# Privacy Policy
Trader - Stella 56 · https://trader.stella56diamonds.com/privacy
Last updated: 14 October 2026
> The full version, for agents and tools. People read the same text without the extra detail at https://trader.stella56diamonds.com/privacy. Where the two differ, this one adds detail and never contradicts it.
Trader - Stella 56 ("Stella 56") is a web app that diamond wholesalers use to run their business: stock, invoices and memos, payments, expenses and profit. Stella 56 Diamonds ("we", "us") operates it at trader.stella56diamonds.com. This policy explains what Stella 56 collects, why, who else handles it, how long we keep it and what you can do about it.
**In short:** we collect what we need to run your account and your books. We never sell your data, never use it for advertising, and never show your costs to buyers. If you sign in with Google, we receive only your name, email address and profile picture, and use them only to create your account, sign you in, and link the app's usage analytics to your account.
## What we collect
- **Your account.** Your name and email address, and your password if you choose one. Clerk, our sign-in provider, holds these.
- **Your Google account details**, if you sign in with Google: your name, email address and profile picture. See [Google user data](#google-user-data).
- **Your business records.** What you enter: stock (bundles, certificates, costs, locations), invoices and memos, payments and cheques, cash and bank entries, expenses, and your business profile (name, address, phone, email, website and tax ID) for your documents.
- **Your clients' and suppliers' details.** The names, phone numbers, email addresses and addresses you enter for the businesses you trade with, and for the people at them: each person's name, role, phone number and email address.
- **Buyers' details.** When a buyer opens one of your share links, the name, phone and business they give, and any questions they send about your stones.
- **How the app is used.** Pages opened, actions taken, errors, the app's version, and device details such as browser, operating system and screen size, through PostHog analytics. Analytics cookies are set, and sessions recorded, only if you allow them. A recording shows the pages you used and where you tapped, with everything you type and all text on screen hidden.
- **Notification settings.** If you turn on notifications on a device, the address your browser gives us for sending them.
We don't collect payment card or bank account details: Stella 56 records that a payment happened, not the account it came from.
| Category | Examples | Where it is kept |
| --- | --- | --- |
| Account | Name, email address, password (hashed), sign-in devices, IP addresses of sign-ins | Clerk |
| Google account details | Google account ID, name, email address, profile picture | Clerk |
| Business records | Bundles, costs, certificates, trades and their lines, returns, payments, cheques, refunds, discounts, cash counts and deposits, expenses, profit by day and month | Convex, under your business's account ID |
| Business profile | Business name, address, phone, email, website, tax ID, invoice and memo terms | Convex |
| Issued documents | A fixed copy of each invoice and memo, with your details and your client's name, address, phone and email | Convex |
| Contacts | Clients' and suppliers' names, emails, phones, addresses, cities, states or provinces, postal codes, countries, payment terms, notes, and their people's names, roles, phones and emails | Convex |
| Share links | Each link's settings, view counts, the last viewer's name, buyers' names, phones and businesses, their questions, a hashed form of their IP address | Convex |
| Settings | Alerts, time zone, onboarding progress | Convex |
| Notification devices | Push address and keys, the browser's user agent and how many touch points its screen reports | Convex |
| Account deletions | When a deletion was asked for and when each part of it was done, under the account ID | Convex |
| Usage | Pages, actions, errors, app version, device and browser details; when signed in, your account ID, name, email and username; if you allow analytics, recordings of the pages you used, with typed and on-screen text hidden | PostHog |
| Requests | Address requested, time, IP address, browser | Cloudflare logs |
Our own database stores none of your Google data and no name or email for your sign-in: it keeps only the account ID Clerk gives your sign-in, on every row, so that each business's records stay its own.
## Google user data
You can sign in to Stella 56 with your Google account, or with an email address and password. If you choose Google, this is how we treat what Google shares with us:
- **What we access.** Your name, email address, profile picture and Google account ID, through Google's basic sign-in permissions (openid, email and profile). Stella 56 does not ask for, and cannot read, your Gmail, Google Drive, Contacts, Calendar or any other Google data.
