Privacy Policy

This Privacy Policy describes how metItem ("we," "us," or "our") collects, uses, and protects your personal information when you use the metItem web app at metitem.com and our mobile apps for iOS and Android (together, the "Service").

We respect your privacy. We don't sell your personal information, and we collect only what we need to provide and improve the Service.

Account information

When you create an account, we collect your name, email address, and authentication identifiers (handled by Amazon Cognito).

You can also give us a phone number when you sign up, or later in your settings. It is optional. We store it with your account and show it on your profile. We do not use it to send you text messages. If you delete your account, your phone number is deleted with it.

Payments and subscriptions

If you buy a paid plan, you pay through Stripe on our website, or through the Apple App Store or Google Play in our mobile apps. They collect your card or other payment details directly. We never receive your card number or bank details.

We keep a record of your subscription with your account: your plan, whether you pay monthly or yearly, its status, where you bought it (our website, the App Store or Google Play), the dates of each billing period and of any free trial, and the date you cancelled, if you did. For each payment, we keep the amount, the currency, whether the payment succeeded or failed, and Stripe's or the store's reference number for it. For payments on our website, we also keep a copy of each invoice (its number, items, amounts, and dates) and a link to Stripe's PDF of it.

In our mobile apps, RevenueCat receives your App Store or Google Play purchase and renewal records, linked to your metItem user ID. RevenueCat checks each purchase and tells our server which plan to unlock, and it gives us reports on subscriptions.

We use these records to unlock your plan, to email you receipts and billing notices, and to answer your questions about billing. When you buy a plan or start a free trial on our website, our product analytics (PostHog) also records which plan you chose and whether you pay monthly or yearly, linked to your account.

Content you provide

When you use the Service, you create inventories, folders, and items, and may upload images, descriptions, codes, and other content. We store this so we can show it back to you and your teammates.

Your content can include personal information about other people that you choose to enter. For example: the names, email addresses, phone numbers, and addresses of your customers, your vendors, and their contact people; vendor bank details (we store bank account numbers encrypted and show only their last four digits); and the email addresses of the people you choose to receive scheduled reports. We process this information for you, to provide the Service. Please enter only information that you have the right to share with us.

When you invite someone who does not have a metItem account yet, we use their email address to send them an invitation. We do not save that email address in our database. To stop invitations being used for spam, we also pass the address to Arcjet, our abuse-protection service, to limit how many invitations one address can receive.

How you heard about metItem (optional)

In your first week, the website and the app may ask how you heard about metItem. Answering is optional. If you answer, we store your choice with your account, along with when you answered. If you choose "Other", you can also type a short answer, which we store with your account too (we keep up to 200 characters). If you skip the question, we store only that you skipped it and when. We use the answers to understand how people find metItem and to compare how people who found us in different ways go on to use the Service. Your choice, or that you skipped, is also recorded in our product analytics (PostHog) and linked to your account; the text you type is not sent to PostHog and stays only in our database. If you delete your account, the answer stored with it is deleted along with it.

Sales enquiries

If you use the "Talk to Sales" form on our pricing page, we collect your name, work email, company, team size, what you tell us you want to do, and your phone number if you give it. We store your enquiry in our database and email it to our team, and we send you an email to confirm that we received it. Both emails are sent through Resend. We use your enquiry to reply to you. Our product analytics (PostHog) records that you sent the form and the team size you chose, but none of the other details. We keep enquiries separately from metItem accounts, so deleting an account does not delete an enquiry. To have your enquiry deleted, email privacy@metitem.com.

Usage information

We collect basic usage information (such as pages visited, features used, and approximate device type), together with a random identifier for your browser or device, via analytics tools like PostHog to understand how the Service is used and to fix bugs. When you are signed in, we link this information to your account: we send PostHog your user ID, account ID, name, and email address. If your browser sends a "Do Not Track" signal, our website sends PostHog no analytics events and does not link your browser to your account. See our Cookie Policy for more on tracking.

Why you are leaving (optional)

When you delete your account, the website and the app ask why you are leaving. Answering is optional. If you choose "It's missing something I need", you can also type a short note about what you were looking for (up to 200 characters). Your choice, your note, and how long ago you signed up are sent only to our product analytics (PostHog), not to our database. Like our other analytics, they come with basic details about your browser or device. They are not linked to your account, and they are kept after your account is deleted, so please do not put personal information in the note.

Error reports

When something goes wrong in our website or app, it can send us an error report through PostHog, so that we can find and fix the problem. A report contains the type of error, the error message, where in our code the error happened, and the page or the part of the app where it happened. Like our other analytics, it also contains basic details about your browser or device. If you are signed in, the report is linked to your account. We do not add your inventory content to error reports, but an error message can sometimes include a piece of text from the page or screen where the error happened.

Session recordings (public pages only)

On our public pages — our marketing pages, sign-up and sign-in — we record anonymised sessions through PostHog so we can see where people get stuck. A recording captures page content, clicks, and scrolling. What you type in form fields is masked and never recorded, and recordings are deleted after 30 days.

