Silverstack Solutions Ltd ("we", "us"), registered in England and Wales, is the data controller for StoreDeck. This policy explains what we store and why.
What we collect
Account data
Your email address, name, team roles, store access and sign-in records, used to run your account and authenticate you. When you create an account yourself we check that the address's domain accepts mail and refuse disposable inboxes; only the domain is looked up, nothing about you.
Bookkeeping data you enter
Orders, listings and their product photos and descriptions, stock, expenses, inventory, payouts, withdrawals and related business records, including the buyer's name, contact details and delivery address where you record them on an order. This is your data; we process it solely to provide the service.
Partner, investor and processor records
The name, email address and agreed terms of each partner, investor or processor you add, the shares recorded for them, and for the cards and bank accounts an investor or processor pays with only the scheme, the bank and the last four digits. We never store a full card or account number. These people see only their own record when they sign in, and each of them adds and edits their own payment methods from their own settings.
Billing data
Your subscription status, plan, and invoice history. Payments are processed by Stripe; we never see or store card numbers. Stripe collects your billing address and, where applicable, VAT number for tax purposes.
Collaboration content
Posts, comments and mentions in your store feed, visible to your account's team.
Activity records
An audit trail of who added, changed or deleted each record and when, kept so your books can be checked. The person who created a record is shown beside it to everyone who can see that record.
Messages and problem reports
What you send through the contact form or the Help button in the app: your name, email address and message. A report sent from inside the app also carries the page you were on, the store, your role, the account, the app version, your screen size, the page address and the last few errors the app hit, so we can reproduce the problem. Both record the sending IP address and browser identification to limit abuse.
Technical basics
What your browser keeps on this device, and why, is set out under Cookies and local storage below. We do not run advertising or cross-site tracking.
Who processes it
We use a small set of processors, each bound by their own data-processing terms:
We do not sell personal data, and we do not share it with anyone else except where the law requires.
Retention and your rights
Your bookkeeping data is kept while your account exists. Deleting records in the app soft-deletes them; closed accounts are archived, not silently erased, so your books can be recovered - contact us for permanent erasure.
Buyer details on an order can be redacted from within the app once your own retention period has passed, while the financial record is kept.
Invoices and payment records are retained as required for tax and accounting law.
You may request access to, correction of, export of, or deletion of your personal data at any time: support@storedeck.org. You also have the right to complain to the ICO (ico.org.uk).
Security
Data is encrypted in transit, access is scoped per account, per store and per role with database-enforced rules, and secret keys never reach the browser. Payment card data is handled entirely by Stripe (PCI DSS Level 1).
Changes
We will notify material changes to this policy in the app or by email before they take effect.