Privacy Policy

PartStow provides software for automotive parts inventory, warehouse management, reporting, customer portals, imports, integrations, and related workflows.

Questions about privacy can be sent to sales@partstow.com.

This Privacy Policy explains how PartStow collects, uses, stores, shares, and protects personal data when users access the PartStow application, website, customer portal, support channels, or related services.

For business customers, PartStow may process personal data on behalf of the customer. In that case, the customer is usually the data controller and PartStow is usually the data processor. PartStow may also act as a controller for account administration, billing, security, analytics, and legal compliance.

• Account data: name, email address, organization, role, authentication details, and user permissions.
• Business contact data: customer, supplier, and trade account contacts entered into the platform.
• Inventory and operational data: parts, locations, stock movements, imports, notes, references, and warehouse activity that may include user names or business contacts.
• Customer portal data: customer account activity, search activity, requests, quotes, messages, and access logs.
• Billing data: subscription details, invoice details, payment status, and tax information.
• Support data: messages, screenshots, diagnostics, and communications sent to PartStow.
• Usage and technical data: IP address, browser, device, timestamps, logs, feature usage, and security events.
• Integration data: data received through connected services such as email or payment providers, where enabled.

• Provide, operate, and secure the PartStow service.
• Create and manage user accounts.
• Process imports, inventory records, locations, reports, movements, and customer portal workflows.
• Support customer service, onboarding, training, and troubleshooting.
• Process billing and manage subscriptions.
• Improve product quality, reliability, security, and performance.
• Detect, prevent, and investigate misuse, fraud, security incidents, and unauthorized access.
• Comply with legal, tax, accounting, and regulatory obligations.
• Send service messages and, where allowed, product communications.

Where the GDPR or similar laws apply, we rely on one or more legal bases:

• Contract: to provide the service and manage customer accounts.
• Legitimate interests: to secure, improve, and operate the service.
• Consent: for optional marketing, cookies, or features where consent is required.
• Legal obligation: to comply with tax, accounting, legal, or regulatory duties.

We may share personal data with:

• Hosting and database providers.
• Security, logging, and monitoring providers.
• Payment and billing providers.
• Email and communication providers.
• Professional advisors.
• Authorities where required by law.
• Business successors if PartStow is involved in a merger, acquisition, financing, or sale of assets.

We do not sell personal data.

PartStow uses the following subprocessors to provide the service:

• Supabase: Database, authentication, and backend services.
• Cloudflare: Hosting, security, and content delivery.
• Stripe: Payment processing (when billing is enabled).

Personal data may be processed in countries other than the country where the user or customer is located. Where required, PartStow will use appropriate safeguards such as standard contractual clauses, data processing agreements, or other lawful transfer mechanisms.

We keep personal data only as long as necessary for the purposes described in this policy, unless a longer retention period is required by law or contract.

Customer data is retained according to the applicable customer agreement. After termination, PartStow provides reasonable export and deletion options, subject to backups, legal obligations, and technical limitations.

PartStow uses administrative, technical, and organizational measures designed to protect personal data. These include authentication controls, role-based access, tenant isolation, encryption in transit, access logging, backups, and least-privilege access practices. No system can be guaranteed to be completely secure.

Depending on location, individuals may have rights to access, correct, delete, restrict, object to, or receive a copy of their personal data, to withdraw consent, and to complain to a data protection authority.

Signed-in users can exercise the core rights directly from their profile page: download a copy of the personal data PartStow holds about them, or delete their account. Where legally required records reference an account (for example the stock-movement audit trail), deletion irreversibly anonymizes the account instead of removing those records.

Where PartStow processes data on behalf of a business customer, requests may need to be directed to that customer.

PartStow uses strictly necessary cookies and browser storage for authentication, security, and preferences. We do not use advertising or cross-site tracking cookies.

PartStow is a business service and is not intended for children. Users should not provide personal data of children through the service.

PartStow may update this Privacy Policy from time to time. Material changes will be communicated through the application, website, email, or another appropriate method.

Questions about privacy should be sent to sales@partstow.com.