InvoShelf

Privacy Policy

GlazeDigital LLC | Effective July 1, 2026

✓ TIP: Your privacy is important to us. This policy explains how GlazeDigital LLC collects, uses, stores, and protects information when you use InvoShelf. We never sell your data. We never share it with advertisers.

1. Who We Are

GlazeDigital LLC is an Indiana limited liability company that operates InvoShelf at invoshelf.com. Questions: privacy@invoshelf.com.

2. Information We Collect

ACCOUNT INFORMATION: your name, email address, and password (stored as encrypted hash — we never see your password). BUSINESS INFORMATION: business name, location names, and other details you provide. INVENTORY DATA: item names, quantities, prices, categories, notes, and any inventory information you enter. INVOICE DATA: photos or PDFs of invoices you upload for scanning. BILLING INFORMATION: collected and processed by Stripe — we do not store your full card number. USAGE DATA: features used, pages visited, timestamps of activity. DEVICE INFO: device type, OS, browser type. LOG DATA: IP address, access times, errors. VOICE DATA: audio processed by OpenAI Whisper — not stored on our servers after processing. We do not collect precise GPS location.

3. How We Use Your Information

We use your information to: provide, operate, and maintain InvoShelf; process subscription payments; send monthly automated backup emails; send service-related emails (receipts, alerts, notifications); respond to support requests; monitor usage to improve the Service; detect and prevent security incidents; comply with legal obligations. WE DO NOT use your inventory data for advertising. WE DO NOT sell your data to third parties. WE DO NOT use your data to train AI models without your explicit consent.

4. How We Share Your Information

SERVICE PROVIDERS: Stripe Inc (payment processing, stripe.com/privacy), OpenAI LLC (voice and invoice AI processing, openai.com/policies/privacy-policy — audio not retained after processing), Cloudflare Inc (CDN and security), Backblaze Inc (offsite backup storage). LEGAL REQUIREMENTS: we may disclose information in response to valid legal requests and will notify you where legally permitted. BUSINESS TRANSFERS: if GlazeDigital is acquired or merged, your data may transfer — we will notify you before this occurs. WE NEVER: sell personal information, share inventory data with competitors or advertisers, allow third parties to use your data for their marketing, or share data between separate customer accounts.

5. Data Storage and Security

Your data is stored on servers in the United States operated by GlazeDigital LLC. Backups are stored with Backblaze Inc, also in the United States. Security measures: TLS/HTTPS encryption for all data in transit, one-way password hashing, restricted database access, firewalls limiting access to necessary ports only, Fail2ban blocking unauthorized access attempts, regular security reviews and prompt patch application. No method of electronic storage is 100% secure. We will notify you of any data breach affecting your personal information as required by applicable law.

6. Voice Input and AI Processing

When you use voice input your spoken words are transmitted to OpenAI Whisper for transcription. Audio is sent securely over HTTPS. Raw audio recordings are not stored by GlazeDigital after transcription. OpenAI's handling is subject to their API data usage policies. Invoice images uploaded for scanning are processed by OpenAI's vision model — images are not retained by GlazeDigital after processing. You can use InvoShelf without voice input using manual entry or barcode scanning.

7. Data Retention

We retain your data as long as your account is active. After cancellation your data is retained for 30 days, after which all inventory data, usage data, personal information, and uploaded files are permanently deleted. Billing and payment records are retained for 7 years as required by US tax law. Deletion propagates to backup copies within 30 days as backups are rotated.

8. Your Rights and Choices

ACCESS AND CORRECTION: update account information in account settings anytime. DATA PORTABILITY: use Export Data in account settings for a complete data export in CSV or ZIP format at any time. DELETION: go to Account Settings > Delete My Account — all data deleted within 30 days, billing records retained 7 years per law. EMAIL OPT-OUT: unsubscribe from marketing emails at any time — you cannot opt out of essential service emails (payment confirmations, security alerts, backup emails, low stock notifications). PUSH NOTIFICATIONS: enable or disable in account settings or phone settings. CALIFORNIA CCPA: California residents have the right to know what personal information we collect, the right to delete it, the right to opt-out of its sale (we do not sell data), and the right to non-discrimination for exercising CCPA rights. Contact privacy@invoshelf.com — we respond within 45 days.

9. Cookies

ESSENTIAL COOKIES: required for login sessions — cannot be disabled. FUNCTIONAL COOKIES: remember preferences like dark mode — can be disabled. ANALYTICS COOKIES: help us understand usage patterns — can be disabled through cookie preferences. On your first visit to invoshelf.com a cookie consent banner will appear with options to Accept All, Manage Preferences, or accept Essential Only.

10. Children's Privacy

InvoShelf is not directed to individuals under 18. We do not knowingly collect information from children under 18. If you believe we have done so inadvertently please contact privacy@invoshelf.com immediately.

11. Changes to This Policy

We may update this Privacy Policy at any time. We will notify you by email at least 30 days before material changes take effect and update the effective date at the top of this page. Continued use of InvoShelf after the effective date constitutes acceptance.

12. Contact Us

GlazeDigital LLC — Privacy Inquiries | Email: privacy@invoshelf.com | Support: support@invoshelf.com | Website: invoshelf.com/privacy | We respond to privacy inquiries within 30 days.