Legal
Privacy
What StoreDesk holds, where it is held, and who else can see it. Last updated 16 September 2026.
None
Of your prices, costs or sales ever reaches us
Zero
Analytics, advertising or tracking, on the site and in the app
2
Optional features send anything outside your store, both off by default
On your store PC
Yours. We cannot read any of it.
- Price book, PLUs, departments and shelf prices
- What you pay each supplier, price groups and deals
- Sales: daily, shift and monthly reports, and single transactions
- Fuel grades and pump prices
- Sales tax working and the returns built from it
- Staff accounts, with passwords that cannot be read back
In your StoreDesk account
What a licence needs, and nothing else.
- Your business name, and the stores you run
- People: name, email, role
- Which store PCs are connected
- Licence and plan
- A log of account changes
The short version
StoreDesk is local-first. Your price book, what you pay your suppliers, your sales history and your sales tax working all live in a database file on the back-office PC in your store. They are not copied to us, and we cannot read them.
What stays on your store PC
StoreDesk keeps your store’s data in its own storage on the back-office PC, locked down so that only that PC’s administrators and StoreDesk itself can open it. It holds:
- the price book read from your register: PLUs, descriptions, departments and shelf prices;
- the supplier costs you enter, and the price groups and deals built from them;
- sales read from the register: daily, shift and monthly reports, and individual transactions;
- fuel grades and pump prices;
- sales tax working and the returns generated from it;
- the staff accounts that may sign in at this store, with passwords stored in a hashed form that cannot be read back;
- logs of what the service did, kept on the same PC.
What your StoreDesk account holds
The account lives on our servers and exists so a licence can be issued and a store PC can prove it is yours. It holds this and nothing more:
| What | Why | Example |
|---|---|---|
| Organisation and stores | So a licence covers the right stores. | Business name, store name and address |
| People | So they can sign in and be given a role. | Name, email address and role |
| Installations | So each store PC has its own identity and can be replaced on its own. | Which PCs are connected, and when |
| Licence | So we know the plan and when it renews. | 30-day trial, then a 365-day plan |
| Audit log | So account changes can be traced. | Who added a store, who changed a role, and when |
It holds no prices, no costs, no transactions and no sales totals.
Your register credentials
Connecting to a Verifone Commander needs a username and password for the register. That password is stored encrypted, and it is write-only: you can set it, and nobody can read it back.
Who else can see anything
Two features send data outside your store. Both are off until you turn them on, and both can be turned off again.
| Feature | Who is involved | What passes through |
|---|---|---|
| Phone app access | Cloudflare | A secure connection that lets your phones reach your own store PC from outside the store. Your data stays on that PC. |
| Google Sheets export | Your daily sales totals, written to a spreadsheet in a Google account you own and control. Your store PC writes them through StoreDesk's export identity, which you share the sheet with and can unshare at any time. Nobody signs in to it, and the totals are not copied to us. |
We do not sell data, we do not share it with advertisers, and we do not use it to train anything. We use no analytics or advertising trackers on this website.
The phone app's permissions
StoreDesk Mobile asks for two permissions, both only for the job on the shop floor:
- Camera — to scan a barcode. The camera image is processed on the phone. It is not stored and not uploaded.
- Photos — only if you pick a saved photo of a barcode to look up. The image is read on the phone and not uploaded.
The app has no advertising identifier, no third-party analytics and no tracking across apps or websites.
This website
The public pages need no account and set no advertising or analytics cookies. Signing in to the admin console or redeeming an enrollment code sets a session cookie so you stay signed in; a session lasts 12 hours. The download page reads the current version from our downloads site when the page is built, not from your browser.
How long things are kept
- Store data is kept on your PC until you delete it. Uninstalling StoreDesk keeps it unless you tick “Remove store data”.
- Account data is kept while the account is open, and the audit log is kept with it.
- A setup key is used by the PC it sets up, and a new one replaces it. The used one is kept only as a record that it was used.
- Email you send us is kept in our mailbox so we can carry on the conversation.
Your choices
You can turn off the Google Sheets export and phone access at any time in the desktop app. You can ask us for a copy of what your account holds, ask us to correct it, or ask us to close the account and delete it. Because your store data never reaches us, the only copy is on your PC, and deleting it there deletes it. How to have your account deleted.
The user guide covers where each of these settings lives.
Contact
Privacy questions, data requests or anything unclear on this page: developer@storedesk.net. A person reads it.