Privacy Policy

1. Data Controller

Lithosbase is operated as a SaaS platform. The data controller for personal data processed through this service can be reached at support@lithosbase.app.

2. Data We Collect

• Account information: email address, full name (provided at registration)
• Workspace data: inventory items, stock movements, photos you upload
• Usage data: log files, timestamps, IP addresses for security purposes

3. How We Use Your Data

• To provide and improve the Lithosbase service
• To authenticate users and manage workspace access
• To send transactional emails (invitations, password resets)
• To detect and prevent fraudulent or abusive activity

4. Data Storage and Security

Data is stored on Supabase infrastructure (hosted on AWS eu-west). We use row-level security (RLS) to ensure each workspace only accesses its own data. Photos are stored in private Supabase Storage buckets.

5. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to access, correct, or delete your personal data. To exercise these rights or request account deletion, visit Account Deletion or contact us at support@lithosbase.app.

6. Cookies

We use strictly necessary cookies for authentication (session management). We do not use advertising or tracking cookies. Your theme preference is stored in localStorage only on your device.

7. Third-Party Services

• Supabase — database, authentication, storage (privacy policy)
• Vercel — hosting and CDN (privacy policy)

8. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or a banner in the app.