Who we are
StockSlab is operated by Cuboid Inc, Pakistan. This Privacy Policy covers the StockSlab desktop app, StockSlab Mobile, and stockslab.pages.dev. Contact us at team.cuboidinc@gmail.com.
Business data we process
Your business enters records such as products, stock, customer and supplier contact information, orders, payments, employee and payroll data. Your business is the controller of this information. Cuboid Inc processes it on your business’s behalf to provide StockSlab.
Your business is responsible for having a lawful basis to collect, use, and share the information it enters into StockSlab, and for responding to requests from its customers, suppliers, and employees.
Account data
We process account information including name, email address, role, and a hashed password. Passwords are hashed with Argon2id on the server and are never stored on your device.
Device and technical data
We process limited technical data needed to run and support the service. This includes app version, operating system, sync timestamps, and error logs. We avoid including business content in error logs where possible.
Mobile camera
StockSlab Mobile uses your camera only when you choose to scan a product QR code. QR scanning happens on-device. Camera images are not stored or uploaded by StockSlab.
Notice for California residents (CCPA/CPRA)
We do not sell or share personal information. California residents may request to know, delete, or correct personal information. Send requests to team.cuboidinc@gmail.com. We will verify the request before responding.
Where data is stored
Desktop business data is stored in an encrypted local database on the user’s PC. We use cloud servers operated by our infrastructure providers for sync and backup. These providers include cloud hosting and managed database providers. We use Cloudflare for the website and file downloads.
International transfers
Our infrastructure providers may process data in countries other than Pakistan. Where data moves across borders, we use appropriate safeguards required by applicable law.
Security measures
We use SQLCipher encryption for the desktop local database, OS credential storage for sign-in tokens, Argon2id password hashing on the server, TLS for data in transit, role-based permissions, and audit logs. No system is perfectly secure, so please keep your device and account access secure.
Retention
We retain business and account data while the business account is active. After a verified deletion request, we remove data from active systems within 30 days and purge backups within 90 days. We may retain audit or financial records where the law requires it.
Your rights and choices
You can ask to access, correct, delete, or export your data through your business owner. Staff members should contact their business owner or admin first. Business owners can contact us at the address above.
Children
StockSlab is not directed to children under 13 and is not intended for children.
Changes and contact
We will post updates to this Privacy Policy on this page and change the last-updated date. Contact team.cuboidinc@gmail.com with privacy questions.