Privacy Policy

This Privacy Policy explains what information VapeStock collects when you use our point-of-sale and inventory management service, how we use it, and the choices you have. It applies to shop owners and staff who use VapeStock, and to visitors of our website.

When you sign up and use VapeStock, we collect:

• Account information— your email address, display name, and role (owner or staff) for each shop you're part of.
• Business data you enter — shop details, inventory and product information, sales and transaction records, supplier information, and staff you invite. This is your business data; we store it so the service can work.
• Contact form submissions — if you message us through our Contact page, we collect the name, email, and message you provide.
• Billing information— handled entirely by our payment processor, Stripe. We don't receive or store your card number ourselves; we only see subscription status (e.g. active, trialing, canceled) and billing dates.
• Essential session data— a small amount of technical data (like a login session and which shop you currently have selected) stored in cookies, needed to keep you signed in and show you the right shop's data.

We don't use advertising or analytics tracking cookies, and we don't sell your data to anyone.

We use the information above to:

• Provide and operate the service — running your sales, inventory, and reports;
• Process subscription payments and communicate about billing;
• Send account-related emails, such as sign-up confirmation, staff invites, and password resets;
• Respond to messages sent through our Contact page;
• Maintain the security and reliability of the service.

We don't sell or rent your data. We share the minimum necessary information with the service providers that make VapeStock work:

• Supabase — our database, authentication, and file storage provider, where your account and business data is stored;
• Vercel — our hosting provider, which runs the application;
• Stripe — our payment processor, which handles subscription billing and card details directly;
• Resend — our email provider, used to deliver account and transactional emails.

We may also disclose information if required by law, or to protect the rights, property, or safety of VapeStock, our users, or others.

We keep your account and business data for as long as your account is active, so your shop's history stays available to you. If you'd like your data deleted — for example, after closing your shop for good — reach out through our Contact page and we'll take care of it.

Depending on where you're located, you may have rights under applicable data protection law — including the Philippines' Data Privacy Act of 2012 — to access, correct, or request deletion of your personal information. You can update most of your account information directly in the app; for anything else, contact us and we'll help.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and access controls that keep each shop's data separate from every other shop's. No method of transmission or storage is perfectly secure, but we take reasonable steps to protect your information.

VapeStock is a business tool for adults operating a retail business and is not directed at, or intended for use by, children. We don't knowingly collect information from anyone under 18.

We may update this Privacy Policy from time to time. If we make material changes, we'll take reasonable steps to let you know, such as an in-app notice or an email.

Questions about this Privacy Policy or your data? Reach us through our Contact page.