Last updated: 24 August 2026. This is a pre-launch draft and requires review by qualified counsel and completion of the legal entity, address, grievance contact, subprocessors, hosting location, and retention schedule before production.

1. Scope and roles

This policy applies to the Stoqenta website, web application, mobile application, and related support. A retail business controls the employee, product, supplier, and inventory information it enters. Stoqenta processes that information to provide the service and may separately control account, security, billing, and website data for its own legitimate service purposes.

2. Information processed

• Owner and employee identity, contact, role, organization, and store information.
• Product, barcode, supplier, inventory, stock movement, device, synchronization, and audit information.
• Authentication/session metadata, IP address, device details, security events, and support communications.
• Subscription and referral records when those modules become active. Payment-card data should be handled by the selected payment provider, not stored directly by Stoqenta.

3. Why information is used

To create and secure accounts; operate tenant-scoped inventory services; synchronize devices; prevent fraud and duplicate movements; provide support; send configured operational notifications; maintain audit history; improve reliability; meet legal duties; and enforce agreements.

4. Sharing

Information may be shared with contracted hosting, email, monitoring, support, analytics, and payment providers only as needed for the service and under appropriate terms. Information may also be disclosed where lawfully required, to protect users and the service, or during a properly structured business transaction. Stoqenta does not sell personal data.

5. Retention and security

Retention will depend on account status, contractual needs, inventory/audit integrity, backup cycles, disputes, and legal obligations. Controls include tenant scoping, role checks, hashed session tokens, TLS in production, logging, backups, and restricted administrative access. No security system is guaranteed to be perfect.

6. Rights and choices

Users may request access, correction, erasure, account closure, or grievance handling where applicable, subject to identity verification and lawful retention. Notification preferences can be managed as features become available.

7. International processing and children

Hosting and subprocessors must be disclosed before launch. Stoqenta is intended for business users capable of entering contracts and is not directed to children.

8. Contact

Privacy requests: privacy@stoqenta.com. A production grievance officer/contact and postal address must be added before launch.