Privacy

What we store

• Your account: the email address you signed in with, your name and picture if Google or GitHub sent them, and your sessions.
• Your workspace: items, bills of materials, stock and its movements, vendors, customers, orders, purchase orders, work orders, approvals and the activity log naming who did what.
• Files you upload (a competitor quote, a customer purchase order, an import file) and the text read from them.
• Technical logs: request time, route and error codes. They hold no prompts, documents or passwords.

The demo uses synthetic sample data. Do not enter real customer or personal data while it is a demo.

Who else handles it

• Supabase hosts the database, sign-in and file storage. Every table is locked to the people in your workspace, by role.
• Vercel serves the web app.
• Google and GitHub confirm who you are when you choose them to sign in. They do not receive your workspace data.
• Resend sends the sign-in email and, only if you turn it on, the daily alert digest.

The AI provider

The assistant, the import column mapper and the quote and purchase order readers use Claude from Anthropic. They run only after the workspace owner gives consent on the consent screen, and the owner can withdraw it at any time; the rest of Lockstock keeps working.

When you use one of them, Lockstock sends Anthropic the item, vendor, order and cost data and the documents you chose for that request. It never sends sign-in details, tokens, QuickBooks credentials or another workspace’s data. The AI cannot write anything: it only proposes, and a person approves.

QuickBooks and Shopify

QuickBooks runs against the Intuit sandbox only. Shopify connects to a free development store, read only. Their access tokens are encrypted and used only on the server. Disconnecting removes them.

Export and delete

The owner can export every record in one click from the Export screen. You can delete your account and, as owner, the whole workspace from Delete account. A teammate who deletes their account is shown as “Former member” in the activity log. See how deletion works.

Contact

Questions or requests: lockstock@outerscope.xyz, or use Support.