Privacy Policy

WarePulse is operated by Next Movement. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

We collect information you provide directly to us:

• Account information (name, email, company name)
• Warehouse and inventory data you enter into the system
• Operational evidence photos you choose or capture; camera frames used only for barcode scanning are not retained as a raw camera feed
• Push notification tokens and device platform when you grant notification permission
• Crash and reliability diagnostics when Sentry is configured, plus operational diagnostic counters stored on the device for sync troubleshooting
• Communications with our support team
• Payment information (processed securely by our payment provider)

• To provide and maintain our service
• To process transactions and send related information
• To send administrative messages and updates
• To respond to your comments and questions
• To improve our service

We measure how visitors use this marketing site with Google Analytics, provided by Google LLC, and with Vercel Web Analytics, provided by the company that hosts this site. Neither is loaded until you choose “Accept analytics” in the privacy notice. Declining leaves both unrequested, and no measurement script or cookie is placed on your device.

• Google Analytics places cookies named _ga and _ga_ followed by a stream identifier on your device, which remain for up to two years unless you clear them.
• Measurement collected by Google Analytics is processed and stored by Google LLC in the United States.
• Vercel Web Analytics runs without cookies and stores no identifier on your device.
• What is measured is limited to page addresses, the page you arrived from, and general technical details such as browser, operating system, device type and country.
• You can change your answer at any time using the Cookie settings link in the footer, which reopens the privacy notice.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Your data is encrypted in transit and at rest.

All payment processing is handled by Stripe, Inc., a PCI Level 1 certified payment processor. When you provide payment information, it is transmitted directly to Stripe using industry-standard encryption. We do not store your credit card numbers, CVV codes, or other sensitive payment details on our servers.

Information shared with Stripe:

• Billing name and email address
• Payment card details (processed by Stripe, not stored by us)
• Billing address
• Transaction amounts and subscription details

Learn more: Stripe Privacy Policy and Stripe Security.

We retain your information for as long as your account is active or as needed to provide you services, satisfy legal obligations, resolve disputes, and enforce agreements.

Your account, inventory, and operational records are stored in Canada (Supabase, AWS ca-central-1 region). To operate the service we rely on a small number of service providers that may store or process personal information outside Quebec and outside Canada, primarily in the United States. This means your information may become subject to the laws of those jurisdictions, including lawful access by their authorities.

Providers that may process personal information outside Quebec:

• Sentry (Functional Software, Inc.) — application error and crash diagnostics, hosted in the United States; we do not send default personal identifiers, but device, browser, and account context needed to reproduce a fault may be included
• Stripe, Inc. — subscription billing and payment processing (see Payment Processing)
• Expo (650 Industries, Inc.), Apple Push Notification service, and Firebase Cloud Messaging (Google LLC) — mobile build distribution and push notifications
• Postmark (ActiveCampaign, LLC) — transactional email delivery, including the email address and message content of account and operational notices
• Twilio, Inc. — SMS delivery for operational notices where you or your organization opted in
• OpenAI, L.L.C. — the optional support assistant; only the question you type is sent, and no inventory or account data is shared
• Google LLC — analytics measurement when you consent to it (see Analytics and Cookies)

Before communicating personal information outside Quebec we assess the sensitivity of the information, the purpose of the communication, the protection measures in place, and the legal regime of the destination, as required by the Act respecting the protection of personal information in the private sector (Law 25). Each provider is bound by contractual data-protection commitments, and we limit what is shared to what the provider needs to perform its function.

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Export your data
• Request deletion of your account and associated personal data that WarePulse is not legally or contractually required to retain
• Object to processing of your data

Signed-in WarePulse mobile users can start a full-account deletion request under Profile > Legal & support > Request account deletion. WarePulse records the request and displays its status in the app. The account remains active during privacy review. We delete or de-identify personal data that we are not legally or contractually required to retain, retain required operational, billing, audit, security, evidence, and legal records only for their applicable retention period, and notify the requester when the review and deletion process are complete.

If you have questions about this Privacy Policy, please contact WarePulse support at operations@warepulse.ca.