Privacy policy

Doodle Inventory is a product of DOODLESAVE INC, Thunder Bay, Ontario, Canada ("we"). This policy explains what personal information we handle, why, and your choices. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, Law 25.

Two kinds of information

• Account information about the people who use Doodle Inventory: name, email, role, sign-in history and devices. We are responsible for this information.
• Customer data that businesses put into their workspace: items, stock history, and for the parcels module, recipients' names, units, email addresses, phone numbers, label photos and signatures. The business controls this data; we process it on their behalf and only to provide the service.

What we use it for

• Running the service: signing you in, keeping your workspace secure and sending emails you asked for (invites, pickup codes, reminders, alerts).
• Security: detecting abuse and suspicious sign-ins, and keeping an audit log.
• Support: answering your questions. Doodle Noodle questions are logged so we can improve our help guides.
• Product news by email, only if you ticked the separate consent box (Canada's anti-spam law, CASL). You can unsubscribe at any time.

We do not sell personal information, and customer data is never used for advertising.

Where it is stored

In Canada, with Supabase (database, sign-in and file storage, Montréal region). Our website and app are delivered by Vercel. Emails are sent through Resend. These providers process data only on our instructions.

How long we keep it

• Account information: while your account is active, then deleted within 90 days of closure unless we must keep it for legal reasons.
• Parcel records: each business chooses a retention period (3 months to 5 years); collected and returned parcels older than that are deleted automatically, including photos and signatures.
• Stock history: for as long as the business keeps its workspace.

Security

Encryption in transit and at rest, database-level separation between businesses, two-factor sign-in for owners and managers, breached-password checks and an audit log. See our security page.

Your rights

You can ask to see, correct or delete your personal information, or withdraw consent, by emailing privacy@doodleinventory.com. If you are a parcel recipient, please contact the building or business that received your parcel; we will help them respond. You may also complain to the Office of the Privacy Commissioner of Canada.

Contact

Privacy officer, DOODLESAVE INC · privacy@doodleinventory.com