The short version

What we store

• Your sign-in: when you sign in with Google, your Google account’s email address, name and an account id, held by Supabase Auth.
• Your store: its name, join code, sections, vendors and their return windows, and the people and floor phones in it, with the display name each chose.
• Your inventory: titles and ISBNs, stock on hand, cost and price, shelf notes, and every receive, sale, return, count and adjustment, with the name of the person or floor phone that made it and when.
• Imports: the rows of ONIX and POS files you import, and a log of each import. The file itself is read in your browser or on your phone and is not kept.

Who can see it

Everyone who is a member of your store: people who signed in and joined, and floor phones that joined with the store’s code. Owners and managers can remove a member at any time. Title records (ISBN, title, author, publisher, format, list price, cover link) are a shared catalog: a title one store adds can be shown to another store that scans the same ISBN. Your stock, prices, costs, notes and movements are never shared.

Looking up an ISBN

When you scan a book the store has never seen, its ISBN is sent to Open Library and to Google Books to find the title. Only the ISBN is sent.

The camera

The camera is used to read barcodes on the phone. Pictures are not taken, stored or sent.

Floor phones without an account

A phone that joins a store with its code and no sign-in is known to us by a random install id and a token the phone keeps. Removing it from the store, or leaving the store on the phone, ends its access.

Purchases

Bookstore Counter Pro is bought through Google Play (or the App Store) and processed by RevenueCat. We receive whether the subscription is active and an id that links it to your account so your whole store becomes Pro. We never see your card or payment details.

Where it is stored

Supabase (in the United States) stores the store data and sign-ins on our behalf. The website and web app are served from Google Cloud in the United States.

The website and the web app

We keep our own record of how bookstorecounter.adelyons.com and the web app are used: which pages are opened, how long a page is on screen, how far down it is read, which buttons are pressed, and which features are used, as a name and a count (for example “a visit was saved”), never what the record held. We do this ourselves, on our own server. No advertising network and no analytics company receives any of it, and we do not use it to show you advertising. The Bookstore Counter phone app sends none of this.

• A random identifier: to tell one visit from another, the site stores a random identifier in your browser. It is not your name or your email address and says nothing about you by itself. If you sign in, what that browser did is connected to your account.
• About your browser: the size of your window and screen and your browser’s family (Chrome, Safari, Firefox, Edge), not its full description; the website you came from by its name only, never the full address.
• Links in our email: if you arrived from an email we sent, the link may carry a random identifier for that click, kept in your browser, so we can see that the visit came from that email.
• What is left out: we do not record what you type, titles, ISBNs, prices, or the names of your store, vendors or people, or anything after the “?” in an address.
• How long: we keep this record for 13 months and then delete it. To have the record of your account’s visits deleted sooner, write to dev@adelyons.com.

Retention

Store data is kept while the store exists. Deleting a store deletes its stock, movements, documents, imports and members at once. Deleting your account deletes your sign-in and every store only you own.

Children

Bookstore Counter is a business tool and is not directed to children under 13. We do not knowingly collect information from them.

Your rights

Delete your account or your store in the app or the web app (see Delete your account), or write to dev@adelyons.com. Residents of California, the EEA and the UK may also ask what we hold and have it corrected, exported or deleted at the same address.

Changes & contact

We may update this policy; a material change shows as a new effective date here. Questions or requests: dev@adelyons.com.