RetailStock ("we", "us", or "our") operates the RetailStock desktop application and the website
retailstock.in.
This Privacy Policy explains how we collect, use, store, and protect your information when you use our
software and services.
By using RetailStock, you agree to the practices described in this policy.
If you do not agree, please do not use our software or services.
1. Information We Collect
1.1 Information You Provide
- Account information: Name, email address, phone number when you sign up or contact us.
- Business information: Business name, GSTIN, address, state code, and other details you enter during firm setup.
- Payment information: Payment details processed securely through Razorpay. We do not store your card or bank account details on our servers.
- Support communications: Messages, emails, or calls you send to our support team.
1.2 Information Collected Automatically
- Device information: Operating system, device type, and app version for compatibility and support purposes.
- Usage analytics: Feature usage patterns and error reports to improve the software (no business data is included).
- Sync metadata: Timestamps and sync status when cloud sync or LAN sync is enabled.
1.3 Information We Do NOT Collect
- Your invoices, bills, inventory data, or accounting records are stored locally on your device (SQLite database) and are not transmitted to our servers unless you enable cloud sync.
- We do not sell, rent, or share your personal or business data with third parties for marketing purposes.
2. How We Use Your Information
- To set up and maintain your RetailStock account and firm configuration.
- To process payments through Razorpay for setup fees and subscriptions.
- To provide technical support and respond to your queries.
- To sync your data across devices when you enable cloud sync or LAN sync.
- To send important service updates, security alerts, and billing reminders.
- To improve our software based on aggregated, anonymised usage patterns.
3. Data Storage and Security
3.1 Local-First Architecture
RetailStock is built on a local-first architecture. Your business data (invoices, inventory,
accounting records, party details) is stored primarily in a local SQLite database on your device. This means:
- Your data works without internet.
- Your data remains on your device unless you enable cloud sync.
- Even if our servers go down, your business operations are unaffected.
3.2 Cloud Sync
When you enable cloud sync, your data is encrypted in transit (TLS 1.2+) and stored in a Supabase-managed
PostgreSQL database. Cloud sync enables multi-device access and acts as a backup. You can disable cloud sync
at any time.
3.3 Security Measures
- Passwords are hashed using bcrypt with a minimum cost factor of 12.
- All API communications use HTTPS encryption.
- We never log sensitive data such as GSTINs, PAN numbers, or bank details in application logs.
- Payment processing is handled entirely by Razorpay (PCI-DSS compliant). We never store card or UPI details.
4. Third-Party Services
We use the following third-party services:
| Service |
Purpose |
Data Shared |
| Razorpay |
Payment processing |
Name, email, phone, payment amount |
| Supabase |
Authentication and cloud sync |
Email, phone, synced business data |
| Google Fonts |
Typography (website only) |
IP address (standard web request) |
Each third-party service is governed by its own privacy policy. We encourage you to review them.
5. Cookies and Tracking
Our website (retailstock.in)
does not use cookies for tracking or advertising. We may use essential cookies for session management if you log
in to a customer portal in the future.
The RetailStock desktop application does not use cookies or web tracking technologies.
6. Data Retention
- Local data: Stored on your device indefinitely. You control deletion by uninstalling the app or clearing data.
- Cloud-synced data: Retained as long as your account is active. Upon account deletion request, we will remove your cloud data within 30 days.
- Payment records: Retained for 7 years as required by Indian tax and accounting regulations.
- Support communications: Retained for 2 years after last interaction for quality and reference purposes.
7. Your Rights
Under applicable Indian data protection laws, you have the right to:
- Access your personal data we hold.
- Correct inaccurate or incomplete personal data.
- Delete your account and associated cloud data.
- Withdraw consent for optional data processing (e.g., cloud sync, analytics).
- Data portability: Export your data from the app at any time (your local database is always accessible).
To exercise any of these rights, contact us at support@retailstock.in.
8. Children's Privacy
RetailStock is designed for business use and is not intended for individuals under 18 years of age.
We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the
top of this page. For significant changes, we will notify you via email or an in-app notification.
We encourage you to review this policy periodically.
10. Contact Us
If you have questions or concerns about this Privacy Policy or your data, contact us: