Privacy Policy

Store Operations Platform, a product of Hashtag Group LLC — Last updated July 31, 2026

This Privacy Policy explains how Hashtag Group LLC ("we," "us," "our") collects, uses, and protects information through Store Operations Platform (the "Service"), a platform for managing convenience store and gas station operations.

1. Information We Collect

We collect the following categories of information:

Account information: name, email address, and business name provided at signup.
Payment information: processed directly by our payment provider, Stripe. We do not store full card numbers on our own servers.
Employee/staff information: names, phone numbers, and email addresses entered by a business's administrator for their own staff, used solely to operate the Service (e.g., scheduling, notifications, role assignment).
Operational data: the business records a customer enters into the Service — sales, inventory, vendor, and financial data related to their own operations.

2. How We Use Information

To provide, operate, and maintain the Service
To process subscription billing through Stripe
To send account-related and operational notifications via email or SMS (e.g., shift reminders, task alerts) to a business's own staff, as configured by that business's administrator
To provide customer support
To maintain the security and integrity of the Service

3. Data Isolation Between Businesses

Each business using the Service has its own isolated set of data. One business's information — including staff, financial records, and operational data — is not accessible to any other business using the Service.

4. Mobile Number / SMS Data

We do not share, sell, or rent mobile phone numbers or SMS opt-in data with third parties or affiliates for marketing purposes. Phone numbers collected for SMS notifications are used solely to deliver the operational messages a business's administrator has configured for their own staff (e.g., shift reminders, task alerts). Message frequency varies based on how a business uses the Service. Message and data rates may apply. Reply STOP to any message to opt out, or contact your administrator to be removed.

5. Data Sharing

We share information only with the service providers necessary to operate the Service, including:

Supabase — database hosting and authentication
Stripe — payment processing
Twilio — SMS delivery
Resend — email delivery
Vercel — application hosting

We do not sell personal information to third parties.

6. Data Security

Business data is protected using database-level access controls that isolate each business's data from every other business, in addition to standard encryption in transit and at rest provided by our infrastructure providers.

7. Data Retention

We retain account and operational data for as long as an account remains active, and for a reasonable period afterward as required for legitimate business, legal, or tax record-keeping purposes.

8. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us using the information below. Business administrators can directly manage and remove their own staff's information within the Service.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

10. Contact Us

Questions about this Privacy Policy can be directed to Hashtag Group LLC at hashtaggroup.us@gmail.com.