Privacy Policy

Last updated: May 16, 2026

Who We Are

Inventor-Ease is a product of The Ease Co. We build tools that help multi-vendor retailers manage their incoming inventory. Our platform connects to your Shopify store to help you track purchase orders, receive shipments, and publish products.

Contact us: michael@inventor-ease.com

What Data We Collect

When you use Inventor-Ease, we collect and store:

  • Account information — your name, email address, and password (hashed)
  • Contact and SMS consent information — your phone number, SMS opt-in status, consent source, consent timestamp, and the consent language shown when you opted in
  • Shopify store data — your store domain, product catalog, inventory levels, and locations (synced via Shopify OAuth)
  • Business data you create — purchase orders, vendor information, market trip notes, staged products, and receiving logs
  • Uploaded files — purchase order documents (PDFs, images, CSVs) you upload for AI parsing
  • Billing information — App Store subscriptions are processed by Shopify; direct web subscriptions may be processed by Stripe. We never store your credit card number.
  • Usage data — basic analytics to improve the product (page views, feature usage)

We do not collect or store your end customers' personal information. Our app works with your vendor and product data, not your customer data.

How We Use Your Data

  • To provide the Inventor-Ease service (PO tracking, receiving, product publishing)
  • To generate AI-powered product descriptions and parse purchase orders
  • To sync products and inventory with your Shopify store
  • To send you transactional emails (magic links, team invites, billing notices)
  • To send SMS messages only when you explicitly opt in, such as setup help, demo reminders, onboarding, and account reminders
  • To improve the product based on usage patterns

SMS Privacy

If you opt in to SMS, we use your mobile number and consent records only to send the messages you agreed to receive and to manage opt-out requests. We do not sell or share SMS opt-in data or consent with third parties for their own marketing or promotional purposes.

You can opt out of SMS at any time by replying STOP, or ask for help by replying HELP or emailing michael@inventor-ease.com.

Third-Party Services

We use these third-party services to operate Inventor-Ease:

  • Shopify — store connection and product publishing (via OAuth)
  • Supabase — database and authentication hosting
  • Vercel — application hosting
  • Anthropic (Claude) — AI-powered PO parsing and description generation
  • Shopify Billing — App Store subscription processing
  • Stripe — direct web subscription processing
  • Resend — transactional email delivery
  • Sentry — error tracking and monitoring

Each service processes data according to their own privacy policy. We only share the minimum data needed for each service to function.

AI Data Processing

When you upload a purchase order, we send the document to Anthropic's Claude API for parsing. The document content is processed in real-time and is not stored by Anthropic for training purposes. We retain the parsed results in our database as part of your PO record.

When you generate product descriptions, the product details are sent to the Claude API. Generated descriptions are stored with your staged product data.

Chrome Extension (“Inventor-Ease — Send PO”)

The Inventor-Ease Chrome extension lets curators capture a purchase order from a wholesale portal (Joor, Faire, NuORDER, MarketTime, Elastic Suite, etc.) and send it to their Inventor-Ease review queue without leaving the source tab. The extension is an optional, user-installed companion to the web app; you do not need it to use Inventor-Ease.

What the extension reads

  • The visible text and page title of the tab you are viewing, only when you click the extension icon and press “Capture this PO.”
  • Up to 20 product image URLs found on that same page. The extension's background service worker then fetches the image bytes from the vendor portal (anonymously, with no session cookies attached) so they can be attached to your captured PO.
  • The page URL, hostname, and timestamp of the capture — recorded as provenance on the resulting PO so you can jump back to the original source page later.

What the extension does NOT read

  • Anything on any tab you are not currently viewing.
  • Anything before you click the icon — no background reading, no telemetry, no analytics.
  • Form data, passwords, cookies, browsing history, or anything from sites outside the portal where you triggered the capture.

Where captured data goes

  • Captured page content and images are sent only to your Inventor-Ease account, identified by a scoped API key you generate yourself inside Inventor-Ease (Settings → Developer settings).
  • The capture is stored in your private Supabase Storage bucket, scoped to your account's client ID. Other Inventor-Ease accounts cannot read it.
  • Images are stored privately and only ever served back to you via short-lived signed URLs (expire after one hour).
  • We do not sell, share, or use captured data for any purpose other than running the parse + review + save flow you triggered.

Where the API key lives

  • Stored in chrome.storage.local on your device only. Never synced to any cloud account.
  • Scoped to the extension:capture and extension:review permissions — the key can post captures and run the review surface, but cannot read your existing POs, vendors, products, or settings.
  • Keys expire after 90 days by default. We email every owner on the account when a new key is generated, so unexpected keys are easy to spot.
  • You can revoke any key instantly at /dashboard/settings/developer inside Inventor-Ease.

The extension requests no <all_urls> access, no tab enumeration, no cookies, and no webRequest hooks. Full permissions justification is documented in the extension's public README.

Data Retention

Your data is retained as long as your account is active. If you uninstall the Shopify app, we revoke the store connection immediately and delete all your data within 30 days per Shopify's GDPR requirements.

You can request data export or deletion at any time by emailing us.

Data Security

We protect your data with:

  • Row-level security on all database tables (each client only sees their own data)
  • Shopify access tokens stored server-side and never exposed to client browsers
  • HTTPS everywhere (enforced by Vercel and Cloudflare)
  • HMAC signature verification on all Shopify webhooks
  • Secure, httpOnly cookies for session management

Your Rights

You have the right to:

  • Access the data we hold about your business
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a standard format
  • Withdraw consent for data processing

To exercise any of these rights, email michael@inventor-ease.com.

Cookies

We use essential cookies for authentication and session management. We also use basic analytics cookies (with your consent) to understand how the product is used. You can manage cookie preferences via the banner on our website.

Changes to This Policy

We may update this policy from time to time. We'll notify active users of significant changes via email.

We use cookies to make the site work and learn what's useful. You can choose what you're okay with.