This policy explains what information Bundle Inventory, run by West Coast Web Solutions, collects, why, and the choices you have. We keep it to what the service needs.
What we collect
- Account details: your company name, and each person's name, email address and password. Passwords are stored only as a secure one-way hash; we can't read them.
- Store connections: the credentials you enter to connect your stores (such as API keys or access tokens). They're stored encrypted and used only to talk to those stores for you.
- Your business data: products, SKUs, barcodes, prices and costs, stock counts, bins, suppliers, purchase orders, and the orders your stores report.
- Orders and your customers: from orders we keep what stock needs: order numbers, dates, items and quantities. We don't store your customers' names, addresses, emails, phone numbers or payment details.
- Payment: card details are entered on Stripe's pages and never reach us. We keep your Stripe customer and subscription identifiers and your plan and its status.
- Technical information: sign-in times, an activity log of changes in your account, and the country and network address a request comes from, used to protect against abuse.
How we use it
Only to provide Bundle Inventory: keeping your stock in sync, showing your data to the people you give logins to, billing, support, security, and improving the service. We don't sell your information or use it for advertising.
Cookies
We use one essential cookie to keep you signed in. No advertising or tracking cookies, and no third-party analytics.
Who we share it with
- Cloudflare, which hosts Bundle Inventory and its databases.
- Stripe, which processes payments.
- Resend, which sends our emails (invites, sign-in codes, account and trial notices): it receives the recipient's email address and name and the message.
- The stores and marketplaces you connect (such as Shopify, WooCommerce, Amazon, eBay, Walmart, BigCommerce, Etsy, Square, Squarespace, PrestaShop and Magento): we send them stock levels, on your instructions.
- Authorities, if the law requires it.
How we protect it
Each company's data is kept in its own separate database. Connections are encrypted, store credentials are encrypted when stored, passwords are hashed, and sign-in attempts are limited. Messages from stores and from Stripe are checked for a valid signature before they're used. Only you, the people you give logins to, and our administrators (for support and to keep the service running) can see your account's data.
How long we keep it
While your account is open. If your subscription ends, your data is kept so you can come back; ask us at any time to delete it. When an account is closed, we delete its data within 30 days, except what we must keep for legal or accounting reasons (such as billing records).
Your rights
You can see and change your data in the app, export it (stock and order reports download as CSV), and ask us for a copy, a correction or deletion. Depending on where you live (for example under the GDPR or California law), you may have further rights; we'll respond to requests within 30 days. Bundle Inventory is a business service and isn't meant for children.
Changes and contact
If we change this policy we'll post the new version here, and tell account owners about important changes. Questions or requests: support@bundleinventory.com.