Stoc Inc. Privacy Policy
1. Who we are
Effective date: October 31st 2026
Stoc Inc. (“Stoc”, “we”, “us” or “our”) is a Delaware corporation with its registered office at 131 Continental Drive, Suite 305, Newark, DE 19713. Stoc provides camera-based monitoring devices, software and data services that help retailers, foodservice operators and brands understand how their beverage coolers and retail spaces are performing.
This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights you have.
Our two roles. Most of the data in the Stoc platform is processed on behalf of our business customers, under our agreements with them. In that role we act as a service provider (or “processor”), and our customer decides how that data is used. If you are an employee of one of our customers and have questions about how your employer uses Stoc, please contact your employer first. For our own website, account administration and business communications, Stoc is responsible for your personal information (a “controller”).
2. Scope
This Policy applies to personal information we collect through:
- our website at hellostoc.com and its subdomains (the “Site”);
- the Stoc web dashboard, mobile experiences and APIs (the “Platform”);
- Stoc cameras, sensors, routers and related hardware installed in customer locations (the “Devices”);
- SMS, email and other alerts and notifications we send (“Alerts”); and
- our other business dealings with you, such as sales conversations, support requests and events.
Together we call these the “Services”. This Policy does not cover third-party websites or services linked from ours, or how our customers use data outside the Stoc Platform.
3. Information we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Contact and account details | Name, job title, employer, business email, phone number, login credentials, user role and permissions | You, or your employer when it sets up your account |
| Mobile number and alert preferences | Mobile number, chosen alert types and delivery channels, SMS consent records (date, time, method and wording of consent), opt-out requests | You, through the Platform’s notification settings |
| Alert and task activity | Alerts sent to you, delivery status, whether an alert was opened or acted on, task completion records | Generated by the Platform and our messaging providers |
| Platform usage data | Pages and features used, actions taken, IP address, browser and device type, log files, approximate location derived from IP address | Collected automatically when you use the Site or Platform |
| Equipment and device data | Temperature readings, door-opening counts, device location (store or site), connectivity and diagnostic data from Devices and routers | Devices installed at customer locations |
| Cooler images | Photographs of cooler interiors and shelves, and product, stock and planogram data derived from them. | Devices installed at customer locations |
| Business communications | Emails, support tickets, meeting notes, feedback and survey responses | You |
| Website and marketing data | Information submitted through web forms, chat, newsletter sign-ups and event registrations, and data collected by analytics and advertising cookies and pixels (see section 8) | You, and automatically through the Site |
We do not knowingly collect sensitive personal information such as government ID numbers, financial account numbers or health information through the Services. Payment details for invoices are handled by our payment providers.
4. How we use information
We use personal information to:
- Provide the Services: set up and manage accounts, operate Devices, process cooler images, and show dashboards, reports and insights to our customers.
- Send Alerts: notify the right people about equipment and stock issues by SMS, email or other channels they have chosen, and track whether alerts were delivered and acted on.
- Support and communicate with you: answer questions, provide technical support, send service and security notices, and manage our customer relationships.
- Improve the Services: monitor performance, fix problems, and develop and train our image-recognition and analytics models. Where we use customer data to improve our models, we do so as permitted by our customer agreements, and we use only images in which people are either omitted or have been blurred.
- Market our Services to businesses: send business-to-business updates about Stoc products where permitted by law. You can opt out of marketing emails at any time; this does not affect Alerts or service messages.
- Keep the Services secure: detect and prevent fraud, misuse and security incidents.
- Meet legal obligations: keep records, respond to lawful requests, and enforce our agreements.
We do not use the Services to make decisions about individuals that have legal or similarly significant effects on them.
5. Cooler images and people
Stoc Devices are designed to photograph the inside of coolers and shelves, not people. Because images are often taken when a cooler door opens, a person nearby, such as a shopper or a store employee, may sometimes appear in an image.
To protect privacy:
- Blurring before storage. Each image is processed in memory and any people detected in it are blurred before the image is saved. Blurring is highly effective but not perfect, so a person may occasionally remain visible. If blurring cannot be completed, the image is stored, flagged and reviewed by authorized Stoc personnel, who blur or delete it.
- No identification. Our detection step only locates people in an image so they can be blurred. It does not measure facial features or store any data about the people detected, and we do not use images to identify, recognize or track anyone.
- Limited use. Images are used to analyze products, stock and cooler conditions for our customers and, as permitted by our customer agreements, to improve our recognition models.
- Limited access. Stored images are accessible to authorized users at the customer and to Stoc personnel and contractors involved in reviewing recognition results.
- Retention. Images are kept for 12 months by default and then deleted. We may keep images for longer where a customer agreement allows it, to improve our recognition models, or where we need them for legal reasons. Customers can ask us to delete images at any time.
Our customers are responsible for giving any notice required by law at their locations, such as signage stating that camera-based monitoring is in use. If you believe an image of you has been captured and want it removed, contact us at info@hellostoc.com.
