Privacy Policy

Last updated: 6 June 2026

This policy explains what information StockLog ("we", "us") collects and how it is used. The short version: your business data stays on your computer — our servers only handle your account, licence and subscription.

1. Data stored only on your device

Sales invoices, inventory, customers, khata balances, staff records, reports and attachments are stored in a local database on your computer. They are not uploaded to our servers. Optional backups you create (local files, or your own Google Drive if you connect it) are under your control.

2. Information we collect on our servers

• Account data: mobile number, hashed password, business name and address you provide at registration (used on your invoices).
• Licence data: device/machine identifier, plan and activation status — used to enforce licensing.
• Subscription data: plan, status and payment references from our payment partner. We never see or store your card or bank details — payments are processed by Razorpay under their privacy policy.
• Support data: feedback you submit and emails you send to support.
• Technical logs: basic request logs and crash reports used to keep the Service secure and reliable.

3. One-time passwords

For password recovery we send OTPs to your registered mobile number (e.g. via WhatsApp). OTPs are stored hashed and expire automatically.

4. How we use information

To operate sign-in, licensing and subscriptions; to provide support; to secure the Service (rate limiting, abuse prevention); and to meet legal obligations. We do not sell your personal information, and we do not use your business data for advertising.

5. Sharing

We share information only with service providers needed to run the Service — payment processing (Razorpay), cloud hosting and database providers — and where required by law. These providers process data under their own safeguards.

6. Retention and deletion

Server-side account data is kept while your account is active. The app's "Erase device data" removes StockLog's local data from your computer. To delete your server-side account data, email support@stocklog.in from your registered contact and we will action it within 30 days, subject to legal retention requirements.

7. Security

Passwords are stored hashed (bcrypt), traffic to our servers is encrypted (HTTPS), and access to production systems is restricted. No method of transmission or storage is 100% secure, but we work to protect your information using industry practices.

8. Children

The Service is intended for business use by adults and is not directed at children under 18.

9. Changes

We may update this policy and will post the new version on this page with a revised date.

10. Contact

Privacy questions or requests: support@stocklog.in (see Contact Us).