Lapis
Sign inDashboardRequest a Quote
Legal

Privacy Policy

1. Who we are

<<Operator legal name>> ("we", "us") operates the Lapis platform (the "Platform") at https://lapis.innovations-beyond.com. This policy explains what personal data we collect, why, how long we keep it, and what choices you have.

Lapis is business software used by jewelry retailers ("Merchants"). Much of the data in the Platform is the Merchant's business data, including personal data about the Merchant's own customers. For that customer data, the Merchant is the controller and we act as a processor on the Merchant's behalf; this policy describes how we handle data overall.

For privacy enquiries, contact [email protected].

2. What we collect

We collect only the information needed to operate the Platform.

  • Account & staff information. Business name, staff email addresses, hashed passwords (if password sign-in is used) or Google account identifiers (if Google Sign-In is used), and roles. Retained while the account is active and for up to ninety (90) days after closure for fraud and abuse investigation.

  • Merchant business data. Inventory records, sales and payment metadata (not full card numbers), repairs, memo/consignment records, and the Merchant's own customer records (names, contact details, purchase history, wish lists, important dates). This is the Merchant's data; we treat it as confidential and process it to operate the Platform for that Merchant.

  • Billing data. Stored and processed by our payment processor (Stripe). We retain only subscription status, plan, and a reference identifier. We never see or store full card numbers.

  • Operational logs. Authentication attempts, IP address at sign-in, user agent, and timestamps of administrative actions. Retained for up to ninety (90) days for security and abuse investigation.

  • Error reports. When the Platform encounters an error, technical diagnostics may be sent to our observability provider (Sentry), including the request path, stack trace, and minimal request context. We configure the integration with send_default_pii=false and do not intentionally send Merchant business data to Sentry.

3. What we don't collect

  • We do not run third-party advertising or behavioral trackers in the application.
  • We do not sell, rent, or share your data with marketers.
  • We do not scan Merchant business data for any purpose other than operating the Platform for that Merchant.
  • We do not use Merchant data to train machine-learning models.

4. How we use it

We use data to:

  1. Operate the Platform (run the catalogue and register, sync inventory to the storefronts and accounting software you connect, deliver notifications, process subscription charges).
  2. Communicate about your account — security notices, billing receipts, and service-affecting incidents.
  3. Investigate abuse and fraud and enforce our Terms.
  4. Comply with legal obligations.

5. Sharing

We share information with third parties only in these specific cases:

  • <<Cloudflare>> — fronts the Platform's public URL and may see request metadata (IP, user agent, path).
  • <<Stripe>> — processes subscription payments; stores card data; we store only the subscription reference.
  • <<SendGrid>> — sends transactional email; sees recipient address and email body.
  • <<Sentry>> — receives error reports as described above.
  • Services you connect — e-commerce storefronts (Shopify, BigCommerce, WooCommerce), accounting software (QuickBooks Online), and diamond-supplier feeds (RapNet, IDEX, Nivoda) receive or provide only the data needed for the integration you enable.

6. Your choices

  • Export. You can export your Merchant business data from the Platform at any time.
  • Deletion. You can request account deletion. We will remove your personal data within thirty (30) days unless retention is required by law. Note that you remain responsible for honouring deletion requests from your own customers as their controller.
  • Communications. Transactional emails (security, billing) are required for account operation. We do not send marketing email without consent.

7. Data retention

  • Active account data: for as long as the account is active.
  • Closed-account residuals: up to ninety (90) days for fraud and abuse investigation, then deleted.
  • Operational logs: ninety (90) days.
  • Billing records: seven (7) years to comply with US tax retention rules.

8. International users

The Platform is operated from the United States. If you access it from elsewhere, your data is transferred to and processed in the United States. By using the Platform you consent to that transfer.

9. Security

We use standard industry practice to protect data — TLS in transit, encrypted storage at rest, hashed passwords, signed session tokens, and daily encrypted backups. No system is perfectly secure; if a breach occurs that materially affects you, we will notify you as soon as reasonably practicable, consistent with applicable law.

10. Changes

We may update this policy from time to time. Material changes will be announced via the Platform or by email to active subscribers.

11. Contact

[email protected]

Last updated: draft.