KeepStock

Privacy Policy

Last updated: September 29, 2026

Steadfast Digital operates KeepStock, including keepstock.io and its hosted sign-in service at auth.keepstock.io. This Policy explains the personal information we handle when you use these services and how to contact us about your information. Our Terms of Service also apply.

1. Information we collect

  • Account information: your name, email address, verification status, account identifier, roles, and account preferences.
  • Authentication information: sign-in events, sessions, and credentials or authentication factors managed by our hosted identity service. The KeepStock inventory application receives identity information and tokens; you enter your password on the hosted sign-in service.
  • Inventory and collection information: the records you submit, such as item descriptions, quantities, locations, notes, and membership information, together with files and activity records where those features are available. Avoid including unnecessary personal or sensitive information.
  • Technical information: IP addresses, browser or device information, request times, errors, and security or operational logs generated when you access our services.
  • Communications: information you provide when you contact us, and records of account verification, password reset, and service email delivery.

2. How we use information

We use this information to create and authenticate accounts, provide inventory features, maintain records, deliver service messages, answer support requests, troubleshoot problems, prevent fraud and abuse, and meet legal obligations. We also use operational information to understand and improve service reliability.

Where applicable law requires a legal basis, processing may be necessary to provide the service you request, pursue legitimate interests in operating and securing the service, comply with law, or act on your consent. You may withdraw consent for processing based on consent, without affecting processing that was lawful before withdrawal.

3. Who receives information

Information in a shared collection may be accessible to its owner, administrators, and other members according to the service’s sharing features. An organization that manages your collection may have its own policies and responsibilities for its records. Contact that organization about its use of information as well as contacting us about KeepStock.

Steadfast Digital personnel and service providers may process information as needed for hosting, authentication, security, email delivery, support, and service operations. Our authentication service uses Authentik, and account emails are delivered through Steadfast Digital’s mail infrastructure.

Sign-up and password-reset forms use Cloudflare Turnstile to help prevent automated abuse. Cloudflare processes browser and device signals for this purpose; see Cloudflare’s Privacy Policy and Turnstile addendum for details.

We may disclose information where reasonably necessary to comply with law or valid legal process, protect people or the service, investigate abuse, or complete a business reorganization or transfer subject to appropriate confidentiality and applicable law. We may also share information at your direction or with your consent.

We do not sell personal information or share it for cross-context behavioral advertising.

4. Cookies and browser storage

KeepStock and its sign-in service use cookies to maintain sessions, complete authentication, and protect account access. KeepStock’s application session cookie contains an opaque session identifier; authentication tokens are stored on the server. Blocking essential cookies can prevent sign-in from working. You can clear cookies through your browser and end your active session by signing out.

KeepStock does not currently use advertising cookies. If optional tracking or materially different processing is introduced, we will update this Policy and provide any choices or consent controls required by law.

5. Optional features and device permissions

Some features described in KeepStock’s roadmap, including cloud AI recognition, payments, and proximity tools, may not yet be available. This Policy does not mean those features are active. Before introducing processing that materially changes how we use or disclose personal information, we will explain it and obtain consent where required.

Where camera, photo, or other device access is offered, permissions are requested through your device or browser. You can manage those permissions in its settings. Private inventory content is not automatically published in a shared product catalog.

6. Retention and security

We retain information for as long as reasonably necessary to provide the service, maintain legitimate business records, address disputes or abuse, and meet legal obligations. Retention depends on the type of information, account status, security needs, and legal requirements. Backup copies may remain until they are replaced or removed through backup rotation.

We use safeguards such as encrypted web connections and access controls to protect information. No system is completely secure. Protect your credentials, consider enabling multi-factor authentication, and contact us promptly about suspected unauthorized access.

7. Your choices and requests

You may contact us to request access to, correction of, export of, or deletion of your personal information, or to close your account. Depending on your location, you may also have rights to object to or restrict processing, withdraw consent, or complain to a privacy regulator. We will handle requests in accordance with applicable law and may need to verify your identity.

Deleting an account does not necessarily delete collection records maintained by an organization or information we must retain for legal, security, or dispute-resolution purposes. We will explain applicable limitations when responding to your request. Please do not send passwords or unnecessary identity documents with a request.

8. International processing

Information may be processed in countries where we or our service providers operate, which may have different privacy laws from your location. Where applicable law requires safeguards for international transfers, those requirements apply to our processing. Contact us for information about the processing relevant to your account.

9. Children

KeepStock is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

10. Changes to this Policy

We may update this Policy as the service or our practices change. We will update the date above and provide notice of material changes through the service or an account communication, with additional notice or consent where required by law.

11. Contact Steadfast Digital

For privacy questions or requests, email gil.rutkowski@flashingcursor.com with the subject "KeepStock privacy request." Steadfast Digital is the operator responsible for the account and service information described in this Policy.