DRAFT — before legal review. This text was drafted by the service team. It is not legal advice and it may change.

Privacy Policy

Draft written on 2026-10-07. StockVial is operated by BSI3Q LLC, a company in Florida, USA. Questions about this policy: info@bsi3q.com.

1. What we collect

• Account: email address, display name, and how you sign in (email and password, or Google). If you sign in with Google we receive only your name and email address. Passwords are handled by our sign-in provider and are not readable by us.
• Lab details: the lab name, institution, shipping address and contacts, if you enter them.
• Inventory records: items, stock, storage places, purchase requests, orders, inspections, and the receiving, use and disposal records you or your lab members create.
• Delivery-note and label photos: photos you take or upload to receive goods.
• Photo-reading logs: each time a photo is read automatically we keep a log: the time, who asked, the name of the model, the reading result, and a reference to the photo.
• Billing: card details are entered with Stripe and are never stored by StockVial. We keep the Stripe customer reference, your plan, and the subscription status and dates.
• Messages you send us: feedback you send from the app.
• Usage numbers: aggregate counts of the sign-up flow (how many accounts and labs were created and how many added items). They are counts only.
• Server logs: technical logs used to keep the service running and secure.

2. How we use it

To run the stock, purchasing and purchase-record features; to sign you in and keep accounts secure; to apply plan limits and take payment; to answer your questions; and to improve the service. We do not sell your data and we do not show advertising.

3. Photos and automatic reading

When you read a delivery-note or label photo automatically, the photo is sent to our AI service provider, Anthropic, only to read the text in it. Under the provider's terms, data sent through its commercial API is handled according to those terms; please read them for how the provider treats the data.

Where your lab keeps photos: your lab chooses in its settings. If the lab keeps photos on its own computer, the photo is removed from our server after it has been read and saved to that computer, and photos that are not registered are removed after 24 hours. If the lab keeps photos in the cloud (Lab plan 20 GB, Enterprise plan 100 GB), we store them for the lab until the lab deletes them.

4. Who processes data for us

• Supabase — database, sign-in and file storage. The StockVial database runs in the United States (AWS US East, us-east-1).
• Railway — hosting of the application servers.
• Stripe — payments and the subscription portal.
• Anthropic — automatic reading of photos, only when you use that feature.
• Google — sign-in, only when you choose "Continue with Google".

5. Where your data is stored

Data is stored and processed in the United States. This includes data of people who use StockVial from outside the United States, such as Korea or Spanish-speaking countries. By using the service you understand that your data is transferred to and stored in the United States.

6. Security

Data is encrypted in transit and at rest by our infrastructure providers, and each lab's data is separated from other labs. More in Security.

7. How long we keep data and how it is deleted

• While the account exists, we keep your data.
• After a subscription ends or a payment stops, the lab can still view and download its data for 90 days. After that period we may delete the lab's data, so please export what you need before then.
• Receiving, use and disposal records and delivery notes are not edited or deleted by the app. A mistake is corrected by adding a cancellation record.
• A lab admin can ask to delete all delivery-note photos on the server from the settings. The request needs several confirmation steps, the photos are deleted permanently after 7 days, and the request can be cancelled before then.
• We intend to keep photo-reading logs for about 90 days.
• You can ask us to delete your account or your lab's data by writing to info@bsi3q.com.

8. Your choices and requests

You can see and correct your information in the app, and a lab admin can export all of the lab's records and photos at any time. To ask us for a copy, a correction or a deletion, write to info@bsi3q.com. Depending on where you live, local law may give you additional rights; we will look at every request.

9. What is stored in your browser

We do not use advertising or tracking cookies. The browser's storage is used only for what the app needs: keeping you signed in, your display language, and where to return after a scan.

10. Changes to this policy

If this policy changes we will update this page, and tell you on screen about important changes.