Privacy policy

This policy explains what Flexie Inventory Management Solutions collects, why, and what you can do about it. It covers our website and the application you sign in to.

1. What we collect

Information you give us

• Account details — your name, business name, business type, username, email address and password (stored only as a hash, never in readable form).
• Business records — the products, stock levels, sales, purchases, customers, suppliers and expenses you enter.
• Messages — anything you send us through the contact form or by email.

Information we collect automatically

• Session data — a cookie that keeps you signed in, and your theme preference stored in your browser.
• Security logs — your IP address and the time of sign-in attempts, kept to detect abuse and rate-limit attacks.

Information from third parties

• Google — if you choose “Continue with Google”, we receive your name, email address, profile picture and Google account ID. We do not receive your Google password.

2. Why we use it

• To provide the service and keep your records available to you.
• To authenticate you and keep your account secure.
• To review new registrations before activating them.
• To contact you about your account, including billing and service notices.
• To detect, prevent and investigate abuse, fraud and technical problems.
• To meet our legal and accounting obligations.

We do not sell your data, and we do not use your business records for advertising.

3. Separation between businesses

Every record is tied to the business that created it, and all access is scoped to that business. Staff you invite see only your data. Our platform administrators can access an account where it is necessary for support, security or a legal obligation; such access is logged.

4. Who we share it with

We share data only with service providers who help us run the service, and only as far as needed:

• Hosting and database providers — to store the service and your data.
• Email providers — to send account, verification and billing emails.
• Google reCAPTCHA — to tell humans from bots on our forms. Google’s privacy policy and terms apply.
• Payment providers — to take payment. We do not store your full card or mobile-money credentials.

We may also disclose data where the law requires it, or to protect our rights or someone’s safety.

5. Cookies

We keep this to a minimum. We use:

• a session cookie, so you stay signed in;
• a CSRF token cookie, which protects your forms from being submitted by another site;
• browser storage for your light/dark theme choice, which never leaves your device.

We do not use advertising or cross-site tracking cookies.

6. How long we keep it

We keep your business records for as long as your account is open. After an account is closed we retain them for a limited period so you can export them, then delete them. Security logs are kept for a short period. Some records are kept longer where accounting or tax law requires it.

7. Security

Passwords are hashed, sessions are regenerated on sign-in, forms are protected against cross-site request forgery, and sign-in attempts are rate-limited. No system is perfectly secure, but we take these measures seriously and will tell you without undue delay if a breach affects your data.

8. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct it if it is wrong;
• ask us to delete it;
• object to or restrict how we use it;
• receive a copy in a portable format;
• withdraw consent where we relied on it.

Most of this you can do yourself from your profile and settings screens. For anything else, contact us and we will respond within a reasonable period.

9. Children

The service is for businesses and is not directed at children. We do not knowingly collect data from anyone under 18.

10. Changes

We may update this policy. If a change is material we will tell you before it takes effect, and the “last updated” date above will change.

11. Contact

To exercise any of the rights above, or to ask a question about this policy, use the contact form.