Privacy policy
Last updated May 19, 2026
This policy describes what data TROPIX collects, how it's used, and how it's stored.
Data we collect
- Account data: your email address and the workspace name you chose at sign-up.
- Inventory + sales data you upload: SKU, description, quantities, costs, supplier, location, monthly sales, and other optional columns. This is the data the analytical engines use.
- Diagnostic outputs: the calculations and recommendations TROPIX produces from your data.
- Operational logs: audit-log entries (who deleted a run, who changed the plan, etc.) and minimal request logs needed to keep the service running.
- Billing data: handled by Stripe. We store customer/subscription IDs, current status, and the period end date — never card numbers or full bank details.
How we use it
- To run the analytical engines and show you results.
- To bill you for paid plans.
- To improve the product (in aggregate, never tying changes to specific customer data without permission).
We do not sell your data. We do not use your uploaded inventory to train ML models that benefit other customers.
Where it lives
Account, workspace, and analytical data are stored in Supabase (Postgres). Billing data is stored in Stripe. The application runs on Vercel. All data is encrypted in transit (TLS) and at rest.
AI insights
When you use the AI Insights page, the run's aggregate metrics (no per-SKU rows) are sent to Anthropic's API to produce the summary or answer. Anthropic does not train on data sent through the API. See Anthropic's privacy page for details.
Your rights
- Access / export: every page has a CSV export for the data you uploaded plus the recommendations.
- Deletion: delete a run from
/app/runs; delete your workspace by contacting support. Soft-deleted runs are retained for audit purposes for 90 days, then purged. - Portability: contact support for a full data export including audit logs.
Sub-processors
- Supabase — database + auth.
- Stripe — payments.
- Vercel — application hosting.
- Anthropic — AI insights (only when you use them).
Contact
Privacy questions: see the contact page.