How xStock collects, uses, and protects information.

1. Scope and role of xStock

This Privacy Policy applies to xStock, the xStock website, authenticated web and mobile application flows, support interactions, billing flows, and marketplace connections that you enable through the platform.

In many cases, xStock acts as the provider of software tools used by a company, merchant, or workspace owner. For account, website, support, security, and billing data, xStock generally acts as the business deciding how that information is processed. For operational business data that you or your team place into the platform, xStock generally processes that data in order to provide the service you requested.

• Public website and contact form interactions.
• Registered user accounts, company workspaces, and invited users.
• Inventory, marketplace, sales, expense, invoice, and reporting workflows.
• Connected channels such as Amazon and Shopify, when you authorize them.

2. Information we collect

The exact data processed depends on how you use xStock. Because the product supports inventory, finance, marketplace, and reporting workflows, the platform may process several categories of information.

• Account and profile data, such as name, email address, password hash, email-verification state, multi-factor authentication status, and optional profile settings.
• Company and workspace data, such as company name, registration number, email, phone number, address, currency settings, inventory mode, and user-role assignments.
• Operational catalog and inventory data, such as products, variants, SKUs, barcodes, suppliers, stock quantities, purchase information, batch records, inventory notes, allocations, and transaction history.
• Expense and partner-share data, such as expense categories, payment type, payer identity, receipts or reference numbers, partner allocations, contribution history, and balance-related information.
• Sales and invoice data, such as order numbers, external order IDs, customer name, customer email, customer phone, totals, VAT information, line items, marketplace fees, notes, and generated invoice records.
• Marketplace connection data, such as marketplace names, platform identifiers, OAuth or API credentials, account identifiers, sync settings, metadata, last-sync timestamps, webhook payloads, linked products, sync status, and sync errors.
• Support and communications data, such as contact form submissions, support emails, implementation questions, and other business communications you send to us.
• Billing data, such as Stripe customer IDs, subscription records, subscription status, plan changes, billing portal activity, checkout events, and invoice/payment metadata needed to manage subscriptions.
• Security and usage data, such as IP address, browser or device information, session information, device names associated with API or mobile tokens, audit history, activity history, and notification records.

3. How we use information

We use information to operate, secure, support, and improve xStock. We do not need every category of data in every circumstance, but the platform is designed to support operational workflows end to end.

• To create and manage user accounts, authenticate logins, verify email addresses, support multi-factor authentication, and protect account security.
• To create and manage company workspaces, user roles, permissions, partner shares, and team access.
• To run inventory, expense, sales, invoice, marketplace, and reporting workflows requested by you and your organization.
• To connect and maintain integrations with Amazon, Shopify, and other channels you authorize, including product linking, token handling, sync jobs, and webhook processing.
• To generate operational records such as PDF invoices, sales summaries, marketplace fee calculations, and business reports.
• To provide support, respond to contact requests, investigate issues, and troubleshoot sync or billing problems.
• To process subscriptions, plan changes, payment setup, billing records, and customer portal actions through Stripe-powered billing flows.
• To maintain service reliability, detect misuse, enforce plan limits, maintain auditability, and monitor security events.
• To communicate service notices, legal or policy updates, billing messages, security alerts, and important product changes.

4. Legal bases and privacy choices

Where applicable law requires a legal basis for processing, xStock generally relies on one or more of the following: performance of a contract with you, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where consent is required or appropriate.

xStock is operated by a United States company. If you are located in a U.S. state or another jurisdiction that gives you privacy rights such as access, correction, deletion, or limits on certain processing, you may contact us to make a request and we will review it under the laws that apply to your relationship with xStock.

• You can contact us to request access, correction, or deletion of personal information associated with your account, subject to legal, security, contractual, and operational limits.
• You may opt out of marketing or non-essential promotional communications.
• Workspace owners remain responsible for the business data they place into xStock and for the permissions they grant to their users.

5. Marketplace and customer data

If you connect external channels, xStock may process marketplace account data, store data, customer data, order data, and related identifiers made available through the permissions you grant and the APIs or webhooks that those platforms provide.

We use this data only to provide the integration and operational workflows you enable, such as linking products, keeping inventory aligned, recording sales, calculating marketplace fees, and reflecting operational events inside your xStock workspace.

Marketplace and customer data received through third-party platforms may remain subject to the policies, developer terms, and data-protection rules of those platforms in addition to this Privacy Policy.

• Amazon Selling Partner API data may be subject to Amazon security and data-protection requirements.
• Shopify-connected data may be subject to Shopify privacy and compliance requirements, including customer-data and redaction obligations applicable to public apps.
• You are responsible for ensuring you have the right to connect a store, seller account, or marketplace account to xStock and to instruct xStock to process that data on your behalf.

6. Sharing of information

We do not sell personal information in the ordinary course of providing xStock. We may share information with service providers and third parties only as needed to operate the platform, process your requests, comply with law, or protect rights and security.

• Stripe and related billing providers for subscription management, invoicing, payment methods, billing portal actions, and subscription lifecycle events.
• Marketplace and platform providers such as Amazon and Shopify when you initiate or maintain a connection.
• Hosting, logging, email, monitoring, analytics, and infrastructure providers that help us run xStock.
• Professional advisors, auditors, insurers, or legal authorities where reasonably necessary.
• A buyer, investor, successor, or affiliated entity in connection with a financing, merger, restructuring, or asset transfer, subject to appropriate confidentiality or legal requirements.

7. Cookies, sessions, tokens, and security

xStock uses session technologies, authentication cookies, API or mobile access tokens, and other technical controls needed to keep users signed in, secure authenticated areas, remember preferences, and protect the service from abuse.

We also maintain activity records, notification records, and audit-style history for many operational actions in order to support reporting, accountability, security review, error investigation, and dispute handling.

We use reasonable administrative, technical, and organizational measures to protect information. However, no internet-based service can guarantee absolute security.

• Account login, email verification, password resets, and multi-factor authentication support.
• Device-specific API token issuance and revocation for mobile or API access.
• Security logs, sync logs, operational logs, and audit history tied to important changes in the platform.

8. Retention, deletion, and international transfers

We retain information for as long as reasonably necessary to provide the service, maintain account and billing records, support auditability, comply with law, resolve disputes, enforce agreements, and protect the platform.

Because xStock may use infrastructure or service providers in more than one jurisdiction, information may be processed or stored outside your immediate location. Where required, we rely on contractual, legal, or operational safeguards intended to support lawful transfer and protection of data.

If you close an account or request deletion, some information may remain in backups, logs, billing records, fraud-prevention records, audit history, or legal records for a limited period where retention is required or justified.

• Account and billing records may be retained for compliance and financial recordkeeping.
• Operational logs and audit records may be retained longer than ordinary support messages where needed to preserve accountability and system integrity.
• Marketplace records may remain in historical records to preserve reporting continuity, unless deletion is legally required or operationally feasible.

9. Children and policy changes

xStock is intended for businesses and professional use. It is not directed to children, and we do not knowingly provide the service to children in a personal or consumer capacity.

We may update this Privacy Policy from time to time as the platform, integrations, billing features, or legal requirements evolve. When we do, we will update the date on this page and may provide additional notice where appropriate.

Contact

If you have questions about this Privacy Policy or want to submit a privacy-related request, contact us at [email protected] or use the contact page.

This page is intended to reflect the actual structure of the xStock product, but it is not a substitute for advice from qualified legal counsel.