InventoryAlert
Terms of ServiceSign in

Privacy Policy

Effective date: April 18, 2026

1. Who We Are

InventoryAlert is operated by Petra 413 LLC (1586 Spruce Dr., Arkdale WI 54613). This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

We collect the following categories of data when you use InventoryAlert:

  • Account data — your name (optional), email address, and hashed password.
  • Inventory data — item names, descriptions, alert email addresses, low-stock thresholds, and item images you upload.
  • Stocking requests — timestamps and status records created when a QR code is scanned.
  • Subscription data — Stripe customer ID and subscription ID used to manage your billing relationship.
  • Push notification subscriptions — browser endpoint and encryption keys if you opt in to browser push notifications.
  • Terms acceptance record — the timestamp and version of the Terms of Service you accepted at registration.
  • Password reset tokens — temporary tokens used to verify password reset requests; these expire after a short window.

We do not collect payment card details. Card processing is handled entirely by Stripe; we never see or store raw card numbers.

3. How We Use Your Data

  • To authenticate you and operate your account.
  • To send low-stock alert emails to the address you configure for each inventory item.
  • To process and manage your subscription payments via Stripe.
  • To send transactional emails such as password resets. We do not send marketing emails unless you explicitly opt in.
  • To deliver browser push notifications about new stocking requests if you have opted in.
  • To comply with legal obligations and enforce our Terms of Service.

4. Third-Party Data Processors

We share data with the following sub-processors, each of which operates under its own privacy policy:

  • Stripe— processes payment data for PRO subscriptions. Your billing information is governed by Stripe’s Privacy Policy.
  • Resend — delivers transactional emails (alert notifications, password resets). Email content and recipient addresses are transmitted to Resend for delivery.
  • Vercel— hosts the application and stores item images you upload (via Vercel Blob). Data is stored on Vercel’s infrastructure.

We do not sell your personal data to any third party.

5. Data Storage & Retention

Your data is stored in a PostgreSQL database hosted on Vercel’s infrastructure. Uploaded item images are stored in Vercel Blob. Data is retained for as long as your account is active. When you delete your account, all associated data — including inventory items, stocking requests, images, and push subscriptions — is permanently and irreversibly deleted.

6. Cookies & Sessions

We use a single session cookie managed by NextAuth to keep you signed in. This is a strictly necessary, HTTP-only cookie. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No third-party tracking scripts are loaded on any page.

7. QR Code Scans & Public Access

Anyone who scans one of your QR labels can trigger a stocking request without creating an account. The only data recorded at scan time is the item ID and the timestamp. No personal data about the scanner is collected or stored.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, to restrict or object to processing, or to data portability. To exercise any of these rights, contact us at the email below. We will respond within 30 days.

If you are in the European Economic Area, you have the right to lodge a complaint with your local data protection authority.

9. Children

InventoryAlert is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a minor has created an account, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email at least 14 days before they take effect. The effective date at the top of this page reflects the most recent version.

11. Contact

For privacy-related questions or data requests, email help@petra413.com.