Privacy Policy — Stokado

This Privacy Policy explains how Stokado (“Stokado,” “we,” “us”) collects, uses, discloses, and safeguards information when you use our website (stokado.io) and our inventory management application (app.stokado.io), including any integrations you choose to connect (collectively, the “Service”).

Stokado is operated by 2387107 Ontario Inc.

1. Information We Collect

We collect information in the following ways:

Account information you provide directly: name, email address, business name, and billing details when you sign up, are invited to a team, or subscribe to a paid plan.
Business data you store in Stokado: product catalogs (including any photos you upload), inventory levels, sales, purchases, vendors, and related records you or your team create while using the Service.
Customer data you choose to process through integrations: if you connect a messaging channel (such as WhatsApp or Instagram) or a sales channel (such as Shopify, WooCommerce, or Amazon), we process the data those connections send us — for example, a customer’s phone number and message content when they message your business through WhatsApp, solely to deliver the automated responses, order lookups, or catalog browsing features you have enabled. We do not use this data for any purpose beyond operating the feature you connected.
Usage and device information: log data, IP address, browser type, and pages visited, collected automatically when you use our website or application.

2. How We Use Information

To provide, operate, and maintain the Service.
To process payments and manage subscriptions through our payment processor.
To send transactional emails (receipts, alerts, password resets) and, where you’ve opted in, product updates.
To operate integrations you explicitly connect (e-commerce platforms, accounting software, messaging channels), strictly for the purpose of the feature you enabled.
To provide customer support and respond to inquiries.
To detect, investigate, and prevent fraud or abuse.

3. Third-Party Service Providers

We rely on the following sub-processors to operate the Service. Each processes data only as needed to provide their service to us, under their own data protection terms:

Supabase — database hosting, authentication, and file storage for your account and business data.
Stripe — payment processing and subscription billing. We do not store your full payment card details ourselves.
Resend — transactional email delivery.
Vercel — application hosting.
Meta Platforms, Inc. (WhatsApp Business Platform / Instagram Messaging API)— if you connect a WhatsApp or Instagram business account, messages are sent and received through Meta’s infrastructure. Data received through these APIs (such as a customer’s phone number, profile name, and message content) is used only to power the specific features you’ve enabled (e.g. answering a stock or price question, looking up an order, or routing a conversation to your staff), is stored only as long as needed to provide that feature, and is never sold or used for advertising.
Any e-commerce (Shopify, WooCommerce, Amazon) or accounting (QuickBooks, Xero) platform you explicitly choose to connect from your account settings.

4. Data Retention

We retain account and business data for as long as your account is active, or as needed to provide the Service. If you delete your account, we delete or anonymize your data within a commercially reasonable period, except where retention is required by law (for example, financial records).

5. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information. To exercise these rights, contact us at support@stokado.io.

6. Data Security

We use industry-standard safeguards — including encryption in transit and at rest, and role-based access controls — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children’s Privacy

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised “Last updated” date.

9. Contact Us

If you have questions about this Privacy Policy, contact us at support@stokado.io.