Privacy Policy

1. Introduction

Bookstock AI ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our inventory analysis service. We comply with the New Zealand Privacy Act 2020 and associated privacy principles.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Authentication information (securely hashed passwords or OAuth tokens)
• Subscription and billing information (processed by Stripe)

Business Data - Important Notice

We do not store your business inventory data. Bookstock AI is a desktop analysis tool. When you upload inventory files (CSV, Excel), the data is processed entirely within your browser session. Your stock levels, sales data, costs, margins, and other business information are never transmitted to or stored on our servers. When your session ends, this data is permanently deleted from memory.

Usage Information

We collect anonymous usage data to improve our service:

• Pages visited and features used
• Session duration and frequency
• Device type and browser information
• General geographic location (country/region level)

3. Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies: Required for authentication and core functionality
• Analytics cookies: Help us understand how you use the Service (Vercel Analytics)
• Preference cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use the Service.

4. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Process subscriptions and payments
• Send service-related communications
• Improve and optimise the Service
• Respond to support requests
• Comply with legal obligations

5. Data Sharing

We do not sell your personal information. We may share information with:

• Payment processors: Stripe processes subscription payments
• Authentication providers: Google (if you use Google Sign-In)
• Analytics providers: Vercel Analytics for usage insights
• Legal requirements: When required by law or to protect our rights

We will never sell, share, or provide access to your business inventory data to any third party, as we do not store it.

6. Data Security

We implement appropriate security measures including:

• Encryption in transit (HTTPS/TLS)
• Secure authentication with hashed passwords
• Regular security assessments
• Limited access to personal data

7. Data Retention

Business data: Not retained. Deleted when your session ends.

Account data: Retained while your account is active. You may request deletion at any time.

Usage data: Retained in anonymised form for analytics purposes.

8. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Access your personal information
• Request correction of inaccurate information
• Request deletion of your account and data
• Object to certain processing activities
• Withdraw consent where applicable

To exercise these rights, contact us through our contact page.

9. International Data Transfers

Our service infrastructure may process data in countries outside New Zealand (including the United States and Australia through our service providers). We ensure appropriate safeguards are in place for any international transfers.

10. Children's Privacy

Bookstock AI is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. Continued use of the Service after changes constitutes acceptance.

12. Contact Us

For privacy-related questions or to exercise your rights, contact us through our contact page.

You may also lodge a complaint with the New Zealand Privacy Commissioner at privacy.org.nz.