Privacy Policy
Effective Date: October 20, 2026
Section 1 (Purpose)
Shelfano Inc. ("Company", "we", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains what personal data we collect through the Shelfano mobile and desktop applications and related web services ("Services"), how it is used, and how it is protected in accordance with applicable global data privacy regulations.
Section 2 (Data We Collect and Collection Methods)
1. Account Registration and Authentication: Email address, one-way cryptographically hashed password, company/organization name, user full name or nickname, and organization role (Owner, Manager, Worker).
2. Service Usage Data: Photos of inventory transactions (taken or attached by users), product photos, device identification session hashes, access timestamps, and IP addresses.
3. In-App Purchases and Billing: Store receipt transaction tokens (Apple App Store / Google Play). Note that sensitive payment information such as credit card numbers are processed directly by Apple or Google and are never stored on Company servers.
4. Collection Methods: Directly provided by users during signup or when granting camera and photo library permissions on mobile/desktop devices.
5. Device Permissions and Image Processing: The camera is used only when you choose to take product or proof photos or scan QR codes and barcodes. The photo library is used only to select product photos. Text recognition (OCR) from photos and QR/barcode scanning run on your device; photos are not sent to our servers or to Google for recognition. Photos you choose to save as product or proof photos are stored privately on our servers. Text recognition uses Google ML Kit; any technical information Google may collect is governed by Google’s ML Kit terms and privacy notices.
Section 3 (Purposes of Processing)
We process personal data solely for:
1. Service Provision: Organization creation, warehouse and location management, real-time barcode scanning, transaction ledger logging, barcode label printing, and proof photo storage.
2. User Authentication and Account Security: Email verification, session renewal, and password reset.
3. Billing and Subscription Management: Managing 14-day free trials, active subscriptions (KRW 39,000/month or local equivalent), purchase restorations, and real-time webhook status updates.
4. Service Security and Reliability: Enforcing rate limits, preventing unauthorized access, and maintaining immutable audit event trails.
Section 4 (Data Retention and Deletion)
1. We retain personal data for as long as your account remains active or as needed to provide our Services.
2. When an account or organization is deleted, personal data is permanently destroyed without undue delay, except where retention is required by statutory legal or commercial obligations.
Section 5 (Third-Party Service Providers and Infrastructure)
We rely on trusted cloud infrastructure providers such as Cloudflare Inc. (Edge Workers, D1 Databases, and R2 Object Storage) to deliver high-performance, encrypted storage and compute worldwide. We do not sell or rent personal information to third parties.
Section 6 (Your Rights and Choices)
1. You have the right to access, rectify, restrict, or request deletion of your personal data at any time.
2. How to request account and data deletion: send an email titled "Account deletion request" to privacy@shelfano.com from the email address you registered with. After verifying your identity, we delete your account and related personal data, including account details, your user information within an organization, and photos you uploaded. Data we must keep by law is retained separately as described in Section 4 and then destroyed.
3. Deleting the account of an organization owner affects the whole organization’s data (deletion or ownership transfer), so we will confirm the scope with you when handling the request.
Section 7 (Security Measures)
We implement industry-standard security safeguards including AES-256-GCM encryption for stored assets, TLS 1.3 encryption in transit, strict session token hashing, and immutable database trigger protections against unauthorized ledger modifications.
Section 8 (Children’s Privacy)
Shelfano is a business tool for inventory management and is not directed to children. You must be at least 14 years old (or older if your local law requires) to register or use the Services. We do not knowingly collect personal data from children below that age. If we learn that we have, we delete it without delay; please contact privacy@shelfano.com if you believe this has happened.
Section 9 (Contact Information)
If you have any questions or concerns regarding this Privacy Policy, please contact us at:
- Privacy Department: privacy@shelfano.com / support@shelfano.com