Privacy Policy

This policy explains what information Shopfold collects, why, and what you can do about it. We keep it short because we try to collect only what the service needs.

Information we collect

• Account details. Your email address and a password. The password is stored only as a salted hash; we cannot read it.
• Business details you enter. Your business name, address, logo, tax settings and invoice defaults.
• Inventory and sales records. Products, prices, costs, stock levels, serial numbers, stock counts, labels, and invoices. Invoices can include your customers' names, email addresses, phone numbers and addresses. You decide what to enter.
• Connection credentials. If you connect a service such as Clover or MyRepairApp, we store the API key or token you provide so we can sync on your behalf.
• Technical data. Standard server logs (such as IP address, time and the page requested) and error messages, used to keep the service running and to fix problems.

How we use it

• To run the service: sign you in, show your inventory, and carry out the syncs, counts and invoices you ask for.
• To talk to the services you connect, only to do what you have asked (for example, to update stock).
• To secure the service, investigate problems, and meet legal obligations.

We do not sell your information, and we do not use it for advertising.

Your customers' information

When you put your customers' details on an invoice, you are responsible for having the right to do so. We store that information for you and use it only to provide the service.

Who we share it with

• Services you connect. When you connect Clover or MyRepairApp, product and stock information is sent to and received from them. Their own privacy policies apply to what they hold.
• Service providers that host or support the service, bound to protect it and use it only for us.
• When required by law, or to protect the rights and safety of users or the service.

Cookies

We use only the cookies needed to keep you signed in and secure. See our cookie notice.

How long we keep it

We keep your information while your account is open. If you ask us to delete your account, we delete your data, except what we must keep to meet legal obligations. Routine backups are overwritten on a regular schedule.

Security

Passwords are hashed, connections are encrypted, and access to data is limited to your account. No system is perfectly secure, so please use a strong, unique password and tell us straight away if you suspect your account was accessed by someone else.

Your choices

• See and change your account and business details in the app.
• Disconnect a service at any time in Sync Setup.
• Ask us for a copy of your information, to correct it, or to delete your account. Depending on where you live, you may have further rights under local privacy law.

Children

The service is for businesses and is not intended for children. We do not knowingly collect information from children.

Changes

If we change this policy in a meaningful way we will update the date above and, where appropriate, tell you in the app.

Contact

Questions about privacy? See the contact page.