Privacy Policy

Last updated: April 18, 2026

Plain-English summary: We collect what we need to run the software you signed up for. We don't sell your data. We use third-party services (Stripe for payments, Twilio for SMS, Anthropic for AI, etc.) and they each have their own privacy policies. Photos auto-delete after 30 days. You can request your data or delete your account anytime.

1. Who we are (Data Controller)

Lorenzo Solomon — sole proprietor and operator of FreshOps™, StoreIQ™, ShiftLeader™, Psyc'd Wallet™, Psycd™, 10-Day Out™ ("Provider"). Contact: [email protected].

2. Information we collect

Category	Examples	Why
Account info	Name, email, phone, organization	Authentication, support
Payment info	Card details (handled by Stripe — we never store the full card number)	Billing
Usage data	Pages viewed, features used, timestamps, device type	Operations + product improvement
Customer Data	Order guides, shrink reports, scheduling data, photos uploaded by you	Provide the Service
Photos	Shelf photos uploaded for AI vision scanning	Inventory analysis (auto-deleted after 30 days)
Bank account info (Psyc'd Wallet only)	Plaid-linked accounts, balances, transactions	Spend tracking

3. How we use your information

To provide, operate, and improve the Software
To process payments via Stripe
To send transactional emails (sign-in links, billing receipts) and SMS (shift notifications) via Resend / Twilio
To send AI vision requests to Anthropic for image analysis
To debug issues and prevent abuse
To comply with legal obligations

We do NOT sell your personal data to anyone, ever.

4. Sub-processors (third parties we share data with)

Service	What we share	Their privacy policy
Stripe	Payment info	stripe.com/privacy
Cloudflare	Hosted infrastructure (data + traffic)	cloudflare.com/privacypolicy
Anthropic	Image data sent for AI analysis	anthropic.com/privacy
Twilio	Phone numbers + SMS content	twilio.com/legal/privacy
Resend	Email addresses + email content	resend.com/legal/privacy-policy
Plaid (Psyc'd Wallet only)	Bank credentials + transaction data	plaid.com/legal
Apple / Google	App Store + Play Store account data	Their respective policies

5. Data retention

Photos: auto-deleted 30 days after upload
Reports + audit logs: retained for 7 years (compliance + legal requirements)
Account data: retained while account is active, deleted within 30 days of cancellation
Payment records: retained for 7 years (tax/legal requirements)

6. Your rights

Regardless of jurisdiction, you can:

Access your data — email us for a complete export
Correct inaccurate data — most fields editable in-app, otherwise email us
Delete your account and associated data — email us, processed within 30 days
Object to processing or withdraw consent
Port your data to another service (CSV/JSON export available)

7. Security

We use industry-standard practices: TLS 1.3 in transit, encryption at rest, JWT authentication, hashed passwords (PBKDF2), audit logs. No security system is perfect — we're transparent if a breach occurs. We're a small operator without a dedicated security team, so customers handling regulated data (HIPAA, PCI Level 1, etc.) should evaluate accordingly.

8. International transfers

Provider is based in the United States. Data may be processed in the US, EU, or wherever our sub-processors operate. We rely on Cloudflare's global edge network — your data may be cached at the closest edge location for performance.

9. Children's privacy

Our Software is not directed at children under 13 (or 16 in the EU). We do not knowingly collect data from children. Psycd is rated 17+ on the App Store.

10. California (CCPA) and EU (GDPR) residents

You have the additional rights granted under your respective regulations. Email [email protected] to exercise them. We respond within 45 days.

11. Changes to this policy

We'll email you at least 14 days before any material changes take effect. The "Last updated" date at the top reflects the most recent revision.

12. Contact

Questions, requests, or concerns: [email protected]