Privacy Policy | Stoa Logistics

Protecting your private information is our priority. This Statement of Privacy applies to Vectis OMS and Stoa Logistics and governs data collection and usage. For the purposes of this Privacy Policy, unless otherwise noted, all references to Stoa Logistics include https://stoalogistics.com and Stoa. The Stoa application is an order management application. By using the Stoa application, you consent to the data practices described in this statement. This policy, as published at stoalogistics.com/privacy, is the governing version: if a copy shown anywhere else, such as during sign-up, differs from this page, this page controls.

Collection of Your Personal Information

In order to better provide you with products and services offered, Stoa may collect personally identifiable information, such as your:

First and Last Name
Mailing Address
E-mail Address
Phone Number
Employer
Job Title
Client Order Data, Product Data

If you purchase Stoa's products and services, we collect billing information. For Vectis subscriptions, you enter your card details on a checkout page hosted by our payment processor, Stripe, and we do not receive or store your full card number. This information is used to complete the purchase transaction.

Most of the personal information we hold is information you give us. We also collect some information automatically: when you sign in or change your account, we record your IP address and browser user agent for security and audit purposes, and our website uses the analytics and referral tools described under Cookies and Similar Technologies. However, you may be required to provide certain personal information to us when you elect to use certain products or services. These may include: (a) registering for an account; (b) sending us an email message; (c) submitting your credit card or other payment information when ordering and purchasing products and services. We will use your information for communicating with you in relation to services and/or products you have requested from us.

Use of Your Personal Information

Stoa collects and uses your personal information to operate and deliver the services you have requested. Stoa may also use your personally identifiable information to inform you of other products or services available from Stoa and its affiliates.

Sharing Information with Third Parties

Stoa does not sell, rent or lease its customer lists to third parties.

Stoa may share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to Stoa, and they are required to maintain the confidentiality of your information.

The service providers that process data for us include Stripe (payments), Resend (account and billing email), Neon (databases), Amazon Web Services (hosting, file storage and logs), Cloudflare (network edge), EasyPost (shipping labels and rates), Google (optional Google sign-in and the AI features described below) and Sentry (error monitoring). When you connect a sales channel or carrier account, we exchange order, product and shipment data with that provider on your instructions.

AI-Powered Features and Third-Party AI Providers

Certain features use AI models from third-party providers. In Vectis, the Ask Vectis assistant, demand forecasting, product search, documents you upload to Ask Vectis, and AI product images use Google (Gemini). If a workspace admin connects their own Anthropic API key, Ask Vectis sends conversations to Anthropic (Claude) under that key. In StoaPack, item, box and packing data go to Google (Gemini) or OpenAI only when you send custom instructions or turn on AI review. Data is sent to these providers only to provide the requested AI feature and is subject to their privacy policies. AI-generated outputs are provided for informational purposes and should be verified before relying on them for business decisions.

Stoa may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on Stoa or the site; (b) protect and defend the rights or property of Stoa; and/or (c) act under exigent circumstances to protect the personal safety of users of Stoa, or the public.

Right to Deletion

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

Delete your personal information from our records; and
Direct any service providers to delete your personal information from their records.

Please note that we may not be able to comply with requests to delete your personal information if it is necessary to:

Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
Debug to identify and repair errors that impair existing intended functionality;
Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
Comply with the California Electronic Communications Privacy Act;
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
Comply with an existing legal obligation; or
Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Children Under Thirteen

Stoa does not knowingly collect personally identifiable information from children under the age of thirteen. If you are under the age of thirteen, you must ask your parent or guardian for permission to use this application.

E-mail Communications

From time to time, Stoa may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communication. In order to improve our Services, we may receive a notification when you open an email from Stoa or click on a link therein.

To stop receiving marketing email from Stoa, reply to the email or write to support@stoalogistics.com.

Cookies and Similar Technologies

Our website uses three third-party tools, and each one loads only after you click Accept on the cookie banner. Google Analytics measures how visitors use the site. BrandJet provides website analytics. Endorsely tracks affiliate referrals so we can credit the partner who sent you: if you arrive through a partner link and accept, a referral ID is stored in your browser and passed to our sign-up and checkout pages. We store your banner choice in your browser's local storage. To change it, clear this site's data in your browser and choose again. Our API reference page (/developers) also loads its documentation viewer from unpkg.com, a public code host, as soon as you open that page.

External Data Storage Sites

We may store your data on servers provided by third party hosting vendors with whom we have contracted. Vectis uses database-per-tenant architecture, meaning your order data, inventory data, and business information are stored in isolated databases separate from other customers.

Data Retention

We retain your account information and order data for as long as your account is active or as needed to provide you services. Some retention runs automatically: expired sign-in sessions and tokens are deleted daily, and security audit logs are deleted after two years. Organizations without a paid subscription that show no activity for six months may be closed automatically. You may request deletion of your data at any time by contacting us, including when you need help beyond self-service workflows.

International Users (GDPR)

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). These include the right to access, correct, or delete your personal data, and the right to data portability. Every Vectis user can download a copy of their account data and delete their account in Account Settings (an organization's only owner must first transfer ownership or delete the organization). Account Settings is in the Vectis account portal (the Control Plane link in the app sidebar). You can export or anonymize an individual end customer's records through the Vectis API (/api/gdpr), signed in as an owner or admin (API-client tokens can't call it); there is no screen for this in the Vectis app. Where a request cannot be completed this way, or you prefer to work through our team, contact support@stoalogistics.com.

Our standard Data Processing Agreement (DPA) is published at control.vectisoms.app/dpa. For a countersigned copy, contact support@stoalogistics.com.

California Consumer Privacy Act (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you.
Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
Right to Opt-Out: You have the right to opt-out of the sale of your personal information. Stoa does not sell personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, please contact us at support@stoalogistics.com. We will respond to verifiable requests within 45 days.

Changes to This Statement

Stoa reserves the right to change this Privacy Policy from time to time. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address specified in your account, by placing a prominent notice on our application, and/or by updating any privacy information. Your continued use of the application and/or Services available after such modifications will constitute your: (a) acknowledgment of the modified Privacy Policy; and (b) agreement to abide and be bound by that Policy.

Contact Information

Stoa welcomes your questions or comments regarding this Statement of Privacy. If you believe that Stoa has not adhered to this Statement, please contact Stoa at:

Email Address: support@stoalogistics.com