Data Processing Terms

1. Roles

You decide why and how your data is used. We process it only for you, as your service provider. Where a privacy law uses these words, you are the business or controller and we are the service provider or processor.

2. Your instructions

• We process your data only to run MotherStock for you: to receive and pack orders, ship them, handle returns and exchanges, track inventory and serials, and work out costs and profit; to support you; to keep the service secure; and as the law requires.
• Your instructions are these terms, the Terms of Use, and the settings and actions your users choose in MotherStock. If we think an instruction breaks the law, we will tell you.
• We don't sell your data, share it for advertising, combine it with any other company's data, or use it for anyone but you.

3. Our people

Only people who need to, to run or support MotherStock, can reach your data, and each of them is bound to keep it confidential. Our support staff open your workspace only through support access, which your owner controls, and their actions appear in your audit log.

4. Service providers

We use the service providers listed on our Privacy page, each only for its own job and under terms that protect your data at least as well as these. We will update that list at least 30 days before adding a provider that receives your data, and you may cancel before then if you object.

5. Security

We protect your data with the measures described on our Security page, including encryption in transit, encrypted storage of connected-account keys, separate data per company, sign-in protections, and an audit log.

6. Helping you with requests

If a buyer or a member of your staff asks to see, correct, or delete their personal data, we will help you answer, and we will pass on any such request we receive directly. An Admin can also choose to clear buyer details from orders 30 days after delivery.

7. If something goes wrong

If we learn that someone got into your data without permission, we will tell you without undue delay, and within 72 hours, with what we know and what we are doing. We will help you meet any duty you have to tell buyers or regulators.

8. Marketplace data

When you connect a marketplace account, such as Amazon, we use what it returns only for the purposes above and follow that marketplace's rules for developers. If you disconnect it, we delete the data that came from it right away. If the marketplace stops accepting the connection, we stop reading from it and delete that data 30 days later, unless you connect it again before then. If the marketplace asks us to delete it sooner, we will.

9. When you leave

When your plan ends, you can ask for a copy of your data within 30 days. After that we delete it, and copies in backups are deleted on their normal schedule, within 30 days. On request we will confirm the deletion in writing.

10. Showing we comply

On reasonable request, and no more than once a year unless the law or a security incident requires it, we will answer your written questions about how we protect your data and share our current security policies.

Contact

Questions about these terms: paul@motherstock.app.