StockPoint ("StockPoint," "we," "us") operates getstockpoint.com and the StockPoint field-service management platform from the United States. This policy explains what information we collect, why, how it is protected, and the choices available to you. We built StockPoint to handle sensitive workforce data, and we treat that as a design constraint, not a marketing line: we do not sell personal information, we do not run advertising trackers, and we collect only what the service needs to work.
Two roles: our data and your company's data
For visitors to this website and for the account holders who sign up, StockPoint decides how data is used — we are the controller of that data. For the information a subscribing company loads into the platform — its workers, clients, buildings, time punches, pay records, and documents — the company is the controller and StockPoint processes that data on its instructions, solely to provide the service. If you are a worker or a client of a company that uses StockPoint, your employer or vendor decides how that data is used; direct requests about it to them first, and we will assist them in honoring those requests.
What we collect
Account and company data: your name, email address, company name, industry, and password (stored only as a salted hash). Billing: payments are processed by Stripe; we receive subscription status and the last four digits of a card, never full card numbers.
Operations data your company loads: workers and their pay rates, clients, buildings, schedules, inventory, invoices, and related records.
Time-clock verification data: when a worker punches in or out, the punch records the time, the kiosk or device used, GPS coordinates captured only at the moment of the punch (StockPoint does not continuously track anyone's location), and, where the employer enables it, a verification selfie compared against the worker's profile photo. Selfies are used only to verify the punch and are retained as part of the time record.
Payroll and tax data: where the employer uses payroll features, W-4 elections and Social Security numbers. SSNs are encrypted with AES-256-GCM before storage, displayed only as the last four digits, and every full-value reveal is written to an audit log.
Usage and log data: sign-ins, actions taken in the app (kept in a per-company audit trail), IP addresses, and basic device information, used for security and support.
How we use information
To provide and operate the service; to compute the timesheets, invoices, pay stubs, and reports your company asks for; to process subscription billing; to send transactional email (invoices, alerts, pay-notice deliveries, sign-in and account messages); to answer support requests; to keep the platform secure; and to meet legal obligations. If a company uses the built-in AI assistant, the relevant question and the minimum necessary company data are sent to our AI provider to generate the answer and are not used to train its models.
Who we share data with
We share data only with the service providers that run StockPoint, each bound to use it solely to provide their service to us: Vercel (application hosting), Supabase (database hosting, United States), Stripe (payments), Resend (email delivery), Intuit QuickBooks Online (only when your company connects its own QuickBooks account), Anthropic (AI assistant responses, when used), and PostHog (product analytics — page views and feature-usage events, run without analytics cookies; session recordings are limited to the public marketing site with all typed input masked, and never run inside the app — worker photos, pay data, and SSNs are never sent to analytics). We may disclose information if required by law, and we will challenge overbroad demands. If StockPoint is ever acquired, data transfers with the business under this policy's protections. We never sell personal information and never share it with advertisers or data brokers.
Security
All traffic is encrypted in transit (TLS) and data is encrypted at rest. Every database table is protected by row-level security so each company's data is isolated from every other company's. Sensitive fields (SSNs) carry additional field-level AES-256-GCM encryption. Administrative actions are audit-logged with who, what, and when. Access to production systems is restricted and credentialed. No system is perfectly secure; if a breach affects your personal information, we will notify affected customers without undue delay.
Retention
We keep data for as long as the company's account is active. If a trial or subscription lapses, the account becomes read-only and the data is retained so the company can export it or resume service. Companies can request deletion of their account and data at info@getstockpoint.com; we honor those requests except where records must be kept for legal, tax, or billing reasons. Wage-notice and payroll records are retained in line with the employer's legal obligations (in New York, six years or longer) unless the employer instructs otherwise in writing.
Your choices and rights
Account holders can access and correct their information in the app and can request a copy or deletion of their data at info@getstockpoint.com. Workers can see their own punches, rates, and pay records in the My Pay portal, and may direct access, correction, or deletion requests to their employer, which controls that data; we support employers in honoring them. Depending on where you live (for example, California), you may have additional statutory rights — write to us and we will honor them as the law requires. We do not discriminate against anyone for exercising privacy rights.
Cookies
StockPoint uses only the cookies required to keep you signed in. No advertising cookies, no cross-site trackers.
Children
StockPoint is a business tool and is not directed at children. Worker accounts are created by employers for individuals of legal working age.
Changes and contact
If we make material changes to this policy we will post the new version here and update the effective date, and for significant changes we will email account holders. Questions, requests, or concerns: info@getstockpoint.com. StockPoint is operated from Wyoming, USA.