1.What is held, and for how long
| Category | Why it exists | How long |
|---|---|---|
| Account: name, email, phone, role, password hash | To create the account, sign you in, and address you properly. | While the account exists, then 90 days. |
| Sign-in activity: dates, failed attempts, device holding a counter | To slow down attacks and to keep one checkout counter per device. | 12 months. |
| Shop profile: business name, address, phones, tax number, logo | To identify the business and to print it on invoices and receipts. | While the shop exists, then 90 days. |
| Catalogue: products, prices, units, stock levels and movements | The core of selling and stock control. | While the shop exists, then 90 days. |
| Customers and suppliers: name, phone, email, address, balances | To sell on credit, chase debts and record purchases. Entered by the shop. | While the shop exists, then 90 days. |
| Sales, invoices, receipts, quotes, pre-orders and deposits | To trade, and to prove what was sold and paid. | While the shop exists, then as long as tax law requires. |
| Accounting: journal entries, expenses, treasury movements | To keep the books and produce statements. Entries cannot be altered once posted. | While the shop exists, then as long as tax law requires. |
| Employees and payroll: identity, salary, statutory deductions | To run payroll and remit statutory withholdings, when the shop uses that module. | While the shop exists, then as long as employment and tax law requires. |
| Audit trail: who did what, when, and from which account | So a shop can see who voided a sale or changed a price. Cannot be altered or deleted. | While the shop exists. |
| Billing: plan, negotiated terms, payment references and amounts | To charge the subscription and keep our own accounts. | 7 years, as accounting law requires. |
| Support messages you send us | To answer you, and to remember the history of a problem. | 3 years. |
“Then 90 days” means the data survives the end of a subscription for three months, so a customer who comes back loses nothing, and is deleted after that. You can ask for erasure sooner: see Delete Your Account & Data.
2.What we deliberately do not collect
- No location, no contacts, no photo library, no camera or microphone access, beyond a barcode scanner you point at a product yourself.
- No advertising identifiers, no cross-site tracking, no data brokers.
- No payment card details. We never handle them.
- No reading of your messages or documents outside the app.
3.Who processes data for us
| Supplier | What they do | Where |
|---|---|---|
| Supabase | Database, authentication and file storage | European Union (Ireland) |
| Vercel | Application hosting and delivery | European Union (Ireland) for our functions |
| Resend | Sending transactional email, such as credentials and alerts | European Union / United States |
| Cloudinary | Storing and serving shop logos | European Union / United States |
Each is bound by contract to process data only on our instructions and to protect it. We update this list before adding a supplier that touches personal data.
4.Sharing between a head office and its sub-agencies
When a business opens sub-agencies, the head office can read the network’s figures: stock, sales and balances of its own branches. That is the point of a branch network, and every user of a branch should know it. A sub-agency never sees another business.
5.If you are a customer or employee of a shop
Your name, phone and balance may be recorded by a shop that uses Bold Bolt. That shop decides what it keeps and for how long, and it is the one to ask for a copy, a correction or an erasure. We hold that data on their behalf. If the shop does not answer you, write to support@boldredhok.tech and we will help.