Who we are
ADJustabLe Technologies LLC, an Ohio limited liability company ("we", "us"), provides Stacks, an inventory tracking service for equipment and consumables, through a web app and an iOS app. This policy explains what personal data we collect and what we do with it. It works alongside our Terms of Service.
Stacks is a service for businesses. Each business that signs up (our "customer") decides who in its organization uses Stacks and what they record. For the data a customer and its users enter, we act on the customer's behalf and follow its instructions, as set out in the Terms. If you use Stacks through your employer, your employer controls that data; questions about it may be best directed to your organization's Admin.
What we collect
When you sign up: your work email, name, company name, and the version of the Terms you agreed to.
When you use the service: the inventory your organization records, including items, locations, movements, and the users and roles in your organization.
Location from the iOS app: when a user scans an item, the app records the phone's location at that moment (coordinates and how accurate they are). Where maps are turned on for your organization, we look up the street address for those coordinates through Apple. The app asks for location only while it is in use, never in the background. Where maps are turned on, it also reads the phone's location to center the map when someone places a job-site pin; that reading is not stored or sent anywhere.
A user can turn off location access in the iPhone's settings. Scans still work: instead of the phone's location, we record the stored address of the warehouse or job site involved, or record the location as unknown.
Scan locations appear in the organization's transaction report and, where maps are turned on, on its maps. Only Admins can see them unless an Admin gives others access.
For security and abuse prevention: a one-way hash of your IP address when you request an account, kept to count requests, and the result of a human check. Our servers also keep short-lived technical logs, which can include IP addresses, to run and protect the service.
For payments: Stripe collects your card and billing details directly. We never see or store card details. We keep only your Stripe customer and subscription IDs, your plan and your billing status.
When you contact us: the messages you send and our replies.
How we use it
We use personal data to:
- create and run your account and your organization's workspace;
- send the emails the service needs, such as confirming your address, alerts, trial reminders and account notices;
- bill you;
- keep the service secure and prevent abuse;
- answer you when you write to us; and
- meet our legal obligations.
We do not sell personal data or use it for advertising. We do not send marketing emails.
We may disclose personal data when the law requires it, or to protect our rights or someone's safety. If our business is sold or merged, personal data may transfer to the new owner, who must continue to protect it under this policy.
Who handles it for us
These providers help us run the service. Each receives only what it needs for its job, and may use it only to provide that service to us.
| Provider | What for | What it receives |
|---|---|---|
| Render | Hosting, database and backups | All service data, stored on our behalf |
| Stripe | Payments and tax | Billing contact, payment details, subscription status |
| SMTP2GO | Email delivery | Recipient addresses and email contents |
| Cloudflare | Human check on sign-up | Browser and device signals during the check |
| Apple | Maps and address lookups, where maps are turned on | Map views, warehouse and job-site addresses, and scan coordinates |
How long we keep it
- Sign-up requests: a sign-up link expires after 24 hours. Sign-up requests, and the IP address hashes stored with them, are deleted 30 days after they're made, whether confirmed or not.
- Your organization's data is kept while it has an account. When a subscription ends, or a trial ends without one, it is kept read-only.
- Deletion: we delete an organization's data when it asks, or when it has had no sign-ins for 12 months, after emailing its Admins at least 30 days before.
- Backups expire within 14 days, so deleted data may remain in them until then.
- Support messages are kept for as long as needed to help you, and up to 2 years.
- Billing records are kept as long as tax law requires.
Security and where data is stored
We protect data with encryption in transit, access controls, and extra encryption at rest for location coordinates and scan addresses. No system is perfectly secure. If we learn of a breach affecting your personal data, we will tell the affected organization's Admins without undue delay, and as the law requires.
We store and process data in the United States. Stacks is offered to businesses in the United States.
Your choices
You can ask to see, correct, export or delete your personal data by writing to us. We will confirm your identity first, and reply within 30 days. Depending on where you live, you may have other rights under the law, and we will honor them.
If you use Stacks through your organization, its Admin can manage your account from the app, and we may pass your request to your organization, since it controls that data.
Children
Stacks is for businesses and is not meant for anyone under 18. We do not knowingly collect personal data from children.
Changes to this policy
If we make a material change, we will email organization Admins at least 30 days before it takes effect, and the version above will change.
Contact
Questions about this page or your data? Write to support@stacksinventory.com.