Stokee

Privacy Policy

Last Updated: December 19, 2025

1. General Information

We, MASHED Software Solutions GmbH, take the protection of your personal data very seriously. This policy explains how we collect, process, and use your data when you visit our marketing website and use our Warehouse Management Application (STOKEE).

2. Data Controller

The entity responsible for data processing is:

MASHED Software Solutions GmbH

Villefortgasse 11, AT-8010 Graz, Austria

Represented by: Manuel Penaloza

Email: contact@mashed.dev

Phone: +43 681 10526513

3. Data Collection on our Website

Server Logs:

Our hosting provider, Vercel Inc., collects technical data (IP address, browser type, time of access) to ensure the stability and security of our website. (Legal basis: Art. 6 (1) lit. f GDPR).

Analytics (Google Tag Manager):

We use Google Tag Manager to analyze visitor behavior and track how users interact with our website. This helps us understand user paths and optimize our marketing content. Data collected may include page views, clicks, and navigation patterns. This data is processed in accordance with Google's privacy policy. (Legal basis: Art. 6 (1) lit. f GDPR for analytics purposes).

Identification Services:

[Placeholder for "Other Services" mentioned]. These services are used to identify potential business leads and are only activated upon your consent.

4. Data Collection in the Application (STOKEE WMS)

Authentication & Database:

We use Supabase (provided by PostgREST and hosted on AWS/Vercel infrastructure) to manage user accounts and store inventory data. This includes your email, name, and hashed passwords.

Beta User Uploads:

As part of our Beta program, data you upload (e.g., CSV imports of inventory) is stored securely in our database for the sole purpose of providing the WMS service to you.

Barcode Scanning:

Our application uses your device's camera to scan barcodes. This processing happens locally on your device. No images or video feeds from the camera are transmitted to or stored on our servers.

5. Sub-processors

To provide our services, we share data with the following essential providers:

  • Vercel Inc. (USA/EU): Website hosting.
  • Supabase / AWS (USA/EU): Database and Authentication services.
  • Google LLC (USA): Analytics and Tag Management via Google Tag Manager.

Note: We have concluded Data Processing Agreements (DPAs) with these providers to ensure GDPR compliance.

6. Data Retention

We store your personal data only as long as necessary to fulfill the purpose of collection (e.g., for the duration of your account) or as required by Austrian tax and commercial law (typically 7 years).

7. Your Rights

Under the GDPR, you have the following rights:

  • Access: Right to see what data we have.
  • Rectification: Right to correct inaccurate data.
  • Erasure: Right to be forgotten.
  • Object/Withdraw: Right to stop processing or withdraw consent at any time.

To exercise these rights, contact us at contact@mashed.dev.

8. Supervisory Authority

If you believe your data rights have been violated, you may lodge a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde (DSB)

Barichgasse 40-42, 1030 Wien, Austria.