Information we collect
Nautilus collects information you provide directly when creating an account, configuring your warehouse, or contacting support. This includes your name, email address, company name, warehouse address, and billing information. We also collect operational data generated through your use of the platform — scan logs, inventory movements, floor plan configurations, and analytics queries. Device information such as device type, operating system, and app version is collected automatically to ensure compatibility and performance.
How we use your information
We use collected information to operate and improve the Nautilus platform, including AI features such as demand forecasts, anomaly explanations, and plain-English search. To produce those results, the relevant records are sent to an AI provider under its API terms; we don't use your data to train AI models. We may use your contact information to send product updates, security notices, and support communications.
Data storage and security
Your data is stored in a managed Postgres database hosted by Supabase and served over HTTPS. Data is encrypted at rest by our database provider, and each organization's data is isolated at the database level with row-level security. Inside your organization, roles and permissions control access, and accounts can use two-factor authentication. See our Security page for more detail.
Data sharing and third parties
We do not sell your personal information or warehouse operational data to third parties. We share data only with service providers who assist in operating our platform — cloud infrastructure providers, AI providers that generate results for AI features, payment processors, and customer support tools. We may disclose information when required by law, court order, or governmental regulation.
Your rights and choices
You may access, correct, or delete your personal information at any time through your account settings or by contacting support. You can export your warehouse data as CSV at any time. If you close your account, we will delete your data within 30 days, except where retention is required by law. You may opt out of non-essential communications at any time. California residents have additional rights under the CCPA, and EU residents have rights under GDPR — contact privacy@nautilusinventory.com for details.
Cookies and tracking
The Nautilus web application uses essential cookies for authentication and session management. We use analytics cookies to understand how users interact with the platform, which helps us prioritize feature development. We do not use advertising cookies or share browsing data with ad networks. You can disable non-essential cookies through your browser settings without affecting core functionality.
Data retention
Active account data is retained for the duration of your subscription. Scan logs and inventory movement history are retained for 7 years to support audit and compliance requirements. Analytics data is retained for 3 years. After account closure, all data is permanently deleted within 30 days unless a longer retention period is required by applicable law or regulation.
Changes to this policy
We may update this privacy policy to reflect changes in our practices or applicable law. We will notify you of material changes by email and through in-app notifications at least 30 days before they take effect. Your continued use of Nautilus after changes become effective constitutes acceptance of the updated policy.