Privacy Policy

StuffShuffle is inventory, purchasing and food cost software for restaurants and other food businesses. It is operated by StuffShuffle, based in Cambridge, Ontario, Canada ("we", "us"). This policy covers this website (stuffshuffle.com) and the StuffShuffle app (app.stuffshuffle.com).

We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Questions about this policy go to support@stuffshuffle.com.

• Account details: your name, email address and password (stored hashed), or the basic profile your sign-in provider (Google, Microsoft, Apple or Facebook) shares with us. We don't receive your password for those services.
• Business data you enter: your organization, locations, team members, inventory items, counts, suppliers, purchase orders, recipes, waste records, sales imports and the invoice photos you upload.
• Billing details: plan, billing address and tax details. Card payments are handled by Stripe. We never see or store your full card number.
• Messages: what you send us through the contact form or by email, including your name and email address.
• Usage and device data: pages visited on this website, server logs (time, request, error details) that keep the service running and secure, and, if you turn on push notifications, a push address and label for that device.

• To run the app: keep you signed in, store and show your inventory, send purchase orders you ask us to send, and send the notifications you turn on.
• To read supplier invoices you scan: the image is sent to an AI model provided through our hosting platform to pull out line items and prices. It isn't used to train models for anyone else.
• The camera is used only when you tap a scan or photo button. Barcode reading happens on your device and the video isn't uploaded or stored.
• To bill subscriptions and charge the right sales tax.
• To answer your messages and give support.
• To understand how the site and app are used so we can fix problems and improve them.
• To send important service emails, such as trial ending, billing or security notices. We only send marketing emails if you agree to them, and you can unsubscribe at any time.

We don't sell personal information. We share it only with service providers that help us run StuffShuffle, and only what they need:

• Base44 hosts the website and app, its database, file storage, email sending and AI integrations.
• Stripe processes subscription payments and calculates tax.
• Apple, Google and Mozilla push services, only to deliver notifications you turned on.
• Sign-in providers (Google, Microsoft, Apple, Facebook) when you choose to sign in with them.

Your data is also shared with the suppliers you choose to email a purchase order to, and with other members of your organization according to the roles your owner sets.

Some of these providers store or process data outside Canada, including in the United States, where it may be accessible to authorities under local law. We may also disclose information if the law requires it, or as part of a sale or merger of the business.

We use cookies and browser storage that the site and app need to work, such as keeping you signed in and remembering a count in progress. We also use our hosting provider's built-in analytics to count visits and see which pages are used. We don't use advertising or cross-site tracking cookies.

Choosing "Essential only" in the cookie notice turns analytics off in that browser. You can also block or delete cookies in your browser settings, though signing in to the app needs them.

We keep your data while your account or organization is active. If a trial ends or you cancel, your data stays read-only so you can come back to it. When you delete your account (in the app under Settings, or see how to delete your account), your personal details are removed straight away, and an organization you own alone is deleted with all its data. Backups and logs are cleared within 30 days. We keep billing records as long as tax law requires. Contact form messages are kept for up to two years.

All traffic is encrypted (HTTPS). Every request is checked against your organization and role on the server, and organizations can't see each other's data. No system is perfectly secure, so please use a strong password and tell us right away if you think your account has been accessed by someone else.

You can see and correct your data in the app at any time, delete your account under Settings, and turn push notifications off in Settings or on your device. You can also ask us for a copy of your personal information, ask us to correct or delete it, or withdraw consent, by emailing support@stuffshuffle.com. We reply within 30 days. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

StuffShuffle is a business tool and isn't meant for anyone under 16.

If we change this policy, we'll update the date at the top. If a change is significant, we'll also tell account owners by email or in the app before it takes effect.

StuffShuffle
Cambridge, ON
Canada
support@stuffshuffle.com

See also our Terms of Service.