Royal Inventra ("we", "us") provides inventory and point-of-sale software for businesses, available on the web and as a mobile app. This policy explains what data we collect, why, and how it's handled, across both.
Information we collect
- Account information: your name, email address, and password (handled by our authentication provider, Supabase — we never see or store your plaintext password). If you sign in with Google, we receive your name and email from Google.
- Business information: your business name, contact email, country, and the operational data you or your team enter — products, stock levels, sales, customers, suppliers, expenses, and similar records needed to run the app.
- Payment information:subscription billing is processed by Paystack. We never receive or store your full card number — only a card brand, last 4 digits, and expiry date, for display purposes (e.g. "Visa ending 4242").
- Device permissions (mobile app): camera access, used only to scan barcodes and take product photos when you choose to; photo library access, used only when you choose to attach an existing photo to a product. Neither is accessed in the background.
- Push notification token: if you enable notifications on the mobile app, we store a device token (via Expo/Firebase) so we can deliver alerts like low stock warnings or team approval requests. This token is removed when you sign out.
- Usage and security logs: sign-in timestamps, IP address at the time of legal-terms acceptance, and an audit trail of account actions (e.g. who edited a product or recorded a sale), used for security and account recovery.
How we use this information
- To operate the core features of the app — inventory, sales, reporting, and team management.
- To authenticate you and keep your account secure, including optional two-factor authentication.
- To process subscription payments and send billing-related emails.
- To send notifications you've enabled (stock alerts, approvals, account activity).
- To investigate and prevent fraud, abuse, or unauthorized access.
Who we share data with
We don't sell your data. We share the minimum necessary with the service providers that make the app work:
- Supabase — database hosting and authentication.
- Paystack — payment processing for subscriptions.
- Resend — transactional email delivery (receipts, alerts, account notices).
- Expo / Google Firebase Cloud Messaging — push notification delivery on the mobile app.
- Vercel — web application hosting.
Each of these processes data only on our behalf and under their own security and privacy commitments. If your organization is on a team plan, your name, role, and activity within that organization are visible to your organization's admins/owner, as needed for them to manage their own business.
Data retention and deletion
We retain your data for as long as your account is active. If you close your account or request deletion, we delete your personal account data within a reasonable period, except where we're required to retain records (e.g. billing history) for legal or accounting purposes. To request deletion, use our account deletion page or contact us using the details below.
Your rights
You can access, correct, or export most of your data directly within the app (Settings). You may also contact us to request a copy of your data, a correction, or deletion of your account.
Security
Data is encrypted in transit (HTTPS/TLS). Access to your organization's data is enforced at the database level (row-level security), so accounts can only see data belonging to their own organization. Passwords are hashed and never stored in plain text. Optional two-factor authentication is available for extra account protection.
Children's privacy
Royal Inventra is a business tool and is not directed at, or knowingly used to collect data from, children under 13.
Changes to this policy
If we make material changes to this policy, we'll update the version date above and, where required, ask you to re-accept it.