Legal

Privacy notice

Effective 2026-08-28

Who is responsible

Timastra LLC, located at Wyoming, United States, operates Inventory and is responsible for the personal information described in this notice. Contact our privacy team at [email protected].

Information we process

We process account identity and contact details, organization membership and permissions, inventory and commercial records, service configuration, support history, billing references, security and audit logs, device and request metadata, and product telemetry. Customers decide what business records their authorized users submit to Timastra Inventory.

Why we process it

We use information to provide and secure the contracted service, authenticate users, fulfill configured workflows, prevent abuse, process subscriptions, communicate about the service, support users, improve reliability, and meet legal obligations. Depending on the context, processing is necessary to perform a contract, comply with law, pursue legitimate interests in operating a secure service, or act on consent where required.

Sharing and international processing

Subscription checkout is handled by the selected provider: Stripe, Polar, Lemon Squeezy, Dodo Payments, Paddle, or Creem when enabled. The provider receives purchaser contact details, workspace billing references and the selected subscription. Card details are entered on the provider’s hosted pages.

Information is available to authorized organization members under role-based permissions. Hosting, identity, payment, communications, backup, and monitoring providers may process the limited information needed to provide their services under contractual and security controls. We do not sell personal information. The primary service region is Canada East (Beauharnois, Quebec) on OVHcloud; providers may process information in other countries with legally required transfer safeguards.

Retention

We retain active account and operational data while needed to provide the service. Organization administrators can export operational data. After termination or an approved deletion request, data is deleted or anonymized according to the applicable order and backup cycle, except that billing, audit, fraud-prevention, security, and legal records may be retained where reasonably necessary or required by law.

Your choices and rights

You can update many account and organization details in the service. Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to complain to a regulator. Submit requests through your organization administrator or email [email protected]. We may verify identity and authority before acting.

Security, cookies, and changes

Timastra Inventory uses tenant isolation, access controls, audit trails, rate limits, encrypted transport, opaque session cookies, and time-limited support sessions. Essential cookies are used for authentication and request security. No system is completely secure. We may update this notice as the service or law changes and will publish the new effective date here.