Privacy Policy

Information you provide to us

Early Access and contact information

When you request Early Access or contact Indietory, we may collect information such as your:

• Name
• Email address
• Business or shop name
• Type of products you make
• Plan you are interested in
• Current inventory process or system
• Website, online shop, or social page
• Questions, comments, or other information you choose to provide

We use this information to review Early Access requests, understand customer needs, respond to inquiries, and communicate about Indietory.

Submitting an Early Access request does not automatically create an Indietory account or enroll you in unrelated marketing communications.

Account and business information

When an Indietory account is created, we may collect information such as:

• Name
• Email address
• Business or organization information
• User role and permissions
• Account and authentication information
• Account status and related administrative information

Passwords are not stored in plain text.

Business and operational data

Customers enter information into Indietory as part of using the service. Depending on which features are used, this may include information relating to:

• Items and inventory
• Lots and containers
• Locations
• Vendors and suppliers
• Customers
• Purchase orders and receipts
• Production instructions and production orders
• Inventory movements and adjustments
• Sales records
• Costs and quantities
• Quality or inventory status
• Internal notes
• User activity and operational history

Much of this information is business information rather than personal information. However, some records may contain personal information, such as customer or vendor contact details.

Indietory does not currently provide file or image uploads.

Customer and vendor contact information

Indietory allows customers to maintain customer and vendor records.

Those records may include information such as names, contact names, email addresses, telephone numbers, websites, billing addresses, shipping addresses, and internal notes.

The Indietory customer that enters this information is responsible for determining what information should be stored and for having appropriate authority to collect and use it.

Indietory processes this information so that the customer can operate and maintain its business records through the service.

Indietory is not a point-of-sale system and does not process payment-card transactions between an Indietory customer and its own customers.

Please do not use customer, vendor, or internal-note fields to store payment-card numbers, bank-account credentials, government identification numbers, health information, passwords, or other sensitive personal information that is not necessary for use of Indietory.

Billing and subscription information

Subscription payments are processed through a third-party payment processor, currently Stripe.

Payment-card information is collected and processed by Stripe rather than stored directly by Indietory. Indietory does not store complete payment-card numbers.

We may receive limited billing and subscription information needed to manage an Indietory subscription, such as payment status, subscription status, transaction information, billing contact information, and limited information about the payment method.

Information processed by Stripe is also subject to Stripe's own privacy practices.

Information collected automatically

When you use Indietory, we and the infrastructure used to operate the service may automatically generate or collect technical information.

This may include:

• IP address
• Browser and device information
• Request timestamps
• Sign-in and authentication events
• Device identifiers used for account access and security
• Application requests and system logs
• Security and error information
• User activity within Indietory
• The user, time, action, and related record associated with certain operational changes

Some of this information powers Indietory's security, troubleshooting, authentication, inventory history, and built-in activity-history features.

Cookies and authentication technologies

Indietory uses only technologies that are necessary for authentication, account security, and operation of the service.

These currently include a secure authentication session cookie and a device identifier used to assist with login and device management.

Indietory does not currently use third-party advertising cookies, advertising pixels, or third-party analytics cookies.

If our use of cookies or tracking technologies changes materially in the future, we will update this policy before or when those changes are introduced.

How we use information

We may use information collected through Indietory to:

• Provide and operate the application
• Authenticate users and manage account access
• Maintain user roles and permissions
• Store and process customer-entered business records
• Maintain inventory, operational, and activity history
• Process subscriptions and administer billing
• Send account, service, security, transactional, and support communications
• Respond to Early Access requests and customer questions
• Troubleshoot errors and provide support
• Protect accounts, investigate misuse, and maintain system security
• Understand how Indietory is being used and improve the service
• Maintain appropriate business and administrative records
• Comply with applicable legal obligations

Email communications

Indietory may send transactional or service-related emails needed to operate the service.

These may include account invitations, authentication or security messages, service notifications, billing-related messages, Early Access communications, and responses to support requests.

Indietory does not currently send marketing newsletters or other optional promotional communications to account holders.

If optional marketing communications are introduced in the future, they will be treated separately from communications necessary to provide the service.

How information may be shared

We may share or make information available to service providers that help us host, operate, secure, support, communicate through, and bill for Indietory.

These providers may include:

• Cloud hosting and infrastructure providers
• Database and backup providers
• Transactional email providers
• Customer-support and email providers
• Payment processors
• Security and technical service providers

These providers may process information as necessary to provide their services to Indietory, subject to their agreements and applicable privacy practices.

Indietory uses Amazon Web Services and Cloudflare as infrastructure, hosting, delivery, and security service providers.

