1. Introduction
Welcome to Zestock (https://zestock.app). We operate a cloud-based inventory management and POS platform for businesses ("the Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information. By using Zestock, you agree to the practices described here.
2. Information We Collect
Information you provide: account details (name, email, phone, password), business information (name, type, address, registration number), payment details processed via our payment providers, product and inventory data you enter, and messages sent to our support team.
Information collected automatically: log data (IP address, browser type, pages visited), device information (OS, device type), usage data (features used, session duration), and cookies.
From third parties: if you sign in with Google, we receive your name, email, and profile picture. Payment processors may share transaction status with us.
Information collected automatically: log data (IP address, browser type, pages visited), device information (OS, device type), usage data (features used, session duration), and cookies.
From third parties: if you sign in with Google, we receive your name, email, and profile picture. Payment processors may share transaction status with us.
3. How We Use Your Information
We use your information to: create and manage your account; process payments and subscriptions; send transactional emails (OTP codes, password resets, receipts); respond to support requests; improve the Service; monitor for fraudulent activity; comply with legal obligations; and send product updates (you may opt out at any time).
4. Sharing Your Information
We do not sell your personal information. We may share it with:
- Service providers — payment processors, email providers, and hosting services who are contractually bound to protect your data.
- Business transfers — in a merger, acquisition, or asset sale, your data may be transferred.
- Legal requirements — when required by law or valid legal process.
- Protection of rights — to protect Zestock, our users, or the public.
5. Data Retention
We retain personal data as long as your account is active. Upon closure, we delete or anonymise your data within 90 days, except where retention is required for legal or financial compliance (up to 7 years for transaction records).
6. Data Security
We use HTTPS/TLS encryption, hashed passwords, and access controls to protect your data. No system is 100% secure. You are responsible for keeping your credentials confidential. Report suspected unauthorised access to privacy@zestock.app.
7. Cookies
We use essential cookies (authentication), analytics cookies (usage patterns), and preference cookies (settings). You can control cookies through your browser, though disabling them may affect functionality.
8. Your Rights
You may have the right to: access, correct, or delete your personal data; object to or restrict processing; receive your data in a portable format; and withdraw consent. Contact privacy@zestock.app — we respond within 30 days.
9. Children's Privacy
Zestock is not directed at children under 18. We do not knowingly collect data from children. If you believe we have, contact us immediately and we will delete it.
10. Changes to This Policy
We may update this policy periodically. We will notify you by email or in-app notice and update the date above. Continued use after changes constitutes acceptance.