Privacy Policy

This Privacy Policy describes how Techspawn Inc. ("Techspawn," "we," "us," or "our"), operating the Nventory platform ("Nventory," the "Service," or the "Platform"), collects, uses, shares, and protects information in connection with our multi-channel inventory management service. Nventory enables merchants to synchronize inventory, products, and orders across multiple sales channels including Shopify, eBay, Amazon, WooCommerce, and other e-commerce platforms.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Who We Are

Nventory is developed and operated by:

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number, company name, billing address, and login credentials when you create an account.
• Payment Information: Billing details processed securely through our payment processors (e.g., Stripe). We do not store complete credit card numbers on our servers.
• Support Communications: Information you provide when contacting our support team, including email correspondence and any attachments.
• Integration Credentials: API keys, OAuth tokens, and other credentials you provide to connect your sales channels (Shopify, eBay, Amazon, WooCommerce, etc.) to Nventory.

2.2 Information Collected from Connected Sales Channels

When you connect your sales channels to Nventory, we access and process the following data as necessary to provide our synchronization and management services:

• Product Data: Product titles, descriptions, SKUs, variants, images, pricing, categories, tags, and inventory quantities.
• Order Data: Order IDs, line items, order status, shipping information, fulfillment details, and transaction amounts.
• Inventory Data: Stock levels, warehouse/location information, inventory adjustments, and stock movement history.
• Customer Data: Customer names, email addresses, shipping addresses, and order history as provided by your connected sales channels. This data belongs to you (the merchant) and is processed solely to fulfill orders and synchronize data across your channels.
• Store/Account Data: Store names, domain information, locations, currency settings, and other configuration data from your connected channels.

2.3 Information Collected Automatically

• Usage Data: Pages visited, features used, actions taken within the Platform, timestamps, and interaction patterns.
• Device and Browser Information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Cookies and Tracking Technologies: See our Cookie Policy for details.
• Log Data: Server logs including access times, error logs, and API request/response metadata (excluding sensitive payloads).

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: Synchronizing inventory, products, and orders across your connected sales channels; processing fulfillment workflows; and managing your multi-channel operations.
• Account Management: Creating and managing your account, authenticating access, and processing billing and subscriptions.
• Communication: Sending service-related notifications (sync alerts, error notifications, stock warnings), responding to support requests, and providing updates about the Platform.
• Improvement and Analytics: Analyzing usage patterns to improve the Platform's performance, reliability, and features; troubleshooting technical issues.
• Security: Detecting and preventing fraud, abuse, and security incidents; maintaining the integrity of our systems.
• Legal Compliance: Complying with applicable laws, regulations, legal processes, or enforceable governmental requests.

4. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on the following legal grounds:

• Performance of a Contract: Processing necessary to provide the Service you have subscribed to.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Platform, ensuring security, and preventing fraud, where those interests are not overridden by your rights.
• Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications). You may withdraw consent at any time.
• Legal Obligation: Processing necessary to comply with legal requirements.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Connected Sales Channels: We transmit product, inventory, and order data to and from the sales channels you have connected (Shopify, eBay, Amazon, WooCommerce, etc.) as necessary to perform synchronization.
• Service Providers: We use trusted third-party service providers who assist in operating the Platform, including:
  • Cloud hosting and infrastructure (Amazon Web Services)
  • Frontend hosting and deployment (Vercel)
  • CDN, DNS, and security services (Cloudflare)
  • Payment processors (Stripe)
  • Email and communication services
  • Analytics and monitoring tools
  • Customer support platforms
• Legal Requirements: When required by law, subpoena, court order, or governmental regulation; or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share information for other purposes with your explicit consent.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account Data: Retained for the duration of your active subscription and for up to 30 days after account deletion to allow for reactivation.
• Synchronized Channel Data: Product, inventory, and order data is retained while your account is active. Upon account termination or channel disconnection, this data is deleted within 30 days.
• Billing Records: Retained for up to 7 years as required by tax and financial regulations.
• Support Communications: Retained for up to 3 years after resolution for quality assurance and legal purposes.
• Log Data: Automatically purged after 90 days.
• Shopify App Uninstalls: When a merchant uninstalls the Nventory Shopify app, all associated store data is erased from our systems within 30 days of receiving the shop/redact webhook.

7. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data at rest (AES-256) and in transit (TLS 1.3)
• Role-based access controls (RBAC) and multi-factor authentication (MFA) for internal systems
• Regular security audits and vulnerability assessments
• Isolated tenant environments for multi-tenant data segregation
• Automated threat detection and 24/7 monitoring
• Secure storage and encryption of all integration API keys and OAuth tokens

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and keep your integration credentials confidential.

8. International Data Transfers

Nventory is based in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with all sub-processors
• Compliance with applicable data transfer frameworks

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

9.1 Rights for All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data Export: Request a portable copy of your data in a commonly used format.
• Opt-Out of Marketing: Unsubscribe from marketing communications at any time via the unsubscribe link in our emails or by contacting us.

9.2 Additional Rights for EEA/UK Residents (GDPR)

• Restrict Processing: Request restriction of processing under certain conditions.
• Object to Processing: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw previously given consent at any time.
• Lodge a Complaint: File a complaint with your local data protection supervisory authority.

For more details, see our GDPR Compliance page.

9.3 Additional Rights for California Residents (CCPA/CPRA)

• Right to Know: Request details about the categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion of personal information we have collected.
• Right to Opt-Out of Sale: We do not sell personal information. No opt-out is necessary.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Limit Use of Sensitive Personal Information: Request that we limit the use and disclosure of sensitive personal information.

To exercise any of these rights, please contact us at support@nventory.io. We will respond to verifiable requests within 30 days (or 45 days for CCPA requests, with possible 45-day extension upon notice).

10. Third-Party Integrations and Links

Nventory integrates with third-party platforms (Shopify, eBay, Amazon, WooCommerce, and others). Each of these platforms has its own privacy policy, and we encourage you to review them. We are not responsible for the privacy practices of third-party services. Our use of data received from these platforms is governed by their respective API terms and this Privacy Policy.

11. Children's Privacy

Nventory is a business-to-business service and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last Updated" date, and sending a notification via email or through the Platform. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR-specific inquiries, please reference "GDPR Request" in the subject line of your email. We aim to respond to all privacy-related inquiries within 30 days.