Legal and safety reasons

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or lawful government request
• Protect the rights, property, or safety of Indietory, our customers, users, or others
• Investigate fraud, misuse, unauthorized access, or security incidents
• Enforce agreements relating to use of the service

Business changes

If Indietory is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, information associated with the service may be transferred as part of that transaction.

Any successor would remain responsible for handling personal information in accordance with applicable law and the privacy commitments that apply to that information.

No sale of personal information or behavioral advertising

Indietory does not sell personal information.

Indietory does not share personal information for cross-site behavioral advertising or allow advertising companies to track users through Indietory for targeted advertising.

Do Not Track signals

Some browsers provide a "Do Not Track" or similar preference.

Because Indietory does not use cross-site behavioral advertising or advertising trackers, a Do Not Track signal does not currently cause the service to operate differently.

Indietory will continue to use technologies that are necessary for authentication, security, device management, and operation of the service regardless of a browser's Do Not Track setting.

How long we keep information

We keep information for as long as reasonably necessary to operate Indietory, provide services to customers, maintain appropriate business records, protect the service, resolve disputes, comply with applicable obligations, and fulfill the purposes described in this policy.

Active accounts

Business and account information is generally retained while an account remains active.

Canceled or closed accounts

Canceling a subscription does not necessarily result in immediate deletion of account data.

We may retain account and workspace information for a reasonable period after cancellation or closure so that we can support possible account reactivation, resolve billing or support matters, maintain security and operational records, and meet legitimate business or legal obligations.

Customers should not rely on Indietory to preserve closed-account data indefinitely.

Deletion requests

An authorized account owner may request deletion of an Indietory account and associated customer data by contacting us.

After a verified deletion request, we will delete or de-identify information from active systems when reasonably practicable, except for information that we reasonably need to retain for legal, financial, fraud-prevention, security, dispute-resolution, or similar legitimate purposes.

Certain activity, audit, or administrative records may also need to be retained where reasonably necessary to preserve the integrity and security of the service or related business records.

Backups

Indietory maintains backups for disaster recovery and service protection.

Information deleted from active systems may remain temporarily in rotating backups until those backups expire or are replaced through normal backup processes.

Backups are not intended to be used as active customer records after a valid deletion request.

Security

Indietory uses reasonable administrative and technical measures intended to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

Measures used by the service include access controls, authentication protections, protected password storage, encrypted network connections, infrastructure security controls, database protections, backups, and activity records used to help monitor important actions.

No method of storing or transmitting information can be guaranteed to be completely secure.

Customers are responsible for protecting their account credentials, controlling access to their organization, assigning appropriate user permissions, and using Indietory in a manner appropriate for the information they choose to store.

Please don't store unnecessary sensitive personal information

Indietory is designed for inventory, purchasing, production, traceability, and related business operations.

It is not designed to store highly sensitive personal information.

Please do not intentionally store information such as:

• Full payment-card numbers or card security codes
• Bank-account credentials
• Social Security numbers or other government identification numbers
• Medical or health information
• Personal passwords or authentication secrets
• Biometric information
• Other highly sensitive personal information that is unrelated to the normal use of Indietory

Internal notes and other flexible fields should be used only for information reasonably necessary for the relevant business record.

Your information and privacy requests

Many types of account and business information can be reviewed or corrected directly within the Indietory application.

If you cannot make a needed change through the application, or if you want to ask about personal information associated with your account, you may contact us at [email protected].

Depending on applicable law and your relationship with Indietory, you may be able to request access to, correction of, or deletion of certain personal information.

We may need to verify your identity or authority before completing a request.

Information entered by an Indietory customer

If your personal information appears in Indietory because a business using Indietory entered you as one of its customers, vendors, contacts, or other business records, that business controls the contents of the record.

Requests concerning that information should generally be directed to the business that entered it.

Indietory may assist its customer with an appropriate privacy request when necessary.

Age requirements

Indietory is a business service intended for users who are at least 18 years old.

Indietory is not directed to children, and children should not create Indietory accounts.

We do not knowingly collect personal information directly from children under 13. If we learn that personal information has been collected directly from a child under 13 in a manner that should not have occurred, we will take reasonable steps to delete it.

United States service

Indietory Early Access is intended for businesses based in the United States.

Our primary application and database infrastructure is hosted in the United States.

Service providers used by Indietory may process information in other locations as part of their own operations.

If Indietory expands active availability to additional countries or regions, we may update this policy and our related terms to reflect additional requirements.

Changes to this policy

We may update this Privacy Policy as Indietory develops, our information practices change, or legal requirements change.

When we update the policy, we will revise the "Last updated" date shown at the top.

If a change materially affects how we handle information associated with existing customers, we may provide additional notice through the application, by email, or through another reasonable method.

Contact us

Questions or requests concerning this Privacy Policy or Indietory's handling of personal information may be sent to:

Indietory LLC
[email protected]