Data Processing Agreement
How we process personal data on your behalf, aligned with GDPR and similar data-protection laws.
Last updated:
When you use Stockovaa to manage your own customers, staff, and sales data, you are the data controller and Stockovaa is the data processor. We process personal data only to provide the service and only on your documented instructions, as set out in this agreement and our Privacy Policy.
| Item | Details |
|---|---|
| Subject matter | Provision of the Stockovaa POS, inventory, and business-management platform. |
| Duration | For the term of your subscription plus any legally required retention period. |
| Categories of data | Contact details, order and transaction records, staff records you enter, and usage data. |
| Data subjects | Your customers, your staff, and your suppliers. |
We maintain appropriate technical and organizational measures to protect personal data, including per-tenant data isolation (each business has its own database), encryption in transit (TLS), access controls, activity logging, regular backups, and staff confidentiality obligations. See our Trust & Security page for more detail.
We use vetted third parties to help deliver the service, such as cloud hosting, email delivery, and payment processing. Each is bound by data-protection obligations no less protective than this agreement. We remain responsible for their performance and will inform customers of material changes to our sub-processor list on request.
We will assist you, where reasonably possible, in responding to requests from data subjects to access, correct, delete, or export their data. In the event of a personal-data breach affecting your data, we will notify you without undue delay after becoming aware, with the information you need to meet your own notification obligations.
On termination, you may export your data for a limited period. After that, we delete or anonymize personal data held on your behalf, except where retention is required by law. To request a copy of this DPA as a signed document, contact us via the Contact page.
This page summarizes our data-processing terms. Enterprise customers who require a countersigned DPA can request one from our team.