Privacy Policy

Last updated: April 2026

1. What we collect

Account data

Name and email (needed to create an account)
Password (stored as a one-way hash - we cannot read it)
Any profile info you choose to add

Workspace data

Items, locations, types, attributes, and images you create
Workspace settings
Audit logs (Pro plan and above)

Usage data

Login times and IP addresses (for security purposes)
Anonymized feature usage (to understand what is working)
Error logs (stripped of personal data)

Billing data

Payments go through Stripe. We store a Stripe customer ID and your subscription status. We never see your card number.

2. How we use it

To run Inventoriz and keep your data accessible
To send transactional emails like account verification, password resets, billing receipts, and workspace invitations
To help with support when you contact us
To catch and prevent abuse or security issues
We do not sell your data
We do not use your data to train AI models

3. Where it is stored and how it is protected

Servers are in the EU (Hetzner, Germany)
Data is encrypted in transit and at rest
Images are stored with authenticated access only
We keep regular backups
Access to production data is limited to people who need it

4. Third-party services we use

Stripe for payments - stripe.com/privacy
Resend for email - resend.com/privacy
Hetzner for hosting - hetzner.com/legal/privacy-policy

We do not use Google Analytics, Facebook Pixel, or any ad trackers.

5. How long we keep data

Account data is kept while your account is active
Deleted workspaces are removed within 30 days
Deleted items and images are removed immediately
Backups may be retained for up to 90 days
You can ask us to delete everything by emailing [email protected]

6. Your rights (GDPR)

If you are in the EU or EEA, you have the right to:

See what data we have about you
Correct anything that is wrong
Ask us to delete your data
Object to or limit how we process it
Get a copy of your data (CSV export)
Complain to your national data protection authority

Contact [email protected] to exercise any of these.

7. Cookies

We only use a session cookie to keep you logged in. No tracking cookies, no ad cookies.

8. Children

Inventoriz is not for children under 16. If you think a child has signed up, email us at [email protected] and we will remove the account.

9. Changes

We may update this policy. The date at the top shows when it was last changed. Check back if you are curious. Continued use means you are okay with the current version.

10. Questions

[email protected]