6. SMS and email alerts
If you opt in to SMS alerts through the Platform’s notification settings, we use your mobile number to send operational alerts about the coolers and equipment you manage, such as temperature and stock alerts. We do not send marketing messages by SMS.
- Consent. Consent to receive SMS alerts is optional and not a condition of using the Services. We keep a record of when and how you gave consent.
- Frequency and cost. Message frequency varies with the number of alerts triggered. Message and data rates may apply.
- Opting out. Reply STOP to any message to stop SMS alerts. You will receive one confirmation message and no further texts. You can also turn off alerts in your notification settings. Reply HELP for help, or contact support@hellostoc.com.
- Email alerts can be turned off in your notification settings.
No sharing of mobile information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all categories of disclosure described in this Policy and will not be shared with any third parties, except service providers that deliver our messages on our behalf.
7. How we disclose information
We do not sell personal information for money. Our website uses advertising cookies and pixels, which may be treated as “selling” or “sharing” personal information for targeted advertising under some US state laws. You can opt out as described in sections 8 and 10. We disclose personal information only as follows:
- Our customers. If you work for a Stoc customer, information about your use of the Platform and the Alerts sent to you is available to authorized users at that customer. Images and equipment data from a customer’s Devices are available to that customer.
- Service providers. Companies that help us run the Services, such as cloud hosting and storage providers, our image-recognition technology partner, contractors who review recognition results, SMS and email delivery providers, connectivity and SIM providers, CRM and support tools, and AI model providers (which receive structured platform data, not images). They may use personal information only to provide services to us, under contracts that require them to protect it.
- Partners you or your employer ask us to work with. For example, integration partners that receive Platform data at a customer’s direction.
- Business transfers. As part of a merger, acquisition, financing, reorganization or sale of assets, subject to confidentiality protections. The new owner would remain bound by this Policy for information we already hold.
- Legal and safety reasons. Where required by law or legal process, or to protect the rights, property or safety of Stoc, our customers or others.
- With your consent or at your direction.
- Advertising and analytics partners. Website usage information collected through cookies and pixels is shared with partners such as Google, HubSpot, LinkedIn and Meta to measure site use and to show and measure our ads. This applies to the website only, not to Platform data, cooler images or Alerts. Mobile numbers, SMS opt-in data and consent records are never shared with these partners.
We may share aggregated or de-identified data that cannot reasonably be used to identify you, for example industry benchmarks of stock levels.
8. Cookies
The Site uses cookies, pixels and similar technologies:
- Essential cookies keep the Site working and secure. They cannot be turned off.
- Preference cookies remember your settings.
- Analytics cookies help us understand how the Site is used, using Google Analytics and HubSpot.
- Advertising cookies and pixels from LinkedIn, Meta and HubSpot let us show our ads to people who have visited the Site and measure how those ads perform.
The Platform uses only essential and analytics cookies, and no advertising cookies.
You can accept or reject non-essential cookies through the Cookie icon in the bottom-right corner of our website or your browser settings.
9. Retention, security and international transfers
Retention. We keep personal information only as long as needed for the purposes in this Policy, or as our customer agreements or the law require. Account and contact details are kept while the account is active and for up to 2 years afterwards, unless we need them longer to resolve disputes or meet legal obligations. SMS consent and opt-out records are kept for at least 5 years so we can show compliance. Cooler images are kept as described in section 5. We then delete or de-identify the data.
Security. We use administrative, technical and physical safeguards appropriate to the information, including encryption in transit, access controls and monitoring.
International transfers. Stoc operates in the United States and the United Kingdom. Images and platform data are stored in the European Union (Germany and Ireland), and our service providers and contractors may process information in other countries. When information is transferred across borders, we use contractual and other safeguards required by applicable law.
10. Your rights and choices
Depending on where you live, you may have the right to:
- know what personal information we hold about you and how we use it;
- get a copy of it;
- correct it;
- delete it;
- withdraw consent where we rely on consent; and
- opt out of marketing communications.
To exercise these rights, email info@hellostoc.com. We may need to verify your identity before responding. If your information is held on behalf of one of our customers, we may refer your request to that customer, who decides how to respond. We will not discriminate against you for exercising your rights.
United States. Residents of California and other states with comprehensive privacy laws may have the rights above, and the right to appeal a refusal by replying to our decision. You also have the right to opt out of the “sale” or “sharing” of personal information for targeted advertising. To do so, use the Cookie icon in the bottom-right corner of our website. Stoc does not use sensitive personal information for purposes that would require an opt-out.
11. Children, changes and contact
Children. The Services are for businesses and are not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.
Changes. We may update this Policy from time to time. We will post the updated version on this page with a new effective date, and notify account holders of material changes by email or through the Platform.
Contact us. Questions or requests about privacy:
Stoc Inc. Attn: Privacy 131 Continental Drive, Suite 305, Newark, DE 19713 info@hellostoc.com