Privacy Policy

1. Two kinds of information

It helps to separate them.

Account information — the details of people who sign in to StowFinch: name, email address, and authentication information used to secure the account.

Information your organization enters — equipment records, locations, the people you record as holding equipment, and the history of who had what and when. Your organization decides what goes in, and your organization’s administrators control who can see it.

2. Information we collect

You give us:

• Account details — name, email address, and authentication information used to secure your account.
• Everything your organization enters into the service.
• Anything you send us when you contact support.

Created as you use the service:

• A record of who performed each recorded action, so your equipment history is accountable.
• Invitation records, including the email address invited.

Technical information:

• Cookies. StowFinch uses cookies that are necessary to keep you signed in and to keep your session secure. We do not use advertising or tracking cookies.
• Provider logs. Like any online service, StowFinch runs on infrastructure operated by service providers. In the ordinary course of delivering the service, those providers process connection and request information — including IP addresses and browser information — and keep their own operational logs. StowFinch does not separately build a profile of your browsing.
• Error monitoring. When something goes wrong, StowFinch sends a technical error report to a monitoring service so we can fix it. These reports are deliberately limited: we remove the signed-in user’s identity, request headers, cookies, submitted form contents, and web address parameters before the report is sent, and web addresses are shortened so they do not identify a specific record. We have turned off IP address storage in that monitoring service. We do not use session recording, screen recording, product analytics, or advertising tracking anywhere in StowFinch.

3. What we do not collect

We do not sell your information. We do not use the information your organization enters to advertise to anyone. We do not record your screen or your browsing behaviour within the product.

StowFinch does not retain imported CSV files as file storage. You can choose a CSV file to import, and the information in it is converted into records in the service; the file itself is not kept. StowFinch does not currently provide document, image, or general file storage.

4. How we use information

To provide the service, to sign you in, to support you when you contact us, to keep the service and its data secure, to diagnose and fix faults, and to improve how StowFinch works.

5. Service providers

We use third-party providers to operate StowFinch — including infrastructure and hosting, email delivery, and error monitoring and security services. They handle information only as needed to provide those services to us.

6. Where StowFinch is offered

StowFinch is currently intended for organizations in the United States. We do not currently offer StowFinch to organizations in the European Economic Area or the United Kingdom.

7. How long information is kept

We do not set a fixed retention period. Information may be kept for as long as reasonably needed to provide the service, maintain security, preserve the operational and activity history your organization relies on, maintain audit records, comply with legal obligations, and resolve disputes.

8. Deletion and anonymization

Requests are handled manually. Email support@stowfinch.com and we will verify the request before acting on it. There is no self-service account deletion in StowFinch today.

What each request means in practice:

• Closing a sign-in account removes that person’s access. It does not by itself erase the equipment records or activity history created while they used StowFinch. Records of who performed an action may remain after the account is closed.
• Removing someone from a company or Site removes their access only. Nothing they recorded is deleted.
• A person recorded in your equipment records — an employee or contractor who holds equipment — can be anonymized by an authorized administrator in your organization, from within the product. Their name is replaced, and their email address, department, and notes are removed. The record is marked inactive, and the equipment and activity history stays, linked to the anonymized record. This is permanent and cannot be undone.
• Closing a company account may involve additional handling, and some records are kept for security and audit reasons.

We cannot promise that every record will be erased in every circumstance, and we will tell you plainly what was and was not removed.

9. Security

We use reasonable administrative, technical, and organizational safeguards, including access controls that keep each organization’s information separated from every other organization’s, encrypted transmission, and protected handling of authentication information.

No service can promise perfect security, and we do not. If we become aware of a security incident affecting your information, we may notify you where required by applicable law or where we consider it reasonably appropriate.

10. Changes to this policy

We may update this policy. We will update the date at the top and take reasonable steps to let account administrators know about material changes.

11. Contact

Privacy questions, deletion requests, and anything else covered here: support@stowfinch.com