- **How we use it.** Only to create your Stella 56 account, sign you in, show your name and email in the app, write to you about your account, and link the app's usage analytics to your account. We never use it for advertising, never sell it, and never use it to train AI or machine-learning models.
- **How we store it.** Clerk, our sign-in provider, stores it for us, encrypted in transit and at rest. Our own database keeps only an account ID that links your business records to your sign-in.
- **Who we share it with.** Clerk, to sign you in, and PostHog, our analytics provider, which receives your name and email address so that usage records are tied to your account. No one else, unless the law requires it.
- **How long we keep it, and how to delete it.** For as long as your account is open. Delete your account in Settings → Account → Delete account, and your Google details are deleted with it 7 days later; if you can't sign in, write to [privacy@stella56diamonds.com](mailto:privacy@stella56diamonds.com) from its email address and we delete them within 30 days. You can also remove Stella 56's access to your Google account at any time at [myaccount.google.com/permissions](https://myaccount.google.com/permissions); Google then asks you again the next time you choose Continue with Google.
Stella 56's use and transfer to any other app of information received from Google APIs will adhere to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
| Scope | What Google shares | What Stella 56 uses it for |
| --- | --- | --- |
| openid | A stable ID for your Google account | Recognising you when you sign in again |
| email (https://www.googleapis.com/auth/userinfo.email) | Your Google email address, and whether Google has verified it | Your account's email address; signing in; messages about your account |
| profile (https://www.googleapis.com/auth/userinfo.profile) | Your name and profile picture | Your name in Settings. Clerk stores the picture; the app shows your initials instead |
Stella 56 requests no sensitive or restricted Google scopes and calls no Google API after sign-in. Clerk runs the OAuth exchange with Stella 56 Diamonds' own Google OAuth client and holds the token Google issues as part of the sign-in; Stella 56 never uses that token to read anything from Google.
Google details reach PostHog only as the name and email address the app attaches to your analytics profile while you are signed in. Signing out resets the analytics profile on that device.
Deleting an account, in the app or on request, removes every record under the business's account ID in Convex, then the Clerk user (with it the Google details and the link to the Google account), then the person's profile, events and recordings in PostHog.
## How we use information
- To run your account and your books: keeping stock, trades, balances and profit, and making your invoices, memos and statements.
- To sign you in and keep your account secure, for example by asking for a code by email when you sign in on a new device.
- To send the notifications you turn on, such as a payment falling due or a buyer's question.
- To show your stock to the buyers you choose, through Field mode and share links.
- To understand which parts of the app are used, and to find and fix what breaks.
- To answer you when you write to us, and to tell you about important changes to Stella 56.
We don't sell your information, use it for advertising, or build profiles of you for anyone else.
| Purpose | Legal basis (GDPR and similar laws) |
| --- | --- |
| Running your account, your records and your documents | Performing our contract with you |
| Sign-in security, abuse limits on share links | Our legitimate interest in keeping accounts and the service safe |
| Usage analytics and error reports | Our legitimate interest in improving the service; analytics cookies only with your consent, given in the cookie banner |
| Notifications on your devices | Your consent, given in the browser; withdrawn by removing the device |
| Keeping records the law requires, answering lawful requests | Legal obligation |
## Who else handles your information
A few service providers run parts of Stella 56 for us. Each handles your information only to provide its service to us:
- **Clerk**: sign-in, account security and the emails that carry sign-in codes.
- **Convex**: the database and server that keep your business records.
- **Cloudflare**: hosting, delivering the app and protecting it from abuse.
- **PostHog**: usage analytics, error reports and, if you allow analytics, session recordings.
- **Your browser's push service** (Google, Apple, Mozilla or Microsoft): delivers the notifications you turn on. A notification can include a client's name and an amount.
