Privacy Policy

Stockaris Pty Ltd ("we", "us") complies with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). This policy explains what data we collect and how we use it.

1. Data we collect

• Account data — name, work email, company details, authentication tokens.
• Operational data — inventory, orders, shipments, KPIs (your company's own records).
• Usage data — pages viewed, API calls, feature usage for product improvement.
• Support data — messages you send to support@stockaris.com.

2. How we use it

• To provide, secure, and improve the Service.
• To send service and billing notifications.
• To detect abuse and comply with legal obligations.
• We do not sell personal information.

3. Where your data lives

Customer data is stored in secured cloud infrastructure. Backups are encrypted at rest.

4. Your rights (APP 12)

You may access, correct, or export your personal information at any time. Enterprise customers can trigger a full ZIP export of company data via Compliance → Export. To delete an account, email privacy@stockaris.com.

5. Data retention

We retain transactional records for up to 7 years to satisfy Australian tax and corporate-records requirements. Non-transactional data is deleted within 30 days of account closure.

6. Security

We employ industry-standard controls: TLS in transit, encryption at rest, role-based access, 2FA for admins, SAML SSO for Enterprise, audit logging, and annual penetration testing.

7. Breach notification

We notify the OAIC and affected customers within 72 hours of discovering any eligible data breach under the Notifiable Data Breaches scheme.

8. Contact

Privacy queries: privacy@stockaris.com.