Privacy Policy

What we collect

• Account information. Your email address, store name, and store address when you register.
• POS data you upload. Product names, SKUs, quantities sold, transaction dates, and prices from your point-of-sale exports (CSV or Excel).
• Inventory data. Current stock levels, reorder quantities, and product classifications you configure within the platform.
• Deal and pricing data. Distributor promotions, pricing sheets, and deal terms imported via file upload or the CORINTH browser extension.
• Usage data. Pages visited, features used, and actions taken within the platform, collected to improve the product.

What we do NOT collect

• Your end-customers' personal information — we never touch consumer PII
• Credit card numbers or banking details (Stripe handles all payment processing)
• Distributor portal login credentials
• Data from other stores — all data is tenant-isolated and never cross-shared

How we use your data

• Provide dead stock detection, trend analysis, and reorder recommendations
• Map and normalize SKUs across your uploaded data
• Generate AI-powered insights specific to your store
• Send transactional emails (order summaries, alerts) via Resend
• Process subscription payments via Stripe
• Improve platform accuracy and features over time

We do not sell your data. We do not use your store's data to train shared AI models that could expose your business information to other stores.

Third-party services

We rely on a small set of infrastructure sub-processors to deliver the service. See our sub-processor list, updated as new providers are added. We notify customers 30 days before adding a new sub-processor.

Data security

All data is transmitted over HTTPS. Database access is controlled via row-level security policies — your store's data is structurally inaccessible to other stores. We use Supabase's managed infrastructure, which maintains SOC 2 compliance. API keys are never exposed client-side.

No security system is perfect. If you discover a vulnerability, contact us at support@corinth.tech.

Data retention

Your data is retained for as long as your subscription is active. When you cancel your account, we delete all store data — POS uploads, inventory records, deal imports, and generated recommendations — within 90 days. You can also request immediate deletion by emailing us. Raw uploaded files are deleted from storage immediately after processing; only the normalized data extracted from them is retained.

Your rights

• Access. Request a copy of all data we hold about your store.
• Correction. Request that inaccurate data be corrected.
• Deletion. Request that your account and all associated data be deleted. We will complete deletion within 90 days.
• Portability. Request an export of your store's data in a machine-readable format.

To exercise any of these rights, email support@corinth.tech.

Children's privacy

CORINTH is a B2B platform intended for use by adults operating licensed retail businesses. We do not knowingly collect information from anyone under the age of 18. If you believe a minor has provided information through our platform, contact us and we will delete it.

Browser extension

The CORINTH Deals Importer Chrome extension has its own privacy disclosure covering what the extension reads from distributor portals. See the Extension Privacy Policy.

Changes to this policy

We may update this policy as the platform evolves. When we make material changes, we will notify active subscribers by email at least 14 days before the change takes effect. Continued use of CORINTH after that date constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email support@corinth.tech.