Privacy

Who is responsible

Central Trade LLC publishes Savdo. Savdo is a work tool for store staff. It is not meant for children and has no public sign-up: every account is made by accepting a store's invitation. For help, see Support or email Rasul@centraltradellc.com.

What is collected, and why

Savdo keeps the email you sign in with, an optional name for your store's team list and history, and a hashed password. While you work it records what you do for the store — deliveries, counts, price changes, exports — and any product photos you choose to save. The store's own catalogue, stock and suppliers stay in that store. If the owner connects Clover, the connection is stored so register prices and stock can stay in step; the Clover key never leaves the server.

Savdo does not collect location, contacts, microphone, health, payment details or advertising identifiers. There are no ads, no analytics and no tracking in the web app or the phone app, and nothing is sold or shared for advertising.

The camera

The phone uses the camera to scan barcodes (that reading stays on the phone) and, when someone chooses, to take a product photo. The web app can scan barcodes with the computer's camera the same way. Product photos are stored where anyone who has a photo's link can open it, so they are of products, never of people.

Services that receive data

• Supabase holds the database, sign-in and photo storage.
• Vercel runs the web app and may log request IP addresses.
• Expo (EAS) may see the app version and a random installation id only to deliver updates when the phone app opens.
• Open Food Facts, UPCitemdb and USDA FoodData Central receive a barcode only when staff look up an unknown product.
• OpenAI receives a product photo, barcode or product text only if AI research is switched on for Savdo (it is off today), with OpenAI storage turned off.
• Clover receives product names, prices and stock only for a connected store.

No email is ever sent by Savdo.

On the device

The phone keeps the sign-in session and a few preferences (such as appearance) in secure storage, and temporary files to share. Signing out removes the session. The web keeps the session in a cookie, screen preferences in local storage, and an offline page in the browser cache. It also keeps your browser's time zone in a cookie, so times show in your local time.

How long it is kept, and deleting it

Anyone can delete their account from the Account page on the web or from More on the phone. That ends access to every store, deletes saved label batches, erases name and email, and retires the login. It cannot be undone. The store keeps its own records of the work you did — deliveries, counts, price changes — with no name or email, only an anonymous id. Someone who leaves a store without deleting their account keeps their name beside their work in that store's history, for its current staff; deleting the account removes it. A copy of the database kept to undo a software update can still hold a deleted account for up to 30 days, until that copy is deleted.

Store owners cannot delete their own account from the app while they own a store; they contact support so the store can be handed over or closed first. Leaving a store (the owner removes you) ends access to that store at once; the account remains until you delete it. A store's data is kept while the store uses Savdo; a store that leaves asks support to delete it.