Last updated: July 2026
When you create an account on Stockmate, we collect your email address and a hashed password. If you connect an inventory platform, we store the API credentials you provide (encrypted at rest). When you run a lead search, we store the selected product code, product description, buyer profile, search area, generated queries, and resulting business and contact information.
Your email and password are used solely for account authentication. Your API credentials are used only to fetch inventory data at your request. Lead searches are stored so you can review and export them. We do not sell your personal data. We disclose search data to the service providers described below only as needed to provide a search.
When you mark a lead good or bad, Stockmate uses that label to train account-level and product-category logistic-regression buyer-quality models. The models use numeric features such as fit score, rating, review volume, verified-contact status, distance, direct-evidence status and aggregate company-graph signals. Raw product descriptions, product codes, business names, email addresses and website text are not model features. Aggregated feedback counts by product category may also influence general search ranking; these community signals do not include your account identity.
Stockmate integrates with inventory platforms and lead providers including Google Places, Hunter.io and DeepSeek. When you start a search, the product description, product category, product code, buyer profile, search area and candidate-business evidence may be sent to DeepSeek for query generation and buyer analysis. Generated business-search queries and location data are sent to Google. Business domains and email addresses may be sent to Hunter.io or a configured verification provider. Each provider processes data under its own terms and privacy policy.
DeepSeek (our AI provider) operates under terms that prohibit training on customer data and require controlled data retention. No product descriptions, business names, email addresses, or other customer data are used to train third-party AI models.
When you enable Confidential Product Mode in your Settings, Stockmate strips your product code and description from all external API calls. Only the generic product category (e.g. "foodservice" or "industrial supplies") and your stated buyer profile are sent to DeepSeek, Google, and other providers. Cross-user learning models, shared website caches, and the business search graph are excluded for confidential searches. Your product identity never leaves Stockmate's infrastructure — external providers only see the type of buyer you are looking for, not what you sell.
If a product is confidential or proprietary, enable this mode and provide only a sanitised market-facing description. Do not include secret formulas, manufacturing processes, unreleased names, customer names, margins or other trade secrets.
We use a single essential session cookie to keep you logged in. This cookie is strictly necessary for the service to function and does not track you across sites. We do not use advertising or analytics cookies.
Your account data is retained for as long as your account exists. Lead search history is automatically deleted after 14 days. When Confidential Product Mode is enabled, search data is retained for a maximum of 7 days. You may delete individual lead searches from the dashboard at any time. You may request full account deletion by contacting us — all associated data (account, API keys, search history, lead results) will be permanently removed within 30 days.
API keys are encrypted at rest using AES-256-GCM. Passwords are hashed with bcrypt. All data in transit is encrypted via HTTPS. The application is hosted on Vercel and uses Turso for database storage, both of which maintain their own security certifications.
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, or to object to or restrict certain processing. To exercise any of these rights, contact us using the information below.
For privacy-related requests or questions, email admin@stockmate.net.