Privacy Policy

About APMTSales

APMTSales is a multi-tenant inventory management platform. Each store on our platform operates under its own subdomain (e.g., yourstore.apmtsales.com). This privacy policy covers the APMTSales platform itself. Individual stores may maintain their own privacy policies for their customers.

Information We Collect

Account holders (store owners):

• Name, email address, and business name provided during sign-up
• Billing information processed securely by our payment providers (Clover for subscriptions; Square, Clover, Stripe, or PayPal for storefront checkout)
• Inventory data, images, and business information you upload to manage your store
• Usage logs and analytics to improve the platform

Store visitors (end customers):

• Contact form submissions (name, email, message) sent to individual stores
• Standard web server logs (IP address, browser type, pages visited)
• Newsletter subscriptions when voluntarily provided

How We Use Your Information

• To provide and maintain the platform and your store
• To process subscription billing and AI credit purchases
• To send account-related transactional emails (billing, service updates)
• To monitor platform security and prevent abuse
• To improve platform features based on usage patterns

Data Isolation

Each store's data is stored in a separate, isolated database. Store owners cannot access other stores' data. Platform administrators access store data only for support and maintenance purposes.

Information Sharing

We do not sell your data. We share information only with:

• Payment processors (Clover) to handle billing
• AI service providers when you use AI features — only the content you submit for processing. Platform AI runs through Micro Advantage's AI gateway on Ollama Cloud models. A store owner who connects their own AI provider account in AI Settings (Anthropic, OpenAI, Google or Ollama) has that content processed by that provider instead.
• Infrastructure providers (Cloudflare for DNS/CDN) as part of normal operations
• Law enforcement when required by law

AP Intake Mobile App

If you use the AP Intake Android app:

• The app uses your phone's camera to take item photos. The photos, any barcode or label text the app reads from them, and measurements you take are uploaded to your APMTSales store over an encrypted connection and stored with your inventory.
• If your store uses AI features, the store sends those photos to an AI service provider to write titles, descriptions and estimated values.
• The app registers your device (its name and model, and the app version) with your store so you can see and remove signed-in devices, and it sends crash reports to help us fix problems.
• Photos stay on your phone only until they upload.
• Fingerprint sign-in is handled by Android. Your fingerprint never leaves the phone, and the app keeps your password on the phone only in encrypted form, unlocked by your fingerprint.
• The app does not collect your location, your contacts or other files on your phone.
• Deleting an item in your store deletes it and its photos. Copies in our nightly backups are removed within about a week. To have your account and all of its data deleted, contact us at the address below.

Threads and Instagram

If a store owner connects a Threads account or an Instagram professional account to their store:

• The owner signs in with Meta and approves APMTSales. We store the account's Meta user ID, username, account type and an access token. The token is encrypted at rest and renewed when the store posts.
• APMTSales asks Meta only for permission to read the account's basic profile and to publish posts. It does not ask for access to messages, comments, followers or insights.
• A post is made only when the store owner chooses to post an item. The store sends Meta the post text and the address of a JPEG copy of the item's main photo, which Meta downloads. We keep a record of each post: the item, the text, the photo address, Meta's post ID and link, the status and the time.
• Posts stay on Threads or Instagram until you delete them there; APMTSales does not delete them.
• Disconnecting the account under Integrations → Threads / Instagram, or removing APMTSales in your Threads or Instagram settings, deletes the stored account and token. Post records stay in the store's history.
• A data deletion request made through Meta also deletes those post records, and Meta gives you a confirmation code and a page where you can check the status.
• Photo copies made for posting are deleted when the photo, or the item, is deleted.
• In our log of deauthorization and deletion requests we keep only a one-way hash of the Meta user ID, not the ID itself.

Data Security

• All connections are encrypted in transit
• Sensitive data (API keys, credentials) is encrypted at rest
• Passwords are securely hashed and never stored in plain text
• HTTP security headers (HSTS, CSP, X-Frame-Options) are enforced on all pages
• Database access is restricted and credentials are not stored in web-accessible files

Cookies

We use essential session cookies to maintain login state. We use Google Analytics to understand platform usage. We do not use third-party advertising cookies.

Data Retention

Account data is retained while your subscription is active. If you cancel, your store data is retained for 30 days before deletion. You may request immediate deletion by contacting us.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time. Store owners can export their inventory data through the platform's built-in tools. Contact us at [email protected] for data requests.

Changes to This Policy

We may update this policy as our platform evolves. Material changes will be communicated via email to account holders. The latest version is always available at this URL.