Privacy Policy

StockTrax is operated by GenC Publishing, a sole proprietorship registered with the Department of Trade and Industry, based in Quezon City, Metro Manila, Philippines.

DTI Business Name Registration No. 8424356
Contact: support@stocktrax.online

• Your email address — to sign you in, to reset your password, and to send you the account emails described below.
• Your password — stored only as an argon2id hash. We cannot read it, and neither could anyone who obtained the database.
• Your name — optional. You can leave it blank. It is used to address you in emails.
• Timezone and currency — set automatically, so dates and prices display correctly. Defaults are Asia/Manila and PHP.

Product names, SKUs, prices, quantities, low-stock thresholds, and the full history of every stock change including the reason you gave.

This is your business data. We do not analyse it, sell it, share it, or use it to train anything. It exists so the product can show you your own numbers.

We never see or store your card details. Payments are handled by Lemon Squeezy, who act as the merchant of record. Your card goes to them, not to us.

What we store about a subscription:

• The Lemon Squeezy subscription and customer reference numbers
• Which plan you are on
• Your subscription status, renewal date, and end date

• No analytics, no tracking pixels, no advertising cookies, no session recording
• No third-party scripts of any kind run on our pages
• No card numbers and no bank details
• We do not sell or rent your information to anyone, for any purpose

We use one cookie: a sign-in session cookie so you stay logged in. It lasts up to 30 days. That is the only cookie we set — we have no analytics or advertising cookies.

StockTrax runs on services outside the Philippines, so your data is transferred and stored abroad:

• Supabase — the database holding your account and stock data. Singapore.
• Vercel — hosting and application servers. United States.
• Resend — sending account emails. United States.
• Lemon Squeezy — payments and card details.

Your data stays while your account is open. If you ask us to delete your account, we delete your data permanently within 30 days of actioning the request.

Records we are legally required to retain, such as transaction records for tax purposes, are kept for as long as the law requires. Most of those are held by Lemon Squeezy rather than by us.

Under the Data Privacy Act of 2012 you have the right to be informed, to access your data, to correct it, to object to processing, to have it erased or blocked, to data portability, to damages, and to complain to the National Privacy Commission.

In practice:

• Access and portability — export your entire catalogue as a spreadsheet at any time from inside the app. It uses the same columns as the import, so it is genuinely usable elsewhere.
• Correction — edit your details in the app, or email us.
• Erasure — email support@stocktrax.online. There is no delete button in the app yet, so this is handled by request.
• Complaints — contact us first if you can, and you may complain to the National Privacy Commission at privacy.gov.ph.

What we actually do:

• Passwords are hashed with argon2id. We cannot read them.
• Password reset links are stored hashed, are single-use, and expire after one hour.
• Every database table denies access by default, and the application reaches your data through a layer that restricts every query to your own account.
• All traffic uses HTTPS.

One limitation you should know about. If you reset your password, anyone already signed in to your account stays signed in for up to 30 days. Signing out on one device does not sign out others. If you believe someone else has access to your account, email us — do not rely on a password reset alone.

We describe what we do. We do not claim certifications we do not hold, and no software can promise perfect security.

StockTrax is for businesses and is not intended for anyone under 18.

If we change this policy we will update the date at the top, and for significant changes we will email you.