Privacy policy
Effective 22 August 2026. This page describes the current Lockplate Android app and website.
Data we handle
Account data includes your email address, authentication records, workspace membership, and device identifiers used to synchronize changes. Product data includes inventory rows, folders, transaction history, custom fields, and photos you choose to upload.
Checkout and billing
Stripe hosts checkout and processes payment details. Lockplate receives billing identifiers, subscription status, price, cadence, and the date your price was locked. Lockplate does not store complete card numbers.
Website requests
Waitlist and support forms collect the email and message you submit. Short-lived, one-way IP hashes are used to limit abuse. Hosting and infrastructure providers may retain normal security and request logs.
How data is used
We use data to authenticate you, synchronize your workspace, process subscriptions, respond to support, prevent abuse, and operate the service. We do not sell personal data or use third-party advertising trackers in the app.
Processors and locations
Supabase provides authentication, database, Edge Function, and file storage services. Stripe provides payment processing. Vercel hosts the website, and Upstash stores checkout, activation, waitlist, billing-state, and support records.
Retention and control
Inventory and account data remain while your account exists. Activation codes expire after 24 hours. Support requests expire after 90 days. Waitlist records remain through founding-access updates unless you request removal through support. Some operational, billing, fraud, tax, or legal records may remain where required after deletion.
Delete or export
Export is available from Android Settings in every subscription state. Delete your account in Android Settings or use the web deletion page. Export first if you want a copy. Deletion removes the cloud account and associated inventory and photos when no other workspace member must retain them.
Questions
Use the support form for privacy questions or access requests.