Otherwise, information leaves your account only when you send it: a share link shows the stones you chose to whoever you send it to, a document or statement goes wherever you share it, and a reminder opens your own WhatsApp, Messages or email. We may also disclose information when the law requires it, or to a company that takes over Stella 56, which would be bound by this policy.
| Provider | What it does | What it handles |
| --- | --- | --- |
| Clerk (clerk.com) | Sign-in, sessions, email codes, bot protection on sign-up | Account and Google account details, sign-in devices and IP addresses |
| Convex (convex.dev) | Database and server functions | Business records, contacts, documents, settings, share links and buyers' details, notification devices |
| Cloudflare (cloudflare.com) | Hosting on Cloudflare Workers, delivery, request logs | Every request, including IP address and browser, kept in logs for up to 7 days |
| PostHog (posthog.com), United States | Product analytics, error reports and session recordings | Usage events and device details from every page, including share links; when signed in, account ID, name, email and username; if you allow analytics, recordings of the pages you used, with typed and on-screen text hidden |
| Push services of Google, Apple, Mozilla and Microsoft | Delivering notifications to your devices | The notification's text, which can include a client's name and amounts |
Our providers may process data in the United States and other countries where they operate. Stella 56 sends no email, SMS or WhatsApp messages itself: reminders open the trader's own apps with the text filled in. Invoices, memos and statements are made into PDFs in your browser, not on our servers.
## Buyers and share links
When you send a buyer a share link, they see only what you chose to show: each stone's code, grade, size, shape, colour and certificate, a certified stone's weight, and, if you turn them on, a parcel's weight, the asking price and the location. They also see your business's name and phone. They never see your costs, margins, suppliers, notes or what any client owes.
If the link asks, a buyer gives a name, a phone number and, optionally, a business before seeing any stones, and can send you questions about them. You decide what to collect and what to do with it; we keep it for you.
To stop abuse we keep a one-way scrambled (hashed) form of a buyer's IP address, never the address itself, and set a cookie that recognises a returning buyer on that link. A link stops working when it expires or when you revoke it.
- A link's address holds a random 160-bit token; an expired, revoked or replaced link answers like a page that never existed. Links expire after 1 day, 7 days (the default), 30 days, or never, as the trader chooses.
- The IP address is hashed with SHA-256 and a key only our server holds. It is used for limits per sender (10 new visitors and 5 questions an hour) and is not kept in readable form.
- The `s56v` cookie is HttpOnly, limited to that link's address, and lasts one year.
- Field mode is the trader's own signed-in phone shown to a buyer: our server removes cost, supplier, notes and location before the phone receives anything, and nothing is collected from the buyer.
## If you are a trader's client, supplier or buyer
The trader you deal with decides what details of yours to keep in Stella 56, and is responsible for them; we store and process them on the trader's instructions. To see, correct or remove your details, ask that trader. You can also write to us, and we will pass your request on and help where we can.
## Storage and security
- Each business's records are private to it: every request to our server checks that what it reads or changes belongs to the business that is signed in.
- Information travels encrypted (HTTPS), and our providers encrypt it where they store it.
- Sign-in is protected by Clerk: verified email addresses, codes by email for new devices, and bot protection on sign-up.
- No system is perfectly secure. If a breach affects your information, we will tell you without undue delay.
One sign-in is one business. Every row in the database carries the business's account ID, and every ID the server is given or follows from another row is checked against it.
On your device, the app's offline cache holds only the app's own files, its offline page and its logo, never your records. Display choices, recently opened pages (names and links) and unsent drafts sit in the browser's local storage; drafts are cleared when you sign out.
## How long we keep information
- **Your account and business records:** while your account is open. When you delete your account in Settings → Account → Delete account, we keep them 7 days, so that signing in and choosing Keep can cancel it, and then delete them. If you can't sign in, ask at [privacy@stella56diamonds.com](mailto:privacy@stella56diamonds.com) and we delete them within 30 days.
- **Buyers' details:** a buyer who never gave a name, 30 days after their last visit; any buyer's visit record, one year; questions flagged as spam, 30 days. Other questions stay in your account until it is deleted.
- **Usage analytics:** deleted from PostHog when your account is deleted. Session recordings: 30 days.
