Privacy Policy

Stocksheet is an inventory and sales tracker for small shops in the Philippines. This policy explains what we collect, why, and your rights under the Data Privacy Act of 2012 (RA 10173). Contact: stocksheetph@gmail.com.

• Account: your name, email and password. The password is stored scrambled by our sign-in provider; nobody can read it.
• Shop: shop name and join code.
• Team: names, emails and roles of the people in your shop.
• Products: names, codes, prices, unit costs and stock.
• Sales: items, totals, paid or unpaid, Cash or GCash, and an optional customer name and note.
• Shifts and requests: staff shifts, change requests and restock requests, with the reasons typed.
• Suppliers and deliveries.
• Records: the activity log of who changed what, and when.
• Billing: your plan, paid-until date and the payments we record by hand (amount, method, reference).
• Your agreement: which version of these documents you agreed to, and when.
• Server logs kept by our hosting providers (IP address, browser) to run and protect the service.

• No card, GCash or Maya numbers. Payments are recorded by hand; a payment company would handle cards itself.
• No ads, no analytics and no tracking tools. Our fonts are served from our own site.

To run your shop's account, sign you in, keep each shop's data apart, manage your plan and billing, keep the service secure, and help you when you ask for support. We never sell your data and never use it for ads.

The shop owner controls the shop's data, including the names of staff, customers and suppliers (the "personal information controller"). We store and process it only to run Stocksheet for the shop (the "personal information processor"). Shops should only enter customer details they need.

Our database and sign-in run on Supabase, on servers in Singapore. The app is hosted on Vercel. This means your data is stored and processed outside the Philippines, by providers bound to protect it.

Your device keeps your sign-in, the product list (never unit costs), today's sales and any sales waiting to sync while offline. Signing out clears them.

• Each shop sees only its own data.
• Staff never see unit cost, profit or their teammates’ emails.
• To manage subscriptions, the Stocksheet team sees each shop’s name, the owner’s name and email, the plan, trial and paid-until dates, payments, how many users, admins and products it has, and when it was last active. We never look at your sales, product details or stock unless you ask us for help with them.

We keep your shop's data, including Records (the activity log), while the shop is active.

If a shop stays locked for 90 days, its data and Records are deleted. Until then the owner can still download everything. An owner can ask us by email to delete the shop's data sooner.

We keep our own records of the payments we received (shop name, amount, date and reference) and of the changes we made to a shop's plan, as our bookkeeping requires, even after a shop's data is deleted.

• To be informed, and to access and correct your data.
• To object, or to ask us to block or erase your data.
• To take your data with you: Settings › Your data.
• To complain to the National Privacy Commission.

Encrypted connections, shop-by-shop access rules in the database, role checks on every change, and no card data held. No system is perfectly secure, so keep your password private.

If a breach affects your data, we tell the affected shops and the National Privacy Commission as the law requires.

Stocksheet is for businesses and is not meant for anyone under 18.

The "Last updated" date and version are at the top. When we make a big change, we ask you to agree again in the app.

Our Data Protection Officer answers privacy questions and requests: stocksheetph@gmail.com.