Privacy Policy

1. What we collect

Account information: your name, email, profile picture (if you sign in with Google), and your team members' names, emails and roles.

Business information you enter: business name, address, logo and tax settings; stores and their contacts; agreements, delivery notes, invoices, sales reports, payments, returns and stock; and the files you upload (for example contracts, certificates and payment proofs).

Usage and device information: the devices and browsers you sign in from, IP address, pages and features used, and logs and error reports needed to run and secure the Service. We don't use advertising trackers.

Data from connected services, with your permission: from Square, your catalog, stock, locations and related payments you choose to sync; from Google, the basic profile information you allow when you sign in.

Payment information: subscription payments are handled by Stripe. We never see or store your full card number. We receive limited details from Stripe, such as plan, payment status and the last four digits of the card.

2. How we use it

To provide and run the Service: create and keep your documents, compute balances and reports, sync your devices and connected services, and send the emails you ask for.

To support you and answer your requests.

To protect the Service and our users: security, fraud and abuse prevention, and enforcing our Terms.

To improve the Service, and to research and develop new features and products.

For analytics about how the Service is used.

To create aggregated or de-identified information that no longer identifies you, your business or any person. We may use or share that information for any lawful purpose.

To send you messages about the Service (such as security, billing and changes). With your option to opt out at any time, we may also send you news and offers about StoreTab.

To comply with the law, respond to lawful requests and protect our rights.

3. We don't sell your personal information

We do not sell personal information. We do not share it for cross-context behavioral advertising (ads based on your activity across other sites and apps).

4. AI features

When you use the assistant or AI reading of files, only the message, files and records needed for that task are sent to our AI provider (Anthropic).

Our AI provider is set up not to use your data to train its models. AI request logs are kept for at most 30 days and then deleted.

AI output is always a draft. Nothing is created, sent or moved until a team member confirms it.

5. Service providers

We use these companies to run the Service. They process data for us, under contract, and only to provide their service to us:

Supabase — database, sign-in and private file storage.

Vercel — website and app hosting.

Square — only if you connect it: catalog, stock and payments you choose to sync.

Stripe — subscription billing and payments.

Resend — sending emails (documents, receipts, reminders, sign-in links).

Anthropic — AI features, only when you use them.

Google — sign in with Google, only if you choose it.

6. Other sharing

With your instructions: for example, when you email a document to a store.

For legal reasons: when we believe the law requires it, or to protect the rights, safety and property of our users, the public or ShmirasHasdorim LLC d/b/a StoreTab.

In a business transfer: if ShmirasHasdorim LLC d/b/a StoreTab is involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of it. This policy will still protect it.

7. Google and Square data

StoreTab's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Data we receive from Square is used only to provide the app's features to you. We don't sell it or use it for advertising.

8. How long we keep data

We keep your information while your account is open. When you delete your account, we delete your data, files and assistant chats. Backups expire on their normal schedule.

AI request logs are kept for at most 30 days. We may keep some information longer when the law requires it, to resolve disputes or to enforce our agreements. Aggregated or de-identified information may be kept.

9. Security

We use reasonable safeguards: encryption in transit and at rest, access controls that keep each business's data separate, private file storage with short-lived links, and logs of important changes.

No system is perfectly secure. We can't guarantee that your information will never be accessed, lost or changed without permission. Keep your sign-in email and devices secure.

10. Your rights — for everyone

Access and export: download your business data at any time from Settings → Account → Export.

Correction: edit your details and records in the app.

Deletion: delete your account from Settings → Account. You can also email us at support@storetab.app.

Marketing: you can unsubscribe from marketing emails at any time with the link in the email.

11. California residents

If you live in California, the CCPA gives you the right to know what personal information we collect, use and disclose; to access, correct and delete it; and to opt out of its sale or sharing. We don't sell or share personal information, so there is nothing to opt out of.

We collect the categories of information listed in section 1, for the purposes in section 2, and disclose them only to the recipients in sections 5 and 6. We don't use sensitive personal information to infer characteristics about you.

To make a request, email support@storetab.app. We will verify your identity before acting, and you may use an authorized agent. We won't treat you differently for using your rights.

12. Data about other people

When you enter information about your stores, contacts or customers, we process it on your behalf. You are responsible for having the right to share it with us and for answering their requests. We will help you when we reasonably can.

13. Children

The Service is a business tool and is not meant for anyone under 16. We don't knowingly collect personal information from children under 16. If you think we have, contact us and we will delete it.

14. International transfers

We are based in the United States, and our providers store and process data in the US and possibly other countries. If you use the Service from outside the US, your information will be transferred to and processed in the US.

15. Changes to this policy

We may update this policy. If a change is important, we will tell you in the app or by email before it applies. The date at the top shows the latest version.

16. Contact

Privacy questions or requests: support@storetab.app.