- **Request logs:** up to 7 days, at Cloudflare.
- **Notification devices:** until you remove the device in Settings, or its browser stops accepting notifications.
Buyer records are cleared by a daily job. Records kept to limit abuse on share links are cleared after 2 days.
From the moment you ask for your account to be deleted, your share links stop working and no notification is sent. Once it is deleted, we keep only a record that it was: the account ID, the dates, and whether the sign-in and the analytics were deleted.
## Your choices and rights
- **See and export your data.** Settings → Your data exports your stock, trades, payments, expenses, clients and suppliers as CSV files, and any invoice, memo or statement can be saved as a PDF.
- **Correct it.** Edit your records and business profile in the app, or write to us.
- **Delete it.** Settings → Account → Delete account deletes your account and everything in it 7 days after you ask; until then, signing in and choosing Keep cancels it. If you can't sign in, write to [privacy@stella56diamonds.com](mailto:privacy@stella56diamonds.com) from your account's email address. In the app you can also archive contacts, revoke share links and remove notification devices.
- **Change your cookie choice.** Cookie settings, at the foot of this page and of the home page, or Settings → Your data → Cookies once you are signed in, asks again.
- **Remove Stella 56's access to your Google account.** At [myaccount.google.com/permissions](https://myaccount.google.com/permissions).
- **Your legal rights.** Depending on where you live (for example under the GDPR in Europe or the CCPA in California), you may have the right to access, correct, delete, restrict, object to or move your personal information, and to complain to a data protection authority. Write to us and we will answer within 30 days.
We don't sell personal information or share it for cross-context behavioural advertising.
## Cookies and storage on your device
Some cookies and browser storage are needed for Stella 56 to work: Clerk's cookies keep you signed in, a share-link cookie recognises a returning buyer, and the app remembers your display choices, unsent drafts and your cookie choice on your device.
Analytics cookies are your choice. The first time you open Stella 56 on a device, a banner asks. **Allow analytics** lets PostHog keep a cookie that tells your visits apart, and record your sessions with what you type and all text on screen hidden. **Essential only**, or not answering, keeps PostHog's information in the page's memory: it still counts the visit, and links it to your account while you are signed in, but stores nothing on your device and records nothing. Change your choice at any time with **Cookie settings** at the foot of this page, or in Settings → Your data → Cookies. We use no advertising cookies.
| Name | Set by | Purpose | Lasts |
| --- | --- | --- | --- |
| `__session` | Clerk | Proves you are signed in | About a minute, renewed while you use the app |
| `__client_uat` | Clerk | When you last signed in or out, so open tabs agree | Long-lived; rewritten at each sign-in and sign-out |
| `__client` (on clerk.trader.stella56diamonds.com) | Clerk | Your sign-in on this browser | Until you sign out or the session ends |
| `ph__posthog` (cookie, local and session storage), `ph__window_id` and `ph__primary_window_exists` (session storage) | PostHog, only after you allow analytics | Tells your visits and browser tabs apart for analytics | One year (session storage: until the tab closes), or until you choose Essential only |
| `s56v` | Stella 56, on share links | Recognises a returning buyer on that link | One year |
| `s56.cookies` (local storage) | Stella 56 | Your answer to the cookie banner | Until cleared |
| `s56.*` (local storage) | Stella 56 | Display choices, Field mode's tray, recent pages, unsent drafts | Until cleared; drafts until sign-out |
Cloudflare may set a security cookie (such as `__cf_bm`) that tells people from bots.
## Children
Stella 56 is a tool for businesses and isn't meant for anyone under 18. We don't knowingly collect information from children.
## Changes to this policy
When we change this policy we update the date at the top. If a change matters to how your information is used, we tell you in the app or by email before it takes effect.
## Contact
Write to [privacy@stella56diamonds.com](mailto:privacy@stella56diamonds.com) about this policy or your information. Stella 56 is operated by Stella 56 Diamonds at [trader.stella56diamonds.com](https://trader.stella56diamonds.com/).