Privacy policy.

Who we are

Inventory Scan is operated by Rocket Gems Ltd, a company registered in England and Wales (company number 11469790), registered office: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, England, BH16 6FA. For anything in this policy, contact us at support@inventoryscan.com. Rocket Gems Ltd is the data controller for the personal data described here.

What we collect

• Account data — your email address, name (if you provide one), and a hashed password. We never store passwords in plain text.
• Workspace content — the inventory data you and your team add: item names, quantities, codes, photos, custom fields, folders, and activity history. This belongs to you.
• Usage analytics — we use Plausible, a privacy-friendly analytics service that does not use cookies and does not track you across sites. We see aggregate page views, not individual profiles.
• Technical logs — standard server logs (IP address, browser type, timestamps) kept briefly for security and debugging.
• Billing data — if you upgrade to a paid plan, payment is handled by Stripe. We never see or store your card number.

What we don't do

We don't sell your data. We don't show ads. We don't use advertising trackers. We don't read your inventory data except where needed to support you or as required by law.

Why we process it (legal bases)

• Contract — running your account and workspace is necessary to provide the service you signed up for.
• Legitimate interests — keeping the service secure, preventing abuse, and understanding aggregate usage so we can improve it.
• Legal obligation — keeping billing records we're required to retain for tax purposes.

Who we share it with

Only service providers we need to run the product, under data processing agreements:

• Render — application hosting and database (United States).
• Cloud object storage — item photos and uploaded files.
• Plausible Analytics — cookieless usage analytics (EU-hosted).
• Stripe — payment processing for paid plans.
• An email delivery provider, for transactional email such as invites and low-stock digests.

Where data leaves the UK (for example, hosting in the United States), we rely on the safeguards in our providers' data processing terms, such as the UK International Data Transfer Addendum or equivalent standard contractual clauses.

Cookies

We use only essential cookies: a session cookie that keeps you signed in and a CSRF cookie that protects forms. No advertising or cross-site tracking cookies, which is why there's no cookie banner.

Retention

Your workspace data is kept for as long as your account is active. If you delete your account, we delete your workspace data within 30 days, except minimal records we must keep for legal or billing reasons. You can export your inventory as XLSX at any time before deleting.

Your rights

Under UK GDPR you can ask us to access, correct, delete, or export your personal data, object to or restrict certain processing, and withdraw consent where processing is based on it. Email support@inventoryscan.com and we'll respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

Changes

If we make material changes to this policy, we'll notify account holders by email before they take effect. The date at the top always reflects the current version.