sync data with integrated marketplaces
Provide customer support

2.2 Service Improvement

Analyze usage patterns to improve features
Identify and fix bugs and performance issues
Develop new features based on user needs
Conduct A/B testing for UX improvements

2.3 AI-Powered Features

Generate personalized dashboard greetings and business insights
Provide AI-powered recommendations and analysis of your business data
Generate email marketing templates based on your specifications
Scan and extract material usage data from uploaded images
Enable conversational AI agent for data queries and assistance

2.4 Communication

Send transactional emails (e.g., password resets, receipts)
Notify you of important service updates
Respond to your support requests
Send optional marketing communications (you can opt out)

2.5 Security and Compliance

Detect and prevent fraud or abuse
Enforce our Terms of Service
Comply with legal obligations
Protect our rights and property

3. How We Share Your Information

We do NOT sell your personal information or business data to third parties.

3.1 Service Providers

We use the following third-party services to host and operate StockCraft:

Amazon Web Services (AWS): Cloud hosting, storage, and database services
AWS Cognito: User authentication and account management
AWS SES: Transactional email delivery (notifications, password resets)
Anthropic Claude (via AWS Bedrock): AI language models for generating personalized insights, greetings, email templates, and providing conversational assistance. When you use AI-powered features, your business data (such as product information, sales metrics, inventory levels, and user queries) is processed by Claude models (Claude 3 Haiku and Claude 3.5 Sonnet) through AWS Bedrock. This data is used solely to generate responses and is not used to train Anthropic's models. See Anthropic's Privacy Policy and AWS Bedrock's Data Privacy documentation for more information.
Google reCAPTCHA: Bot protection for our contact form. Google collects information about your device and interaction to prevent spam and abuse. See Google's Privacy Policy for how they process this data.

When you connect third-party marketplace integrations (such as e-commerce platforms), data may be shared with those platforms according to their respective terms and privacy policies. You control which integrations to enable.

All service providers are contractually obligated to protect your data and use it only for specified purposes.

4. Data Retention

We keep your business data for as long as your account is active. When you delete your account, or ask us to delete specific data, we remove it from our production systems and it is purged from backups on our normal backup rotation.

Account and business data (products, materials, components, orders, costs): retained while your account is active, deleted on account deletion.
Shopify connection data (access token, granted scopes, shop domain): retained only while the integration is connected. Disconnecting the integration, or uninstalling the Shopify app, clears it immediately.
Records we must keep (for example tax and accounting records) may be retained for the period required by law.

5. Your Rights and Choices

You can access, correct, export, or delete your data from within StockCraft, or by contacting us. Depending on where you live you may have additional rights (for example under the GDPR or the Australian Privacy Principles), including the right to object to processing or to lodge a complaint with your local regulator.

Access and export: available in-app for your business data.
Deletion: delete individual records in-app, or request full account deletion.
Shopify: disconnect the integration in StockCraft, or uninstall the app in Shopify Admin, to revoke our access immediately.
Marketing email: every marketing email includes an unsubscribe link.

6. Contact Us

For any privacy question or request, contact us at support@stockcraft.org. We aim to respond to privacy requests within 30 days.

← Back to Home