Your business data deserves clarity and care.

This Privacy Policy applies to the Stockora website, mobile application, cloud application and related support services (together, “Stockora”). Stockora is operated by PKay Software Consultancy. For information held in a customer workspace, the customer organization controls which people may use that workspace and the business records entered into it. We operate and protect the platform that processes those records.

By using Stockora, you acknowledge this policy. If you use Stockora for an employer or another organization, you should also follow that organization’s privacy and records-management requirements.

Depending on how you use Stockora, we may handle:

• Account and workspace details: name, email address, password-derived authentication data, role, business name, preferences and subscription status.
• Business operations data: products, categories, stock batches, costs, suppliers, customers, purchases, sales, invoices, payments, reports, notes and related contact details you choose to enter.
• Billing records: selected plan, billing email, Paystack transaction references and payment or subscription status. Payment credentials are processed by Paystack; Stockora does not store full card details.
• Device and usage data: app version, device platform, authentication sessions, push-notification tokens and preferences, sync status, security events, and limited diagnostics needed to run and improve the service.
• Communications: contact-form submissions, support emails and other messages you send to us.

The mobile app may keep workspace data and unsent drafts on your device so essential workflows remain useful during poor connectivity. Secure authentication tokens are stored using the device’s protected credential storage.

We use information only where reasonably necessary to:

• create and secure accounts and tenant workspaces;
• provide purchase, landed-cost, inventory, sales, invoicing, payment and reporting features;
• sync the mobile app, preserve offline drafts and deliver requested notifications;
• process subscriptions, confirm payments and prevent fraudulent use;
• provide support, respond to enquiries and send essential service communications;
• monitor reliability, investigate faults, protect users and meet legal obligations; and
• improve Stockora using aggregated or appropriately de-identified insights where practical.

We do not sell personal information. We do not use workspace data for third-party advertising, and Stockora does not include an advertising network.

We use carefully selected providers to perform limited services on our behalf. They may process only the information necessary for their function and are subject to their own contractual and privacy obligations. These include:

• Paystack for subscription checkout and payment confirmation;
• Google Firebase Cloud Messaging for push-notification delivery;
• Resend for transactional, welcome and support email delivery;
• Sentry for configured crash, error and performance diagnostics; and
• DigitalOcean for cloud infrastructure and encrypted operational backups.

Information may be processed in countries other than your own because these services operate internationally. We may also disclose information when required by law, to protect the service or its users, or as part of a legitimate business transfer with appropriate safeguards.

We retain account and workspace information while the account is active and for only as long afterward as it is needed for service, security, backup recovery, dispute resolution and legal or financial recordkeeping. Operational backups are rotated on a scheduled retention cycle. Deleting live data may not immediately remove it from a backup, but that copy ages out through the normal protected backup cycle and is not restored except for disaster recovery.

Stockora uses safeguards such as encrypted network transport, tenant isolation, role-based permissions, protected credential storage, access controls and encrypted backup storage. No online service can promise absolute security, so users should use strong credentials, protect their devices and report suspicious activity promptly.

Subject to applicable law and your organization’s authority over its workspace, you may request access, correction, export, restriction, objection or deletion of personal information. Workspace owners and admins can correct much of their organization’s information directly in Stockora.

You can control optional push alerts in the app or your device settings. Essential security, billing and service messages may still be sent when needed to operate your account. You may also complain to the data protection authority that applies where you live or work.

Stockora is a business operations service and is not directed to children under 18. We do not knowingly solicit personal information from children. If you believe a child has provided information to us, please contact us so we can investigate and take appropriate action.

We may update this policy as Stockora, our providers or applicable rules evolve. We will publish the revised policy here with a new effective date and provide additional notice when a change is material.

Questions, privacy requests and account-deletion requests can be sent to support@stockora.org. Please do not send passwords, payment credentials or other secrets by email.

PKay Software Consultancy
Stockora Privacy Team
Contact Stockora online