Abrevon Point (“we”, “our”, “us”) provides multi-tenant inventory and point-of-sale software. This policy explains what data we collect, how we use it, and the rights you have over it.
1. Information we collect
We collect three categories of data:
- Account data — email, full name, organization slug and role. Required to authenticate you and link you to a workspace.
- Operational data — products, suppliers, sales, inventory transactions and audit logs you create inside your workspace. Stored on your behalf and visible only to members of your organization.
- Technical data — IP address, browser user agent, session cookies and request timestamps, used for security and debugging.
2. How we use it
- To provide and improve the service
- To authenticate users via Supabase Auth (magic-link or password)
- To enforce role-based access between platform admins, organization owners and employees
- To investigate abuse, security incidents and billing disputes
3. Data location and processors
Your data is stored in PostgreSQL on Supabase infrastructure. We do not sell or rent personal data. Subprocessors are limited to Supabase (database, auth, storage) and the email provider used to deliver magic-link sign-in emails.
4. Cookies
We set first-party HTTP-only cookies to keep you signed in. When you uncheck Remember me at sign-in, the session cookie is short-lived (8 hours). When checked, it lasts up to one year or until you sign out.
5. Your rights
You can request export or deletion of your personal data by contacting privacy@abrevon-point.app. Workspace owners can self-serve the deletion of operational data (products, sales, members) through the dashboard.
6. Retention
Audit logs are retained for 12 months. Soft-deleted records (products, suppliers, sales) are retained 30 days before purge. Inactive organizations are archived after 90 days of inactivity.
7. Changes
We may update this policy as the product evolves. Material changes will be announced by email to workspace owners at least 14 days before they take effect.