Privacy Policy

Storbriz is a cloud-based inventory management, point-of-sale, stock control, sales tracking, staff management, multi-outlet operations, reporting, and business analytics platform for retail businesses.

This Privacy Policy applies to:

• visitors to our website at storbriz.com
• business owners and admins using the Storbriz web application
• staff, managers, and cashiers using the web or mobile app
• users of the Storbriz mobile application on Android and iOS
• any person communicating with us for support or business purposes

If you are using Storbriz on behalf of a business, “you” refers to both the individual user and the business on whose behalf you are acting. Your business remains responsible for the data it enters and manages through the platform.

Storbriz is operated by [Company Name], a software business based in Lagos, Nigeria. References to “Storbriz”, “we”, “us”, or “our” in this policy refer to that company and the Storbriz platform it operates.

We collect different types of information depending on how you use the platform.

We use the information we collect for the following purposes:

• Creating and managing business accounts and staff user accounts
• Verifying email addresses before account creation using OTP codes
• Providing inventory management, POS, sales, stock control, and reporting features
• Processing subscription payments and managing billing history
• Managing outlets, products, stock levels, transfers, sales, and receipts
• Generating business reports, analytics, and operational insights
• Sending transactional emails including verification codes, welcome messages, billing confirmations, account alerts, and business notifications
• Delivering low-stock alerts, transfer notifications, and operational notifications
• Providing customer support and responding to enquiries
• Detecting, investigating, and preventing fraud, abuse, and security incidents
• Complying with applicable laws, regulations, and legal obligations
• Improving, maintaining, and developing the Storbriz platform
• Enforcing our Terms of Use and other applicable policies

Our processing of personal information may rely on one or more of the following grounds, depending on the type of processing involved:

• Contract performance: Processing is necessary to provide the Storbriz services you signed up for, including account management, payment processing, and platform features.
• Consent: Where we rely on consent, such as for optional communications, we will obtain it explicitly and provide a clear way to withdraw it.
• Legitimate interests: We may process information to protect platform security, prevent fraud, improve the product, and maintain reliable service, where our interests do not override your rights.
• Legal obligations: We may process and retain information where we are required to do so by applicable law or regulation.

Business owners and their authorized staff are responsible for the data they enter into Storbriz. This includes product information, inventory records, sales data, customer records, outlet configurations, receipts, and any other business information uploaded to the platform.

Storbriz acts as a data processor for this business data. We store and process it on your behalf to deliver the services you have requested. We do not own, sell, or use your business data for our own commercial purposes.

Each business is responsible for ensuring it has the legal right to store and process any customer data it enters into Storbriz, including compliance with applicable data protection rules in its own jurisdiction. If your customers hold rights over their personal information, it is the business owner's responsibility to manage those rights.

Storbriz does not use your customers' personal data for our own marketing, profiling, or any purpose unrelated to delivering the service to you.

Storbriz is a multi-tenant platform. Each business that registers on Storbriz operates within its own isolated workspace. Technical controls are in place to ensure that one business cannot access or view the data belonging to another business on the platform.

Staff users are restricted to their own business workspace. Within a workspace, access is further limited by role and outlet assignment. Staff should not attempt to access data or areas of the platform that fall outside their assigned permissions.

If you believe you can access data you are not authorized to see, or if you suspect a data separation issue, please contact us immediately at support@storbriz.com.

We do not sell your personal information. We may share information in the following circumstances.

Storbriz is operated from Nigeria. Our service providers, including hosting, payment, and email providers, may be based in other countries and may process data internationally. These countries may have data protection laws that differ from those where you are located.

Where data is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place through our provider agreements. By using Storbriz, you acknowledge that your data may be processed outside your country of residence as part of delivering the service.

We retain your data for as long as is necessary to provide the Storbriz service, comply with our legal and regulatory obligations, resolve disputes, enforce agreements, and maintain platform security and integrity.

Business data such as sales records, receipts, stock movements, transfers, and audit logs may be retained for extended periods to support business record-keeping, financial reporting, and compliance requirements.

If you wish to delete your account or request deletion of specific data, please contact us at support@storbriz.com. Deletion requests are subject to applicable legal, contractual, technical, and operational requirements. Some data may be retained in anonymized or aggregated form after deletion.

