Privacy

Who is responsible

Central Trade LLC publishes StockLive. StockLive is a work tool for store staff. It is not meant for children and has no public sign-up: every account is made by accepting a store's invitation. For help, see Support or email Rasul@centraltradellc.com.

What is collected, and why

StockLive keeps the email you sign in with, an optional name for your store's team list and history, and a hashed password. While you work it records what you do for the store — deliveries, counts, price changes, exports — and any product photos you choose to save. The store's own catalogue, stock and suppliers stay in that store. If the owner connects Clover, the connection is stored so register prices and stock can stay in step; the Clover key never leaves the server.

StockLive does not collect location, contacts, microphone, health, payment details or advertising identifiers. There are no ads, no analytics and no tracking in the web app or the phone app, and nothing is sold or shared for advertising.

The camera

The phone uses the camera to scan barcodes (that reading stays on the phone) and, when someone chooses, to take a product photo or to scan the pages of a supplier invoice to be read. The web app can scan barcodes with the computer's camera the same way. Product photos are stored where anyone who has a photo's link can open it, so they are of products, never of people. Scanned invoice pages are not stored by StockLive (see below).

Services that receive data

• Supabase holds the database, sign-in and photo storage.
• Vercel runs the web app and may log request IP addresses.
• Expo (EAS) may see the app version and a random installation id only to deliver updates when the phone app opens.
• Open Food Facts, UPCitemdb and USDA FoodData Central receive a barcode only when staff look up an unknown product.
• OpenAI receives a product photo, barcode or product text only if AI research is switched on for StockLive (it is off today), with OpenAI storage turned off.
• Anthropic receives the pages of a supplier invoice, as photographed or as the PDF, so whatever is printed on them, only when a manager sends one to be read and invoice reading is switched on for StockLive (it is off today). StockLive does not store the pages; it keeps what was read with the invoice, and each reading as Claude returned it in a history only managers and owners see. Under Anthropic's standard terms for its API, what is sent and returned is deleted within 30 days, with the exceptions its policy names (such as investigating misuse or a legal duty).
• Clover receives product names, prices and stock only for a connected store.

No email is ever sent by StockLive.

On the device

The phone keeps the sign-in session and a few preferences (such as appearance) in secure storage, and temporary files to share. Scanned invoice pages stay in the app's own cache only until they are sent and saved or removed; signing out deletes them all, and any left behind (for example when the app was closed with pages not yet sent) are deleted the next time the app starts. Signing out removes the session. The web keeps the session in a cookie, screen preferences in local storage, and an offline page in the browser cache. It also keeps your browser's time zone in a cookie, so times show in your local time.

How long it is kept, and deleting it

Anyone can delete their account from the Account page on the web or from More on the phone. That ends access to every store, deletes saved label batches, erases name and email, and retires the login. It cannot be undone. The store keeps its own records of the work you did — deliveries, counts, price changes — with no name or email, only an anonymous id. Someone who leaves a store without deleting their account keeps their name beside their work in that store's history, for its current staff; deleting the account removes it. A copy of the database kept to undo a software update can still hold a deleted account for up to 30 days, until that copy is deleted.

Store owners cannot delete their own account from the app while they own a store; they contact support so the store can be handed over or closed first. Leaving a store (the owner removes you) ends access to that store at once; the account remains until you delete it. A store's data is kept while the store uses StockLive; a store that leaves asks support to delete it.