How Vinylogix protects your data
Your stock list, your prices and your clients are the heart of your business. This page covers how we protect them, how payments stay out of our hands and what we have not done yet.
- HTTPS on every page
- Card details never reach us
- Shops export their data any time
What we do
Encrypted in transit
Everything between your browser and Vinylogix goes over HTTPS, including prices, orders and client details.
Roles decide who sees what
You are the Master. Workers see and do in the app only what you allow for purchase and selling prices, suppliers, orders, locations and financial figures. Purchase prices are protected at the database level. Clients sign in as Viewers to browse and order.
A trail of what happened
Every stock change is recorded with who made it and why. For support and security, Vinylogix also logs sign-ins, pages visited and orders placed.
Your data leaves with you
Shops export their stock, orders and clients as CSV whenever they like, at no cost. For any other data, email contact@vinylogix.com.
Where it runs
Vinylogix is hosted on Google Cloud, with Firebase for the database and sign-in. Google encrypts the stored data by default. Google’s certifications cover Google’s infrastructure. They do not extend to the Vinylogix application that runs on it.
We never touch your card data
When a buyer pays, the card details are entered on Stripe’s or PayPal’s own payment pages. The card number, security code and expiry date never pass through Vinylogix.
Stripe and PayPal handle
- Card entry on their own payment pages
- Storing and protecting card details
- Extra checks such as 3-D Secure when the bank asks for them
- Payouts to your bank account
Vinylogix keeps
- Whether an order is paid, pending or refunded
- The payment reference from Stripe or PayPal, to match payments to orders
- Invoice amounts and order lines
- Never card numbers, security codes or expiry dates
Your rights in the EU
We handle data the way the GDPR expects and support the rights it gives you. We don’t claim any GDPR certification.
Read our GDPR pageTake your data with you
Shops download their stock, orders and clients as CSV from inside Vinylogix, at any time. For any other data, including a collector account, email contact@vinylogix.com.
Have it deleted
There’s no delete button in the app yet. Email contact@vinylogix.com and ask us to delete your account and data.
Keep it correct
Change your business and profile details yourself in Settings, whenever they change.
Ask what we hold
Want to know what we store about you or your shop? Email contact@vinylogix.com.
What we have not done yet
We list these openly. As of today:
- We don’t hold SOC 2 or ISO 27001 certification.
- We don’t hold a PCI DSS certification of our own. Stripe and PayPal, who are certified, handle all card processing.
- Two-factor sign-in isn’t available yet.
- You delete your account by email. The app has no button for it yet.
When any of this changes, this page is updated first. If you need a certification, talk to us before you sign up.
Report a security issue
Tell us privately, with the steps to reproduce it. We read every report, and ask you to give us time to fix it before going public.
contact@vinylogix.comAsk us about your data
We answer specific questions about storage, access and payments before you put your stock online.