Privacy Policy
This Privacy Policy explains how Yun Ding Shi Dai., ChangSha Nantai dianqishebeiyouxiangongsichejian2,1 building 31 Room,46 No. ChuangYeRoad, TianXinBlock, ChangSha, China ("we", "us"), collects and uses personal data when you visit our website or use PrepayLedger (the "Service"). We are the controller of the personal data described in this policy, except for personal data contained in Customer Data that you enter into the Service, for which we act on your behalf as processor.
1. Data we collect and why
- Account data — company name, user names, email addresses, hashed passwords and roles. Used to create and secure your account and provide the Service (performance of contract).
- Customer Data — supplier names and contact details, payment and shipment records (order numbers, tracking numbers, recipient names) that you enter or import. Processed only to provide the Service to you, on your instructions.
- Billing data — subscription plan, status and Paddle customer/subscription identifiers. Card and payment details are collected and processed by Paddle, not by us. Used to manage your subscription (performance of contract; legal obligations).
- Usage and log data — IP address, browser type, timestamps and an in-app activity log. Used for security, fraud prevention, troubleshooting and audit trails (legitimate interests).
- Support communications — messages you send us. Used to respond to you (legitimate interests).
2. Who we share data with
- Paddle.com, our reseller and Merchant of Record, which processes payments, invoices and taxes under its own privacy policy.
- Service providers that host our infrastructure and send emails for us, under contracts that require them to protect the data.
- Professional advisers (e.g. lawyers, accountants) where necessary.
- Authorities where required by law or to protect our rights.
We do not sell personal data.
3. Retention
Account and Customer Data are kept while your company account is active. After an account is closed or a subscription has lapsed for 12 months, we delete or anonymise Customer Data within 90 days unless you ask us to delete it sooner. Billing records are kept as long as required by tax and accounting laws. Server logs are kept for up to 180 days.
4. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, contact us at service@stockdairy.com. We will respond within one month. If you are in the UK or EEA, you may also lodge a complaint with your local data protection supervisory authority. Where personal data is transferred outside your country, we rely on appropriate safeguards such as Standard Contractual Clauses.
5. Security
We use industry-standard measures to protect personal data, including encrypted connections (HTTPS), hashed passwords, access controls and separation of each company's data.
6. Cookies
We use only a strictly necessary session cookie to keep you logged in. Paddle's checkout may set its own cookies to process payments securely. We do not use advertising cookies.
7. Children
The Service is intended for businesses and is not directed at children under 16.
8. Changes
We may update this policy and will post the new version here with a new "Last updated" date.
9. Contact
Privacy contact: Yun Ding Shi Dai., ChangSha Nantai dianqishebeiyouxiangongsichejian2,1 building 31 Room,46 No. ChuangYeRoad, TianXinBlock, ChangSha, China — service@stockdairy.com