Privacy Policy

Retail IT NYC LLC (“Retail IT,” “we,” “us”) provides physical inventory counting services and an online client portal for retail businesses in the New York tri-state area. This policy explains what information we collect through our website at retailit.nyc and our client portal, how we use it, and the choices you have.

Information we collect

• Contact form submissions. When you request a quote we collect your name, company, email address, phone number, and any details you share about your stores. We use this solely to respond to your inquiry and manage our business relationship.
• Client portal accounts. Portal access is invite-only. We collect your name and email address to create and authenticate your account. Authentication is handled by Clerk, our identity provider.
• Inventory data. Clients upload or sync product catalogs, store locations, and inventory count data to the portal. This business data belongs to the client organization and is used only to deliver our counting and reporting services.
• Shopify integration data. If a client connects a Shopify store, we access products, inventory levels, and locations on a read-only basis. Access credentials are stored encrypted (AES-256-GCM). We never modify your Shopify data and you can disconnect at any time from the portal, which deletes the stored credentials.
• Usage analytics. Our marketing site uses Google Analytics 4 to understand site traffic. Analytics runs only on the public marketing site, not inside the client portal.

How we use information

• To respond to quote requests and communicate about our services
• To provide, operate, and improve the client portal and our counting services
• To generate inventory reports and analytics for the client that owns the data
• To secure our systems and prevent abuse

We do not sell personal information, and we do not share client inventory data with other clients or third parties except the service providers listed below.

Service providers

We rely on a small number of infrastructure providers to operate our services:

• Vercel — website and application hosting
• Clerk — account authentication and organization management
• Supabase — database hosting for portal and inventory data
• Resend — transactional email delivery for contact form submissions
• Google Analytics — marketing site traffic measurement

Each provider processes data only as needed to perform its function for us.

Data isolation and security

Each client organization’s data is isolated at the database level — users in one organization cannot access another organization’s data. Data is encrypted in transit (TLS) and at rest, and integration credentials are additionally encrypted at the application layer.

Data retention

We retain contact form submissions while we have an active inquiry or business relationship. Client portal and inventory data is retained for the duration of the client relationship and deleted upon written request after the relationship ends. You may request deletion of your data at any time by emailing us.

Your choices and rights

• You may request a copy, correction, or deletion of your personal information
• You may disconnect the Shopify integration at any time from the portal
• You may opt out of analytics cookies using your browser settings or a content blocker

To exercise any of these rights, email cx@retailit.nyc.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by a new “Last updated” date at the top of this page.

Contact

Retail IT NYC LLC · New York, NY
cx@retailit.nyc · (718) 718-7188