Data Retention, Handling & Account Deletion Policy

1. What Data is Stored

StockSlip strictly adheres to the principle of least privilege. We only store:

• AES-256-GCM encrypted QuickBooks Online OAuth access and refresh tokens.
• Transaction identifiers, invoice dates, customer delivery addresses, line item SKUs, descriptions, and quantities necessary to format printable picking slips.
• Custom picking list layout configuration JSON and template settings.

We do not store bank account details, credit card numbers, payment processor secrets, or customer general ledger accounts.

2. How to Request or Execute Immediate Account Deletion

Users can execute an immediate, self-serve data wipe at any time:

1. Log in to your account and navigate to Settings.
2. Select the Danger Zone tab.
3. Type DELETE and enter your password.
4. Click Permanently Wipe Account & Data.

Upon confirmation, our database triggers a cascading deletion that permanently deletes your organization, all orders, all line items, all templates, and deletes all encrypted QuickBooks tokens.

3. Automatic Cleanup Upon QuickBooks Revocation

When a user disconnects the QuickBooks connection in the app or revokes access from the Intuit App Center, StockSlip automatically revokes active tokens and ceases all synchronization jobs immediately.