Privacy

Last updated 8 September 2026.

Stowdesk keeps a record of what you bought, what it cost, where it is and what it sold for. That is financial record-keeping, so this page says plainly what is stored, where, and who else can see it.

The short version. Your ledger is yours. It is not sold, not shared, not used to train anything, and not read by us except when you ask for help with a fault. You can export all of it at any time, and you can ask for it to be deleted.

Who we are

Stowdesk is a TropicDevWorx product, operated by Tropic Endeavors, LLC of Vero Beach, Florida. Written notice can be sent to PO Box 651131, Vero Beach, FL 32965. Stowdesk is a tool for a business, and an account holder must be 18 or over; it is not intended for children and is not offered to them.

What we collect

Your account. Email address, a hash of your password (never the password), and if you turn on two-factor sign-in, an encrypted authenticator secret and a set of recovery codes.
Your ledger. Purchases, items, costs, shelf addresses, sales, refunds, and the photos of items you upload or import.
Your buyers' details, when a sale brings them. A name, a shipping address and sometimes a phone number arrive with an order so that a packing slip can be printed. That information belongs to the person who bought from you, not to us and not to you; it is held so that Stowdesk can do the job you are using it for, and nothing else.
Sign-in activity. Enough to lock an account after repeated wrong passwords, and a record of devices you have paired.

Measurement stops at the sign-in gate. Every page you can reach without signing in carries Google Analytics: the front page, pricing, the questions, the comparison, the contact form, these documents, and the sign-in and sign-up forms. It records which page you opened, which site or search sent you to it, your approximate location worked out from your IP address, and what your browser reports about itself. It sets its own cookies.

No page behind the sign-in is measured, by Google or by anyone. Your ledger, your items, your costs and your buyers' details are never sent to a third party, and no page that displays them loads a script belonging to one. That is a rule about the code rather than a promise about intent: pages inside the app are addressed by the SKU of one of your items or the number of one of your orders — /order/08-15129-25453 — and a page view carries its address, so measuring the app would send those to Google on every screen.

One exception, and only if you switch it on. The pull list can be worked by voice. Switching that on hands your microphone to your browser's own speech service, which in Chrome and Edge means the audio goes to Google and comes back as words. What travels is what the microphone hears. Nothing about your cards goes with it, Stowdesk never receives the audio, and no other page asks for a microphone. It is off until you switch it on and it stops when you leave the page.

Nothing here is advertising, and nothing here builds a profile of you or is sold to anyone who would. Besides Google's cookies on the public pages, one cookie is set, and it is the one that keeps you signed in.

Where your data is stored

The database and the application are hosted in the United States, on Vercel with a Neon Postgres database. Item photos are held in object storage. Each account's rows are separated in the database itself rather than by application code, so one account cannot read another's even if a query is written wrongly.

Who we share it with

Stripe handles subscription payments. Card details are entered into a form Stripe controls and are never seen by, sent to, or stored by Stowdesk. Stripe is told your email address and which plan you chose.
SendGrid delivers email — address verification, password resets, and the alerts you switch on.
eBay, only if you connect it, and only with the permissions you grant. The connection can be revoked at eBay or removed here at any time.
Google Analytics, on the public pages only. It is told which page was opened, the address you came from, and what your browser reports about itself. It is never told anything about your ledger, because it is not on any page that has one.
Google's speech service, and only while you have voice control of the pull list switched on. Your browser sends it what the microphone hears and gets back the words you said. Stowdesk never receives the audio, and nothing about your ledger is sent with it.

Nobody else. Your inventory is not sold, licensed, aggregated into market data, or used to train a model.

How it is protected

Passwords are hashed with PBKDF2-HMAC-SHA256 at 210,000 iterations and cannot be read back, by us or by anyone who obtained the database.
Your authenticator secret and your eBay permission are encrypted at rest under a key held separately from the database.
Every request runs as your account at the database level, and the connection the application uses is deliberately unable to bypass that.
Webhook messages from Stripe are cryptographically verified before they are acted on.

Export and deletion

Your whole ledger exports as a single JSON file, whenever you want it, from the Backup page. It is not a summary; it is the data. There is no charge for it and it does not depend on having a paid plan. Taking one regularly, and keeping it somewhere that is not this service, is strongly recommended — see the terms.

To have your account and its data deleted, contact us and we will delete it. Personal information is removed from live systems within 30 days of the request; backups expire on their own schedule and are not searched to pull single records out early. Buyer details that arrived with orders are removed along with everything else.

Links that earn us a commission

Some links on this site are affiliate links. If you sign up for CardUploader through the link on our CardUploader page, CardUploader pays us a commission. You are charged the same either way and it does not change what you are offered.

Following one takes you to that company's own site, where their privacy policy applies rather than this one. Nothing about your ledger, your items or your figures goes with you: the link carries a code naming Stowdesk as the referrer and nothing identifying you.

Every page carrying one of these links says so on the page itself.

Changes to this policy

If this page changes in a way that affects what is collected or who sees it, account holders will be told by email rather than by a silent edit.

Contact

Questions, corrections, an export, or a deletion request: get in touch.