We do not record sessions inside the app once you are signed in. Your inventory, items, customers, vendors, and documents are never captured in a recording.

Logs

Our servers log information such as IP addresses, request paths, and timestamps, which we use to operate, secure, and debug the Service.

We use your information to:

• provide, maintain, and improve the Service;
• understand how people find the Service;
• authenticate you and protect your account;
• process payments and manage subscriptions;
• send service-related emails (such as low-stock alerts you configure, payment receipts, billing notices, and important account notices);
• send a short series of welcome emails in your first days with metItem, with tips for using it and information about our paid plans. Each one has an unsubscribe link. If you unsubscribe, we stop these emails and any other marketing email to you. We still send receipts, billing notices, security notices, and alerts that you created;
• send the emails that you ask us to send to other people, such as purchase orders, invoices, sales orders, credit notes, sales receipts, and payment receipts to your customers and vendors, scheduled reports to the people you choose, and invitations to people you invite;
• respond to your support requests and sales enquiries, and communicate with you about the Service;
• detect, prevent, and address abuse and security issues;
• comply with legal obligations.

We do not sell your personal information, and we do not use Your Content (inventories, items, images) to train machine-learning models.

We rely on a small number of trusted third parties to provide the Service. Each handles a specific function and has its own privacy policy:

• Amazon Web Services — hosting, database, file storage, and authentication (Cognito, RDS, S3, EC2).
• Stripe — payment processing for subscriptions bought on our website. We give Stripe your name, email address, and metItem account ID to set up your billing, and Stripe collects your payment details directly.
• RevenueCat — subscription management for the mobile apps (alongside the Apple App Store and Google Play). It receives your App Store and Google Play purchase and renewal records, linked to your metItem user ID.
• Resend — email delivery: account and billing emails, the welcome emails, and the documents, reports, and invitations you send to other people through the Service.
• PostHog — product analytics, error reports, and session recording on public pages (never inside the app).
• Arcjet — bot and abuse protection on the API, including the limit on how many invitations one email address can receive.
• Google ML Kit — barcode scanning in our Android app. Scanning happens on your device; Google receives an identifier for the app on your device and technical details about the app and device, for diagnostics and usage analytics.
• Google and Apple — only if you choose to sign in with them. They tell us your email address and, if you let them, your name.
• Slack, Microsoft Teams, QuickBooks — only when you choose to connect them as integrations.

We share your personal information only:

• with the third-party services listed above;
• with your teammates inside an inventory you choose to share;
• with the people you choose to send something to through the Service (for example, a customer you email an invoice to, a person who receives a scheduled report, or someone you invite). An invitation shows the person your name and email address. When you email a document (such as a purchase order, invoice or receipt) or an invitation, it is set so that a reply goes to the email address on your account, so the person who receives it can see that address (not when that is a hidden Apple address, which cannot receive their reply);
• if required by law (for example, in response to a valid legal request);
• in connection with a merger, acquisition, or sale of assets, with appropriate protections.

Your data is stored on Amazon Web Services infrastructure in the United States. We retain your data for as long as your account is active. Closing a subscription does not delete your data. When you delete your account, the data stored with it is deleted from our database at the same time, as described below (copies can remain in our database backups for a limited period).

When you delete your account, we first cancel any subscription you bought on our website, so that Stripe does not charge you again. If we cannot cancel it, we do not delete your account, and we ask you to try again. Deleting your account does not cancel a subscription you bought in the App Store or Google Play; you can cancel it in your App Store or Google Play account.

Our own records of your subscriptions and payments (described in section 2) are deleted from our database at the same time as your account. Stripe, Apple, Google, and RevenueCat keep their own records of your purchases. Deleting your account does not delete those records automatically.

When an account is deleted, our support team receives a notice of it, so that we can finish erasing your records held by other services. The notice contains your user ID, when you signed up, and the reference numbers and status of your subscriptions, but not your name or email address.

Depending on where you live, you may have rights under laws such as the GDPR (EU/UK) or PIPEDA (Canada), including the right to:

• access the personal information we hold about you;
• request correction or deletion;
• request an export of your data (you can export inventories as CSV from the app at any time);
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• stop marketing emails at any time. Use the unsubscribe link in any of them, or email support@metitem.com.

To exercise these rights, email privacy@metitem.com. We will respond within a reasonable timeframe.

If you are outside the United States, your information will be transferred to and processed in the United States, which may have different data-protection laws than your country. We rely on appropriate safeguards (such as the standard contractual clauses) where required.

metItem is not directed at children under 13 (or under the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

We use industry-standard measures including encryption in transit, hashed credentials, role-based access controls, and rate-limiting to help keep your information safe. No system is perfectly secure; if we become aware of a breach affecting your information, we will notify you as required by law.

See our Cookie Policy for details about how we use cookies and similar technologies.

We may update this Privacy Policy from time to time. If we make material changes, we will give you reasonable notice (for example, by email or by posting a notice in the Service) before the change takes effect.

Questions about this Privacy Policy or how we handle your information? Email privacy@metitem.com or visit our contact page.