Storebase (the "Service") is operated by Trij Holdings, LLC, a limited liability company formed under the laws of the State of Delaware, USA ("Company," "we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application, mobile applications, and related services (collectively, the "Service").
Important: By using Storebase, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.
1. Information We Collect
1.1 Information You Provide Directly
When you create an account and use our Service, we collect:
Account Information: Email address, first name, last name, phone number (optional), date of birth (optional), profile image (optional)
Business Information: Company name, store information, business address, timezone preferences
Financial Data: Transaction records, invoices, sales data, purchase orders, inventory data, cash flow records, bank account information
Employee Data: Employee names, salaries, bank account details, work schedules, attendance records (if you use HR features)
Counterparty Information: Customer and supplier names, contact information, transaction history
AI Assistant Data: If you use in-app AI features, we process the text of your queries and related conversation history to generate responses
1.2 Authentication Information
When you sign in using third-party services:
Google Sign-In: Email, name, profile picture (with your permission)
Usage Data: App features used, timestamps, crash reports, performance data
Location Data: Store location (if you enable location services for store check-in features)
1.4 Employee and Third-Party Data You Provide
When you use our business features, you may enter personal information about your employees, staff, customers, and suppliers (such as names, salaries, bank account details, attendance records, and contact information). For this information, you are the data controller and we act only as a data processor that stores and processes it on your behalf and under your instructions.
You are responsible for obtaining any required consents and providing any required notices to those individuals, and for complying with applicable labor, tax, and data-protection laws. We process this data solely to provide the Service to you.
2. How We Use Your Information
We use the collected information for:
Service Delivery: To provide and maintain our financial management, inventory, and HR features
Account Management: To create and manage your account, authenticate users
Business Analytics: To generate financial reports, sales analytics, inventory optimization recommendations
Communication: To send service-related notifications, push notifications for important events (employee limit reached, shift reminders, etc.)
Security: To detect and prevent fraud, unauthorized access, and security vulnerabilities
Service Improvement: To analyze usage patterns, fix bugs, and improve app performance
Legal Compliance: To comply with legal obligations and enforce our Terms of Service
3. How We Share Your Information
3.1 Third-Party Service Providers
We share information with trusted service providers who assist us in operating our Service:
Supabase (Database & Authentication): Stores your data securely with encryption. Data is hosted on Supabase's Singapore servers. Supabase Privacy Policy
Sentry (Error Monitoring): Receives anonymized crash reports and error logs to improve app stability. Sentry Privacy Policy
Firebase (Google): We use Firebase Analytics and Firebase Crashlytics (provided by Google) to collect anonymized crash reports and app usage analytics to improve app performance. Firebase Privacy Policy
Stripe: We use Stripe to process subscription payments made through our web application. Stripe processes your payment method and billing information. We do not store full card numbers. Stripe Privacy Policy
RevenueCat & Apple: We use RevenueCat and the Apple App Store to manage in-app subscriptions and purchases on mobile. They process subscription status and purchase history linked to your account. RevenueCat Privacy Policy
3.2 Service Transfers
In the event that Storebase is sold or transferred to another party, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
3.3 Legal Requirements
We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).
3.4 What We DO NOT Do
We DO NOT sell your personal information to third parties
We DO NOT share your financial data with advertisers
We DO NOT use your data for marketing purposes without your consent
4. Data Security
We implement industry-standard security measures to protect your information:
Encryption: Data is encrypted in transit (TLS/SSL) and at rest
Authentication: Secure authentication using industry-standard protocols (OAuth 2.0, JWT)
Access Control: Row-Level Security (RLS) policies ensure users can only access their own company data
Regular Audits: We conduct regular security audits and vulnerability assessments
Important: While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
5. Data Retention
Active Accounts: We retain your data as long as your account is active
After Account Deletion: When you delete your account, your personal identifiers (name, email, phone number, date of birth, profile image, and login credentials) are immediately anonymized or removed. Business and accounting records you created may be retained in de-identified form where required for legal, tax, or accounting purposes, and are purged after the applicable statutory retention period
Legal Requirements: Some data may be retained longer if required by law (e.g., tax records)
Backup Data: Backup copies are deleted within 90 days
6. Your Privacy Rights
Depending on your location, you may have the following rights:
6.1 General Rights
Access: Request a copy of your personal data
Correction: Update or correct inaccurate information (much of which you can edit directly in the app)
Deletion: Delete your account and data directly in the app, or by request
Export / Portability: Request a copy of your data in a commonly used format
Withdraw Consent: Opt-out of optional data collection
To exercise the access, export, or portability rights, contact us at admin@storebase.tech. We will respond within the period required by applicable law (and in any case within a reasonable time). Some rights, such as correction and account deletion, can be exercised directly within the app.
6.2 Region-Specific Rights
For EU/EEA Users (GDPR):
Right to data portability
Right to restrict processing
Right to object to processing
Right to lodge a complaint with a supervisory authority
For California Users (CCPA):
Right to know what personal information is collected
Right to know whether personal information is sold or disclosed
Right to opt-out of the sale of personal information (we do not sell data)
Right to non-discrimination for exercising privacy rights
For Korean Users (PIPA):
개인정보 열람 요구권 (Right to access personal information)
개인정보 정정·삭제 요구권 (Right to correct or delete personal information)
개인정보 처리정지 요구권 (Right to suspend processing)
7. Children's Privacy
Storebase is not intended for users under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to:
Singapore (Supabase database infrastructure)
United States (Trij Holdings, LLC as operator; Sentry error monitoring; Firebase analytics and crash reporting; Stripe and RevenueCat payment/subscription processing)
We ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses) for international transfers. By using the Service, you consent to the transfer, storage, and processing of your information in these countries.
9. Cookies and Tracking Technologies
Our mobile app does not use cookies. However, we use:
Local Storage: To store session data and user preferences on your device
Analytics: Anonymized usage data to improve app performance (via Sentry)
10. Third-Party Links
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting. We will notify you of significant changes via:
In-app notification
Email to your registered address
Notice on our website
Your continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: