Privacy Policy

This policy explains what personal data Warehouse Management System collects when you use WMS, why, and the choices you have. For data your organization puts into WMS about its own staff or customers, your organization is the controller and we process it on its behalf.

1. What we collect

• Account details: name, email, company name, role, and a securely hashed password (we never store your password in plain text).
• Workspace data: warehouses, items, stock movements, orders, shipments, requests, forms and files you upload.
• Security and usage logs: sign-in times, IP address, device/browser type and an audit trail of changes, used to protect accounts and investigate problems.
• Optional: camera access when you scan codes (images stay on your device unless you choose to upload a photo), and data from Google services only if you connect them.

2. How we use it

• To run the service: sign you in, show your organization's data, and send account emails (confirmation, password reset, invites).
• To keep it secure: rate limiting, lockouts after failed sign-ins, and fraud and abuse prevention.
• To improve it: fixing errors and understanding which features are used.

We don't sell your personal data and we don't use your workspace data to advertise to you.

3. Who we share it with

Only with providers that help us run WMS: cloud hosting and database, file storage, email delivery, payment processing (if you subscribe), and analytics (if enabled). They may only use the data to provide their service to us. We'll also share data if the law requires it.

4. Cookies

We use an essential cookie to keep you signed in. If analytics is switched on, it uses cookies to measure usage in aggregate. We don't use advertising cookies.

5. How long we keep it

We keep account and workspace data while your account is active. When you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep records (e.g. billing) for legal reasons. Backups roll off on their normal schedule.

6. Security

Data is encrypted in transit (HTTPS). Every organization's data is kept separate, access is controlled by roles, and optional two-factor authentication is available.

7. Your rights

Depending on where you live (for example under UK/EU GDPR), you can ask to access, correct, export or delete your data, or object to certain processing. To make a request, contact your workspace owner or use the Help page inside the app. You can also complain to your local data protection authority (in the UK, the ICO).

8. Changes

If we change this policy in a meaningful way, we'll tell you in the app or by email before the change takes effect.