Security and your data

Your inventory, suppliers and prices are your business. Here is how we look after them.

Encrypted everywhere

Every connection to Shelfbuzzer uses HTTPS. Your data is stored in a managed Postgres database (Supabase), encrypted at rest.

Only your team sees your workspace

Access is checked by the database itself on every request, not only by the screens you see, so one workspace can never read another's data. Each person has a role (owner, admin, team member or viewer) that decides what they can change.

Shelf tags let anyone log what they took without an account, but a tag only ever shows that one item's name and lets them report a quantity. Guests never see prices, other items or anything else in your workspace.

Passwords and sign-in

Passwords are stored only as a secure hash; we can't see them. Password resets go by email link.

Invoices stay on your device

When you read an invoice, the photo or PDF is read right in your browser. The file itself isn't uploaded to us; only the lines you check and save are.

Payments

Card payments are handled by Stripe. Card numbers go straight to Stripe and never touch our servers.

Your data is yours

Export your items any time as a spreadsheet (Settings, Import and export), and the activity log from the Activity page. If your plan ends, the workspace turns read-only; nothing is deleted. You can delete a workspace, or your whole account, yourself in Settings, and it's gone for good.

Found a problem?

If you think you've found a security issue, email hello@shelfbuzzer.com with the details. We'll reply quickly and keep you updated.