Privacy Policy

DevCon1 Solutions LLC (Stockwinter) provides multi-workspace inventory management software. This Privacy Policy explains what information we collect, how we use it, and the choices available to you when you use our website, checkout flows, workspace applications, and related services (collectively, the “Service”).

By creating an account, purchasing a subscription, or otherwise using the Service, you agree to this Privacy Policy and our Terms & Conditions. If you do not agree, do not use the Service.

We collect information in the following categories:

• Account and profile data — name, email address, phone number, password hash, role, verification status, MFA enrollment status, legal acceptance records, and session metadata for workspace users and main-console administrators.
• Workspace and business data — workspace name, slug, settings, branding preferences, products, inventory movements, categories, suppliers, locations, custom units, barcodes, audit events, invitations, and other records you or your team submit through the Service.
• Billing data — subscription tier, billing status, and payment-related identifiers processed through our payment provider. We do not store full payment card numbers on our servers.
• Communications — messages you send through our contact form, support requests, and email delivery metadata.
• Technical and security data — IP address, browser type, device information, request logs, authentication events, and similar data needed to operate, secure, and troubleshoot the Service.

We use collected information to:

• Provide, maintain, and improve the Service
• Create and manage workspaces, user accounts, and access controls
• Process subscriptions, invoices, and billing events
• Record and enforce legal policy acceptance at the individual user level
• Send transactional emails such as verification, password reset, and security notices
• Enforce MFA policies, session security, and workspace authorization rules
• Detect abuse, fraud, unauthorized access, and service errors
• Respond to contact requests and customer support inquiries
• Evaluate whether account activity aligns with our acceptable-use standards
• Comply with legal obligations and enforce our Terms & Conditions

We may review how the Service is used to protect our platform, customers, and legal obligations. We reserve the right to refuse registration, suspend access, or terminate any account or workspace when we reasonably believe the Service is being used for activity that is illegal, immoral, inappropriate, exploitative, or otherwise incompatible with the business purpose of Stockwinter.

Examples include, without limitation, businesses primarily engaged in adult sexual products, pornographic media retail, unlawful goods or services, harassment, fraud, or other conduct that we determine would harm users, partners, or the integrity of the Service. When action is taken, we may restrict access immediately and retain records as permitted by law and this policy.

Each workspace receives a dedicated database environment. We do not commingle one customer's inventory records with another customer's records in a shared tenant collection. Workspace access is resolved server-side from trusted workspace metadata, not from client-supplied database identifiers.

The Service uses HttpOnly secure cookies for refresh-token sessions where deployment topology allows. Access tokens are kept in memory or other non-persistent client storage, not in localStorage. We do not use advertising cookies.

We use trusted third-party providers to operate the Service, such as cloud hosting, managed database hosting, payment processing, and email delivery services.

We retain account, workspace, and inventory records for as long as your subscription or workspace remains active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal obligations.

We apply administrative, technical, and organizational measures designed to protect your information, including password hashing, encrypted storage for MFA secrets, hashed refresh tokens, role-based permissions, and rate limiting on authentication routes.

Depending on your location, you may have rights to access, correct, delete, or restrict certain processing of personal information. Contact us through the contact page for help with privacy matters.

The Service is intended for business use by individuals who are at least 18 years old. It is not intended for anyone under 18, and we do not knowingly collect personal information from anyone under 18.

This Privacy Policy is versioned. When we publish a material update, we will change the version identifier and last updated date shown above. Individual users may be required to review and accept the updated Privacy Policy and Terms & Conditions before continuing to use the Service after login or during checkout.

We may update this Privacy Policy from time to time. Continued use after an update means you accept the revised policy, subject to any re-acceptance flow we present in the product.

Questions about this Privacy Policy can be sent through our contact form. DevCon1 Solutions LLC is the data controller for information processed through Stockwinter.