Privacy Policy

1. Introduction

Marc's Inventory ("we," "us," "our," or "Company") operates the Marc's Inventory website and application. This Privacy Policy explains our practices regarding the collection, use, and protection of your information when you use our services. By accessing or using Marc's Inventory, you agree to the terms of this Privacy Policy.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, phone number, and billing address. This information is necessary to set up your account and process payments.

Usage Data

We automatically collect information about how you interact with our service, including pages visited, features used, time spent in the application, inventory data entered, print orders processed, and device information (browser type, operating system, IP address).

Payment Information

Payment details are processed securely through Stripe. We do not store complete credit card numbers on our servers. Only the last four digits, expiration date, and cardholder name are retained for billing purposes.

Integration Data

If you connect third-party services (QuickBooks, Shippo, AWS storage), we store API credentials securely and collect data necessary to facilitate those integrations.

Communication Data

When you contact our support team or participate in surveys, we collect the content of your communications, feedback, and any information you provide.

3. How We Use Your Information

• To provide, maintain, and improve Marc's Inventory services
• To process payments and manage your subscription
• To send transactional emails (receipts, password resets, service updates)
• To respond to customer support requests
• To analyze usage patterns and improve our platform
• To detect, prevent, and address fraud and security issues
• To comply with legal obligations
• To send marketing communications (with your consent)

4. Data Storage and Security

Your data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. Our infrastructure is hosted on Amazon Web Services (AWS) with redundancy across multiple availability zones. We implement industry-standard security measures including firewalls, intrusion detection, and regular penetration testing.

All user passwords are hashed using bcrypt with a minimum of 10 rounds. We do not store plaintext passwords. Access to customer data is limited to authorized employees who have signed confidentiality agreements.

5. Third-Party Services

We use the following third-party service providers:

• Stripe: Payment processing (PCI DSS Level 1 certified)
• Shippo: Shipping label generation and tracking
• QuickBooks: Accounting integration (via OAuth)
• AWS: Data hosting and backup storage
• Cloudflare: CDN and DDoS protection

Each provider maintains its own privacy policy and data security standards. We ensure contractual obligations include data protection requirements.

6. Cookies and Tracking

Marc's Inventory uses cookies and similar tracking technologies to:

• Maintain session authentication
• Remember user preferences
• Analyze usage patterns
• Detect fraudulent activity

You can manage cookie settings in your browser preferences. Disabling cookies may affect functionality.

7. Data Retention

We retain your account data for as long as your subscription is active. Upon account deletion, we securely delete personal data within 30 days, except where required by law (tax records retained for 7 years, fraud investigations as needed).

8. Your Privacy Rights

Right to Access

You may request a copy of all personal data we hold about you.

Right to Deletion

You can request deletion of your account and associated data, subject to legal retention requirements.

Right to Data Portability

You can request your data in a structured, machine-readable format for transfer to another service.

Right to Opt-Out

You can unsubscribe from marketing emails at any time. Transactional emails cannot be disabled.

9. CCPA Compliance

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what data is collected, to delete personal information, and to opt-out of the sale of personal information. Marc's Inventory does not sell personal information to third parties.

10. GDPR Compliance

For users in the European Union, we comply with the General Data Protection Regulation (GDPR). We only process personal data with a lawful basis (contract, consent, or legitimate interest). You have the right to lodge complaints with your local data protection authority.

11. Children's Privacy

Marc's Inventory is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided information, we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on the website. Your continued use of Marc's Inventory constitutes acceptance of updated terms.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at: