Privacy Notice draft
1. Who operates this service
Seller legal name: [INSERT THE ACCURATE LEGAL SELLER NAME]. Postal address: [INSERT REQUIRED BUSINESS ADDRESS]. Product support: [StockSentry support email alias — route privately to the owner support inbox]. Privacy contact and jurisdiction-specific rights process: [INSERT AND VERIFY].
2. Data this product is designed to use
- Account email and sign-in/session records.
- Subscription status and billing identifiers supplied by Stripe. Payment-card details are handled by Stripe and are not stored in this product’s workspace database.
- Workspace records that customers choose to save. Estimate when a critical supply will run short and what a sensible reorder might cost. You stay in control of purchasing.
- Technical request and security logs generated by the hosting and automation services.
Do not enter sensitive personal, health, government, bank, or payment-card data.
3. Where information is stored
In the local preview, saved examples stay in browser storage and can be cleared by the browser. After launch, account records are planned to be stored in Cloudflare D1 and separated by account and product. Stripe is planned for subscription checkout and payment status. Resend is planned for sign-in messages. Confirm the final service providers, locations, retention settings, and contracts before publication.
4. Why data is used
Account and subscription data is used to sign in, provide the subscribed service, secure the workspace, process renewals and cancellations, and respond to support requests. Marketing messages require the appropriate consent and a working unsubscribe process; this prototype does not send prospecting messages.
5. Retention and deletion
[SET precise retention periods for sign-in records, billing references, workspace content, backups, and logs. Add the customer deletion request process and any legally required retention exceptions.]
6. Sharing and service providers
List each processor and the data it receives: Cloudflare, Stripe, Resend, n8n, and any provider actually enabled. [Confirm whether each provider is in use, its applicable agreement, subprocessors, and international-transfer terms.] Information is not sold for third-party advertising by this prototype.
7. Security, cookies, and customer choices
The planned production account uses an HTTP-only session cookie and server-side subscription checks. State the final security controls and cookie duration after implementation review. Customers can export workspace records from the app. [Add access, correction, deletion, portability, objection, and appeal instructions required in each applicable jurisdiction.]
8. Children and sensitive data
This business tool is not designed for children. Do not submit sensitive personal or payment information in workspace fields.
9. Changes and contact
[INSERT the effective date, change-notice method, privacy contact, and regulator complaint information applicable to the seller.]
Document version: [SET A FINAL VERSION DATE AFTER REVIEW].