Part I — Introduction & Identity

1. Who We Are

Lean$tock is an AI-powered inventory management and liquidation-planning SaaS platform designed for businesses — including retailers, wholesalers, distributors, and trading companies — primarily operating in the United Arab Emirates.

Contact: privacy@leanstock.app · leanstock.app

2. Purpose of This Policy

This Privacy Policy explains what personal and business data we collect, why and how we use it, with whom we share it, how long we retain it, the rights you hold under applicable law, and how to exercise those rights.

3. Definitions

Part II — Data We Collect

4. Categories of Data Collected

4.1 Account & Identity Data

• Full name and email address (via Supabase Authentication)
• Password (stored in hashed form — we never see your plaintext password)
• Business name, industry sector, operating locations, and preferred liquidation channels
• Team member email addresses (where you invite colleagues)

4.2 Inventory & Commercial Business Data

• Product names, SKU codes, descriptions, brands, and categories
• Unit quantities, cost prices, selling prices, and currency denominations
• Last-sold dates, expiry dates, and purchase dates

4.3 Automatically Collected Technical Data

• IP address and approximate geolocation
• Browser type, operating system, and device type
• Pages visited, features used, timestamps, and session duration
• Authentication tokens (JWTs, stored in your browser session)

Part III — How We Use Your Data

6. Purposes of Processing

Part IV — AI Processing & Third-Party Services

8. Artificial Intelligence Processing

8.1 How AI is Used

• Liquidation Plan Generation: Your inventory data is transmitted to the Anthropic Claude API to generate liquidation recommendations, pricing guidance, and channel suggestions.
• Compliance Checking: Inventory data is transmitted to the Anthropic Claude API with web-search capability to check product compliance against Dubai Municipality, ESMA, UAE Federal Law, and Dubai Customs requirements.
• AI Advisor: A summary of your inventory and your typed messages are transmitted to the Anthropic Claude API to provide advisory responses within the session.

8.2 No Training on Your Data

Lean$tock does NOT use your Personal Data or Business Data to train, fine-tune, or improve any AI model. Anthropic similarly prohibits use of API-submitted data for model training by default.

9. Third-Party Sub-Processors

10. Cross-Border Data Transfers

Your data is transferred to and stored in the United States. For EU/EEA/UK users, transfers are made pursuant to Standard Contractual Clauses (SCCs). For UAE users, transfers comply with PDPL Article 22.

Part V — Data Retention

Part VI — Data Security

• Encryption in Transit: All data is encrypted using TLS 1.2 or higher (HTTPS).
• Encryption at Rest: Data stored in Supabase is encrypted at rest using AES-256.
• Access Control: Row-Level Security (RLS) policies ensure each company's data is logically isolated.
• Authentication: JWT authentication for all API requests; sessions expire and require re-authentication.

Part VII — Cookies & Tracking

We do not use third-party advertising cookies, cross-site tracking pixels, or analytics platforms that track you across other websites.

Part VIII — Your Rights

Regardless of your location, you have the right to: know what Personal Data we hold; access a copy; correct inaccurate data; delete your data; object to certain processing; withdraw consent; and lodge a complaint with your local data protection authority.

UAE supervisory authority: UAE Data Office — uaedataoffice.ae

EU supervisory authority: Your local EU Member State authority — edpb.europa.eu

Contact us: privacy@leanstock.app

Part IX — Children's Privacy

Part X — Updates and Contact

We may update this Policy from time to time. Material changes will be notified via email no fewer than 14 days before taking effect.

Email: privacy@leanstock.app

© 2026 Lean$tock · hello@leanstock.app

Privacy Policy · Terms of Service · AI Disclosure · ← Back