Privacy Policy
What SKUantify collects, why, and what you can do about it.
Last updated 23 September 2026
Who we are
SKUantify is made by Sky Arkanum, a small independent team based in the Philippines. We decide what data the product collects and why, which makes us responsible for it. For anything in this policy, write to info@skyarkanum.com and a person will answer.
What we collect
Two different things, and it matters which is which.
Your account
A name, an email address and a password, for each person you invite. Passwords are hashed with argon2id and are not recoverable — not by you, and not by us. We also record the time of your most recent password change, so that changing it can end sessions opened before it.
Your inventory
Everything you enter: products, variants, categories, suppliers, locations, stock movements, counts, and any images you upload. This is your business’s data. We hold it so the product can show it back to you, and for no other purpose. We do not analyse it, sell it, share it, or use it to train anything.
What we do not collect
There are no analytics scripts, no advertising pixels, no session recorders and no third-party trackers on this website or in the application. Nothing follows you here from anywhere else, and nothing follows you away.
We do not ask for payment card details. Where a plan is paid for, that is arranged directly with us.
Cookies
One cookie, and only after you sign in. It holds a signed session token, is HTTP-only so no script on the page can read it, is SameSite=Lax so it is not sent on cross-site requests, and expires after seven days. There is no cookie banner because there is nothing to consent to — a cookie strictly necessary to keep you signed in is the one kind that does not need permission.
Who else touches it
Three services, each doing one job. We do not add a fourth without updating this list on the same day.
| Service | What it does | What it sees |
|---|---|---|
| Vercel | Hosting and delivery of the website and application | Request logs, including IP address |
| Neon | Managed PostgreSQL database | Everything your business enters into SKUantify |
| Resend | Transactional email — invitations and password resets | Recipient name and email address |
Where it is kept
On servers in the United States, operated by the providers above. We are based in the Philippines and our customers are in several countries, so this is worth saying plainly rather than leaving you to guess: your records sit under United States jurisdiction, wherever you and we happen to be.
If that does not work for your business, tell us before you sign up rather than after.
Sign-in attempts
We record failed sign-in attempts against the email address and the IP address they came from, and use them to slow down repeated guessing. They are kept only as long as the rate limit needs them.
How long we keep it
Your inventory data stays until you delete it or ask us to close your account. We do not silently delete records — including when a plan is downgraded past its limits, where the product stops you adding more rather than removing what exists.
When you ask us to close an account, we delete its data within 30 days. Backups holding a copy roll off on their own schedule after that.
What you can ask for
These apply to everybody, wherever you are. Some countries give their residents a legal right to most of this; rather than work out which list you fall under, we offer the lot to everyone — it is a short list and arguing about who qualifies would cost more than honouring it.
- A copy. Every list in the product exports to CSV, and reports export to CSV and PDF, without asking us. For anything not covered there, write and we will get it to you.
- A correction. Account details are editable in the product. Stock movements are not, by design — the ledger is append-only, and a mistake is corrected by recording a correction, so the history remains true.
- Deletion. Write to us and we will delete the account and its data.
- An explanation. If anything here is unclear, ask. We would rather answer than have you guess.
Send any of these to info@skyarkanum.com. We aim to reply within five working days.
If something goes wrong
If data is exposed in a way that puts you at risk, we will tell you what happened, what was affected and what we are doing about it — and we will do it promptly rather than after working out how it sounds.
Changes
If this policy changes in substance, the date at the top changes and we will tell account holders by email. We will not quietly broaden what we collect.