Privacy Policy

This Privacy Policy explains what information Stowed collects, how we use it, how we share it, and the choices and rights you have. Stowed is an inventory and business-to-business order management application for small and mid-size businesses, operated by Nihilo Solutions LLC, a Connecticut limited liability company ("we," "us," "our," or "Stowed"). By creating an account or using Stowed, you agree to the practices described in this policy.

Who we are and how to reach us

Stowed is operated by Nihilo Solutions LLC. If you have questions about this policy or your information, or if you want to exercise a privacy right, contact us at support@stowedapp.app. Stowed is offered to businesses and users in the United States, and information we collect is stored and processed in the United States.

Information we collect

Account information. Your name, email address, the organization you belong to, and your role (Owner, Manager, or Employee).
Business data you enter. The information you put into Stowed to run your business, such as products, inventory, locations, customers, customer-specific pricing, orders, invoices, barcodes, payments, expenses, and payroll records. You control this content, and it belongs to your organization.
Subscription and billing information. When an organization owner subscribes in the iOS app, Apple processes the payment and we receive a signed App Store transaction containing a transaction identifier, the plan purchased, and its renewal or expiry date. When an owner subscribes on our website, card, bank and stablecoin payments are processed by Stripe, and Bitcoin payments (when offered) through our self-hosted BTCPay Server. Either way we receive your subscription status, plan, and a billing reference, and we do not collect or store full payment card numbers.
Device and usage information. Basic technical information such as device type, operating system version, app version, and diagnostic or error data that helps us find and fix problems.
Website analytics. Our marketing website uses Vercel Web Analytics (which is cookieless) and Google Analytics. Google Analytics only sets analytics cookies after you accept them in our consent banner; where consent is required, it stays off until you opt in. Our iOS app does not use any third-party analytics or tracking.
Communications. If you email us for support, we keep your message and contact details so we can respond and improve the service.

How we use information

To provide the app and its features, including authentication, inventory, order management, customer pricing, barcodes, invoicing, receivables, and financial tracking.
To keep each organization's data separated and secure.
To process subscriptions, confirm payment status, and send transactional messages such as confirmation, password reset, and invoice emails.
To diagnose problems, monitor stability, prevent fraud and abuse, and improve the app.
To respond to support requests and send important service notices.
To comply with our legal obligations and enforce our agreements.

How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with service providers that help us operate Stowed, and only to the extent they need it to perform their work on our behalf:

Supabase hosts our database and handles authentication.
Stripe processes card, bank, and stablecoin (cryptocurrency) subscription payments made on our website.
BTCPay Server, which we host ourselves, processes Bitcoin payments when that option is offered. Bitcoin transactions are recorded on the public Bitcoin blockchain.
Microsoft (Azure OpenAI Service) processes the business data needed to answer a request when you use AI features on the Growth and Pro plans, such as a snapshot of relevant products, orders, customers, and figures. Microsoft does not use this data to train its models. Prompts and responses may be processed in data centers outside the United States.
Resend delivers transactional email (such as confirmation, password reset, and invoice messages).
Vercel hosts our website and provides website analytics.
Google provides website analytics (Google Analytics) on our marketing website only.
Apple distributes the app through the App Store and TestFlight, and processes subscriptions purchased in the app.

We may also disclose information if required by law, in response to lawful requests, or to protect the rights, safety, and security of our users, the public, or Stowed. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

Payment information

You can subscribe in the iOS app or on our website. Stowed never receives or stores your full card number either way.

Purchases made in the app are processed by Apple through the App Store. Apple handles your payment details under its own privacy policy; we receive only a signed transaction record, including a transaction identifier, the plan purchased, and its renewal or expiry date. We store that identifier against your organization so your plan can be recognized on every device your team signs in on, and so renewals, cancellations, and refunds are reflected in your account.

Card, bank, and stablecoin payments made on our website are handled by Stripe, which processes your payment details under its own privacy policy. Bitcoin payments, when offered, are handled by our self-hosted BTCPay Server; we receive the invoice status and amount, and the transaction itself is public on the Bitcoin blockchain.

Data retention

We keep your information for as long as your account or your organization is active, or as needed to provide the service. When you request deletion of your account, we remove your personal information within a reasonable period, except where we are required to retain certain records to comply with legal, tax, accounting, or security obligations, or to resolve disputes.

Security

We use technical and organizational measures designed to protect your information, including isolation of each organization's data at the database level using Row Level Security, role-based access controls, encryption of data in transit, and restricted administrative access. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Your privacy rights

Depending on your state of residence, you may have some or all of the following rights regarding your personal information: the right to know or access the personal information we hold about you; the right to correct inaccurate information; the right to delete your information; the right to obtain a portable copy of your information; and the right to opt out of the sale of personal information, the sharing of personal information for cross-context behavioral advertising, and certain profiling. Stowed does not sell or share personal information for those purposes, so there is nothing to opt out of, but you may still exercise your other rights.

These rights are provided under laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act, the Connecticut Data Privacy Act, and comparable laws in Virginia, Colorado, Utah, and other states. We will not discriminate against you for exercising any of these rights.

To exercise a right, email support@stowedapp.app from the email address associated with your account, and tell us which right you want to exercise. We will verify your request before acting on it and respond within the time required by applicable law. You may use an authorized agent to submit a request on your behalf, and where required by law you may appeal a decision by replying to our response. If you are an employee or member of an organization that uses Stowed, much of your information is controlled by that organization, and we may direct your request to them.

Do not sell or share

We do not sell your personal information, and we do not share it for cross-context behavioral or targeted advertising. We do not use your business data to train advertising models or to market third-party products to you.

Children's privacy

Stowed is a business tool intended for use by adults acting on behalf of a business. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Stowed is not intended for anyone under 18. If you believe a child has provided us personal information, contact us and we will delete it.

Account deletion

You can request deletion of your account and associated personal information at any time. See our Support page for steps, or email support@stowedapp.app with the subject "Delete my account."

Changes to this policy

We may update this policy from time to time. When we do, we will revise the date at the top of this page. Significant changes will be communicated through the app or by email. Your continued use of Stowed after an update takes effect means you accept the revised policy.

Contact

Questions about this policy can be sent to support@stowedapp.app.