Privacy Policy

1. Introduction

SpireStock ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our distribution management platform, website, and related services.

By accessing or using SpireStock, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this policy, please do not access our platform.

2. Data We Collect

2.1 Information You Provide

• Account registration details (name, email address, phone number, company name)
• Billing and payment information (processed securely via third-party payment providers)
• Business data you upload or enter (orders, inventory, customer records, delivery routes)
• Communications with our support team (emails, chat messages, phone call records)
• Profile preferences and settings

2.2 Information Collected Automatically

• Device information (browser type, operating system, device identifiers)
• Usage data (pages visited, features used, session duration, click patterns)
• IP address and approximate geographic location
• Log data and error reports

3. How We Use Your Data

We use the information we collect for the following purposes:

• To provide, operate, and maintain our distribution management platform
• To process transactions and send related billing information
• To improve, personalize, and expand our services
• To communicate with you about updates, security alerts, and support
• To detect, prevent, and address technical issues or fraudulent activity
• To comply with legal obligations and enforce our terms of service
• To provide analytics and insights about your distribution operations

4. Data Sharing

We do not sell your personal data. We may share your information only in the following circumstances:

• Service Providers: Trusted third-party vendors who assist us in operating our platform (hosting, payment processing, analytics, email delivery).
• Legal Compliance: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.
• With Your Consent: When you explicitly authorize us to share your information with specific third parties.

5. Data Storage and Security

Your data is stored on secure servers hosted on Amazon Web Services (AWS) in India (Mumbai and Hyderabad regions). We implement industry-standard security measures including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Regular security audits and vulnerability assessments
• Role-based access controls and multi-factor authentication
• Automated backups and disaster recovery procedures

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on our platform. These include:

• Essential Cookies: Required for core platform functionality (authentication, session management).
• Analytics Cookies: Help us understand how users interact with our platform to improve performance.
• Preference Cookies: Remember your settings and preferences across sessions.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

7. Third-Party Services

Our platform may integrate with or contain links to third-party services. These services have their own privacy policies and we are not responsible for their practices. Third-party services we may use include:

• Payment gateways (Razorpay, Stripe)
• Cloud infrastructure (Amazon Web Services)
• Analytics services (Google Analytics, Mixpanel)
• Communication services (email, SMS, WhatsApp Business API)

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your personal data for specific purposes.
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. When your account is deleted, we will remove or anonymize your personal data within 90 days, except where retention is required for legal, tax, or regulatory compliance.

Business data you uploaded to the platform will be permanently deleted within 30 days of account termination. You may request an export of your data before closing your account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will also send an email notification to registered users. Your continued use of SpireStock after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: