StockShift is operated by INFI-TECH LTD, Lilongwe, Malawi ("we", "us"). This policy explains what personal data we process when you use the StockShift website, web application and mobile application, and the choices you have.
1.Two roles
For your account details and billing, we decide how data is used and are responsible for it.
For the business records you keep in StockShift (products, stock, sales, customers, suppliers and your team), your business decides what is recorded and why, and we process that data on your behalf to provide the service.
2.What we collect
- Account data: name, email address, phone number, password (stored only as a secure hash) and optional two-step sign-in settings.
- Business data you enter: products, prices, stock movements, sales, refunds, purchase orders, suppliers, customers and team members.
- Billing data: your plan, invoices and payment status. Mobile money payments are processed by the payment provider; we receive a confirmation and reference, not your wallet PIN.
- Technical data: sign-in times, IP address and device information used for security, fraud prevention and the audit trail.
- Messages you send us through the contact form or by email.
3.How we use it
- To provide, secure and support the service, including sending verification, password-reset, invitation, stock and billing emails.
- To bill for subscriptions and confirm payments.
- To keep an audit trail of sensitive actions such as refunds, stock adjustments, price changes and permission changes.
- To improve StockShift using aggregated information that does not identify individuals.
4.Sharing
We do not sell personal data. We share it only with service providers who help us run StockShift (hosting, email delivery, SMS and payment providers) under confidentiality obligations, or where the law requires it.
5.Security and separation
Each business's records are separated at the database level so that one business cannot read another's data. Connections are encrypted, staff access is restricted and protected by two-step sign-in, and staff actions are audited.
6.Retention
We keep your business data while your account is active. If your subscription ends, your data remains available read-only for export. Records are deleted on request or after a closed account's retention period, except where the law requires us to keep them (for example, invoices).
7.Your rights
You can ask to access, correct, export or delete your personal data by writing to stockshift@infi-tech.net. If your data was entered by a business that uses StockShift, please contact that business first; we will help them respond.
8.Contact
INFI-TECH LTD, Lilongwe, Malawi. Email: stockshift@infi-tech.net.
This document is a working draft pending review by INFI-TECH's legal advisers and may change before general availability.