Your data, yours.

When you create an account, we store your email address and authentication method (email/password or Google). All content you create (products, conventions, sales records, expenses, and product images) is stored securely in your account. If you submit feedback through the app, your message and email address are stored so we can respond.

Your data is used solely to provide the Conventory service to you. We do not sell, share, or provide your data to any third parties. We do not use your data for advertising or marketing purposes.

Your data is stored on Supabase infrastructure hosted in the United States. Data is encrypted in transit (TLS) and at rest. Product images are stored in secure cloud storage linked to your account.

Conventory does not use advertising tracking pixels or third-party analytics that profile individuals. We do not share your data with any third party for advertising purposes.

We collect basic, anonymous page view data on our public website (pages visited, referral source, device type) to understand which content is helpful. This data is not tied to any individual and does not use cookies.

We use Vercel Analytics, a privacy-first analytics tool, to collect aggregate, cookieless metrics about how our pages are accessed. No cookies are set and no personal data is collected.

Within the app, we track lightweight usage milestones (such as whether you have added your first product or completed your first sale) to improve the product. This data is stored in our own database alongside your account and is never shared externally.

We use only essential cookies required for authentication (keeping you signed in). We do not use advertising or tracking cookies.

You can at any time:

• Export all your data via the built-in CSV export.
• Delete your account and all associated data from Settings.
• Change your password (email accounts).

When you delete your account, all data including products, conventions, sales history, and images are permanently removed.

We use the following services to operate Conventory:

• Supabase for authentication, database, and file storage.
• Google OAuth as an optional sign-in method (only if you choose to sign in with Google).
• Stripe for payment processing on subscriptions. We never see or store your card details.
• Resend for transactional email delivery (for example, feedback notifications).
• Vercel for hosting and aggregate page analytics (cookieless, no personal data).

If we make significant changes to this policy, we will notify users via email or an in-app notice. Continued use of Conventory after changes constitutes acceptance.

Questions about this policy? Reach out at support@conventory.com.