We implement reasonable technical and organizational measures to protect your information, including:

• Hashed passwords and hashed PINs (never stored in plain text)
• Role-based access controls that limit what each user can see and do
• Multi-tenant isolation to prevent one business from accessing another business's data
• Encryption of data in transit using HTTPS
• Secure, managed cloud database hosting with backup capabilities
• Audit logs capturing sensitive actions with timestamps and actor identifiers
• Rate limiting on authentication endpoints to reduce brute-force risks
• Restricted access for platform administrators

No system is completely secure. While we take reasonable steps to protect your data, we cannot guarantee that unauthorized access, disclosure, or data loss will never occur. If you suspect a security issue, please contact us at support@storbriz.com promptly.

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal and operational constraints.
• Objection: Object to certain types of processing, particularly where based on legitimate interests.
• Withdrawal of consent: Where processing relies on consent, you may withdraw that consent at any time without affecting prior processing.
• Portability: Where applicable, request your data in a structured, machine-readable format.
• Complaints: Lodge a complaint with a relevant data protection authority in your jurisdiction.

To exercise any of these rights, contact us at privacy@storbriz.com. Some rights may be limited where processing is required for contract performance, legal compliance, or security purposes.

Storbriz uses cookies and similar technologies for the following purposes:

• Session cookies: To maintain your authenticated session securely as you navigate the platform. These are HTTP-only cookies and are required for the platform to function.
• Security cookies: To protect login sessions and prevent unauthorized requests.
• Preference storage: To remember settings such as your active outlet, theme preferences, and other configuration choices.
• Analytics (Google Analytics 4): We use Google Analytics to understand how people find and use Storbriz, for example which pages are visited, how the product demo is used, and how many businesses sign up. Google Analytics sets first-party cookies (_ga and _ga_*) on storbriz.com and its subdomains only after you accept analytics in the cookie notice. Until you accept, Google Analytics runs in a cookieless mode that stores nothing on your device and does not identify you across visits. We do not send Google Analytics your name, email address, phone number, passwords, PINs, or payment card details, and we have turned off Google signals and advertising features. Your choice is remembered in a small first-party cookie (storbriz-consent) on storbriz.com and its subdomains that holds only the decision and its date. You can change your choice at any time by clearing this site's cookies in your browser, after which the cookie notice appears again.
• Product analytics (PostHog): We use PostHog to understand how businesses move through signing up, setting up their workspace, and using features such as sales, transfers, and reports, and to find where the product is confusing or broken. PostHog only runs after you accept analytics in the cookie notice; nothing is loaded and no data is sent before then. It stores a random identifier in a first-party cookie and browser storage (ph_*_posthog) on storbriz.com and its subdomains so that a visit to the website and a later sign-in to the app can be understood as one journey. Once you sign in, that identifier is linked to your internal Storbriz account ID and a hashed workspace key, never to your name, email address, or phone number. Events describe actions and outcomes only (for example "a sale was completed with a card payment"); we do not send PostHog customer names or contact details, receipt contents, sale amounts, product or inventory records, business names, passwords, PINs, or payment card details. On a small set of low-sensitivity screens PostHog may record a masked session replay in which all text, inputs, and images are replaced with placeholders; replay never runs on sign-in, payment, customer, receipt, sales, or report screens. PostHog processes this data in the European Union or the United States depending on our project region. Declining analytics, or clearing this site's cookies, stops PostHog and removes its identifier.

Session and security cookies are required for the platform to function correctly and cannot be disabled without breaking core features. Analytics cookies are optional and are only set with your consent.

Storbriz is a business operations platform intended for use by adults acting in a commercial capacity. It is not directed at or intended for children under the age of 18.

We do not knowingly collect personal information from children. If you believe that a child's information has been submitted to us, please contact us at privacy@storbriz.com and we will take reasonable steps to remove it.

Storbriz sends the following types of email communications:

• Email verification OTP codes during account creation
• Welcome messages upon successful workspace creation
• Subscription and billing confirmations
• Payment receipts and renewal notices
• Account security alerts and notifications where applicable
• Low-stock alerts and business operation notifications
• Customer support responses and case updates
• Platform announcements for material changes to the service

Transactional and security emails are essential to the safe operation of your account. You cannot opt out of these while your account is active. If we introduce marketing or promotional emails, we will provide a clear and easy opt-out mechanism.

Emails are delivered through Resend using the address you provide when signing up.

We may update this Privacy Policy from time to time to reflect changes in the platform, our practices, or applicable legal requirements. When we do, we will update the “Last updated” date at the top of this page.

For material changes, we may also notify users through the platform or by email. Your continued use of Storbriz after any update constitutes acceptance of the revised policy. We encourage you to review this page periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:

We aim to respond to all privacy-related enquiries within a reasonable time frame.