Privacy Policy
This policy explains what RestockThat (run by ZeroLoop Studios LLC) collects and why. The short version: we collect only what the product needs, we don't sell your data, and coworkers who tap stickers stay anonymous.
What we collect
- Office managers: email address, a hashed password (we never see the password itself), and the offices, items, notes and restock lists you create.
- Coworkers who tap: no name, email or account. We record that an item was scanned or added, with the time, to show counts and the list.
- People you invite: the email address you enter, so we can send the invite.
- Settings: your notification choices, any Amazon product links you save for items, and any Slack, Microsoft Teams, Discord or Google Chat webhook link you add. With a webhook, the office and item names are sent to that service each time something is added.
- Billing: Stripe handles cards and payments. We store your Stripe customer and subscription IDs and plan status, not card numbers.
- Technical: IP addresses are held briefly in memory to limit repeated sign-in attempts and tap floods. When a limit is hit, the IP is written to a server log that is overwritten within days. Our network provider, Cloudflare, processes requests to deliver the site.
Amazon links
When you click a Buy button you leave RestockThat for Amazon, and Amazon's privacy notice applies there. We count the click (which office and item, and when), but we don't see what you buy or anything about your Amazon account.
Cookies
We use two cookies, both needed for the site to work: one keeps you signed in, and one protects forms from being submitted by other sites. We don't use advertising or tracking cookies.
Who processes data for us
- Stripe: payments and billing
- Google Workspace: our email, including password reset emails
- Cloudflare: website network and security
- Your chat service (Slack, Teams, Discord or Google Chat), only if you connect one: office and item names
We don't sell or share personal information for advertising.
How long we keep it
We keep your data while your account exists. When you delete your account (Account settings), it is removed from the live database right away. Daily backups roll off within 30 days, and off-site monthly backups within 12 months. Billing records may be kept longer where the law requires.
Your choices
You can see and edit your data in the app, and delete your account in Account settings. To get a copy of your data, email [email protected]. California residents have the right to know, delete and correct their personal information, and we don't sell or share it.
Security
The site uses HTTPS, passwords are hashed, and forms are protected against cross-site requests. No system is perfectly secure, but we take reasonable steps to protect your data.
Children
RestockThat is for workplaces and isn't meant for children under 16.
Changes
If we change this policy in a way that matters, we'll email managers before it takes effect.