Privacy Policy

This Privacy Policy explains how Consari LLC ("Consari," "we," "us") collects, uses, and shares information when you use the Consari platform, websites, and related services (the "Service"). The Service is business software; we design our collection around running your account, not advertising.

1. Information we collect

• Account and business information — name, email address, phone number, business name and legal entity, state, and the plan you choose.
• Payment information — handled by Stripe, our payment processor. We receive billing status and transaction metadata (for example the last four digits of a card); we never receive or store full card numbers.
• Business records you enter — inventory, purchases, sales, invoices, customer records, documents, and similar operational data you or your team submit while using the Service.
• Usage and log data — sign-in events, actions taken in the app (kept in an audit trail for your account's integrity), IP address, browser type, and similar technical data.
• Communications — messages you send us, including support requests and the sales-contact form.

2. Your customers' information

When your business stores information about its own customers in the Service (for example buyer names, emails, shipping addresses, and order history), your business is the controller of that data and we process it on your behalf to provide the Service. We do not use your customers' information for our own marketing, and we do not sell it. You are responsible for having the right to store that information and for honoring your customers' privacy requests; we will assist with tools such as export and deletion.

3. How we use information

• To provide, secure, and support the Service.
• To process subscription billing and any platform fee disclosed in your commercial terms (currently none).
• To send transactional email — sign-in links, receipts, operational reminders, and important account notices.
• To send limited product updates about the Service; you can opt out of non-essential email.
• To detect and prevent fraud and abuse.
• To comply with legal obligations.

We do not sell personal information or share it for targeted advertising.

4. How we share information

We share information only with service providers that help us run the platform, under contracts limiting their use of it:

• Cloud hosting and database infrastructure (Vercel, Supabase).
• Payment processing and identity verification (Stripe).
• Point-of-sale integration (Square, a Block, Inc. service) for tenants who connect a Square account.
• Optional sign-in with Google (Google LLC, OAuth only).
• Transactional email delivery (Resend).
• Abuse prevention (Cloudflare Turnstile on public forms).
• AI processing (Anthropic, PBC) for optional features such as receipt OCR, drafting assistance, and the AI Assistant chat — only on content you submit to those features, and not used by the provider to train its models.

A current list of these subprocessors is maintained at /subprocessors.

We may also disclose information when required by law, to protect the rights and safety of the platform and its users, or as part of a merger, acquisition, or sale of assets (with notice to you).

5. Retention

We keep your information while your account is active. After cancellation we retain account data for a reasonable wind-down period so you can export it, then delete or anonymize it, except where we must keep records longer (for example billing and audit records required for tax and legal compliance).

6. Security

We protect information with measures including encryption in transit, access controls, tenant isolation, and audit logging. No system is perfectly secure; if we learn of a breach affecting your information we will notify you as required by law.

7. Your choices and rights

• You can access and update account and business information in the app, and export your business data at any time.
• You can request a copy, correction, or deletion of your personal information by contacting us; we will respond as applicable law requires. Depending on where you live, you may have additional rights (for example under state privacy laws).
• You can opt out of non-essential email via the link in the message.

8. Cookies

The Service uses cookies necessary to operate — chiefly keeping you signed in. We do not use third-party advertising or cross-site tracking cookies.

9. Children

The Service is for businesses and is not directed to children under 18. We do not knowingly collect information from children.

10. Changes to this policy

We may update this policy from time to time. For material changes we will give notice (for example by email or in-app) before they take effect. The "Last updated" date above reflects the current version.

11. Contact

Consari LLC, operator of Consari — support@consari.app.