How it keeps your data private.

Here is how your data is protected, what the site can and cannot see, and the things you look after yourself.

The short version

Everything you enter about your devices, customers and sales is scrambled in your own browser before it leaves your phone or computer. The server stores the scrambled version. The key to unscramble it stays with you and your team. This is often called zero-knowledge encryption.

What the site can see

Your business name, Reseller ID and the email addresses you gave
Usernames, user types and whether two-factor is on
Your account status and sign-in times
How many encrypted records exist, and about how large they are

What the site cannot see

Your inventory, serial numbers, costs and prices
Your customers, their addresses and their notes
Your sales, receipts, shipping details, refunds and profit
Your settings, your password or your recovery key

In plain words. myBoxStock, its owner and supporting staff cannot see your customer data (inventory, customers, sales, receipts and prices) and are not responsible or liable for it. You own your data and are 100 percent responsible for it, for your recovery key, and for your own backup files and exports.

What you look after

Because nobody else can read your data, nobody else can unlock it for you either. That is the trade, and we would rather say so now than surprise you later.

Your recovery key

You get one when you set up, and the app will not let you carry on until you say you have saved it. Keep it in two safe places, away from the computer you work on. If every password is forgotten and the key is lost, the data cannot be recovered by anyone.

Your backup files

Back up now makes a file you keep. Use Test a backup file to prove yours works before you ever need it.

Your team

Give people the user type they need: Administrator, Standard or View. Reset a person’s access, switch them off, or delete them on the Team page.

Other protections

Passwords

Passwords are stored only as one-way scrambles. Repeated wrong guesses are slowed down and blocked.

Two-factor sign-in

Each person can add an authenticator app for an extra step at sign-in.

Activity log

The Activity page shows sign-ins and lets you sign devices out.

Separate accounts

Each business is walled off from every other. Nobody sees anyone else’s data.

Labels and receipts stay in your browser

Shipping labels and receipts are built in your browser from data that is already decrypted there. Nothing about the address is sent anywhere to make them.

Closing and erasing

You can erase a single customer for a privacy request, and export everything to spreadsheets first.

Private by design.

Encrypted in your browser. You hold the key.

Sign-ups are currently closed

myBoxStock is in active development. Sign-ups are currently closed.