Privacy Policy

StoreBox is a smart inventory management app and website operated by Dravsnik Investments Pty Ltd (ABN 15 613 607 686), based in Queensland, Australia ("StoreBox", "we", "us"). This policy explains what information we collect through the StoreBox website (storeboxhq.com) and the StoreBox mobile app, how we use it, and the rights you have over it.

The short version: we collect what's needed to run the service, we don't sell your data, we don't show ads, and your inventory belongs to you.

1. Information we collect

Account information. When you create a StoreBox account: your email address, a display name, and your password (stored only as a secure cryptographic hash — we never store or see your actual password). If you sign in with Google, we receive your email address and name from Google instead.

Your inventory content. The items, locations, containers, photos, values, serial numbers, notes, checklists and related records you choose to enter into the app. This content is yours; we store and process it solely to provide the service to you and your workspace.

Device permissions. The app requests camera access (for QR scanning and item photos) and NFC access (for reading and writing tags). These are used on your device for those features — we do not use them to collect anything beyond the content you deliberately capture.

Launch mailing list. If you sign up on our website to be notified at launch, we collect your email address, managed through our email provider (Mailchimp). Every email includes an unsubscribe link.

Technical information. Basic technical logs necessary to operate and secure the service (such as authentication events and error diagnostics).

2. How we use your information

• To provide the StoreBox service: storing and syncing your inventory across your devices and workspace.
• To operate accounts and authentication, including password reset and sign-in emails.
• To notify you about the launch and service updates if you joined the mailing list.
• To maintain security, prevent abuse, and diagnose faults.

We do not sell your personal information, and we do not use your inventory content for advertising.

3. Where your data lives and how it's protected

• Encrypted in transit — all connections between your device and our servers use TLS.
• Encrypted at rest — stored data is encrypted with AES-256 on our database infrastructure (hosted with Supabase).
• Workspace isolation — row-level security controls ensure your inventory is accessible only to members of your workspace.
• Offline copy — a copy of your inventory is stored locally on your device so the app works without a connection; it is protected by your device's own security.

4. Who we share information with

Only service providers who help us run StoreBox, and only to the extent needed:

• Supabase — database, authentication and backend hosting.
• Resend — delivery of account emails (sign-up confirmation, password reset).
• Mailchimp — management of the launch mailing list.
• Google — only if you choose to sign in with Google.

We may also disclose information where required by law. We do not share your data with advertisers or data brokers.

5. Your rights and choices

• Access & export — you can export your full inventory to CSV from within the app at any time.
• Correction — you can edit your account and inventory information directly in the app.
• Deletion — you can request deletion of your account and associated data by contacting us.
• Unsubscribe — every marketing email contains an unsubscribe link; account-service emails (like password resets) are sent only when needed.

To exercise any of these rights, email hello@storeboxhq.com. We handle personal information in accordance with the Australian Privacy Principles, and we extend equivalent rights (including access, correction and erasure) to users in other regions, including those covered by the GDPR and similar laws.

6. Data retention

We keep your account and inventory data for as long as your account is active. If you delete your account, associated personal data is removed from our production systems within a reasonable period, allowing for routine backups to cycle out.

7. Children

StoreBox is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

8. International users

StoreBox is operated from Australia and our infrastructure providers may store data in other countries. Wherever your data is processed, it is protected by the measures described in this policy.

9. Changes to this policy

If we make material changes to this policy, we'll update this page and revise the "Last updated" date. Continued use of the service after changes take effect means you accept the updated policy.

10. Contact

Questions or requests: hello@storeboxhq.com