Security

Last updated September 4, 2026

You are being asked to hand a stranger your sales figures. That is a reasonable thing to be careful about, so this page says plainly what SlottedAI takes, where it goes, and who can see it. If something here is not clear enough, ask and we will answer it directly.

What we collect

SlottedAI works on product level sales data. That means product names, units sold, price, cost and category, along with the shelf sections you set up and the plans you save.

You can give us that data as a file, as pasted text, as a photograph of a printed report, or through a direct connection to Square, Clover, Lightspeed or Shopify.

What we do not collect

If your export happens to contain a column we do not need, we do not use it and you are free to strip it before you send it.

Who can see your data inside your account

Every store is a separate account with its own login. One customer cannot see another customer's information.

Inside your account, you decide who sees what. Roles are Owner, Partner, Manager and Stocker, and store access is set separately from role, so a person can be given one store, several, or all of them.

Cost and margin figures are blocked for Stockers at the account level, in the server, not merely hidden in the screen. A Stocker cannot reach that data by any route.

Only the Owner can change billing or add and remove people.

How your login is protected

How AI is used, and where it is not

This matters, so it is worth being exact. AI is used for three things: reading messy or inconsistent files, reading photographs of printed and handwritten reports, and answering support questions.

The profit and ranking numbers are ordinary arithmetic on your own figures. They are calculated, not generated by a model. If a recommendation says a product earns more per unit of space, that came from your sales and your costs, and you can check it.

Our AI provider is Anthropic, which is disclosed in our Privacy Policy.

Who else touches your data

SlottedAI runs on a small number of established services, and no others:

We do not sell your data, we do not share it with suppliers or brands, and we do not pool it into an industry benchmark. Your numbers are used to serve your account and nothing else.

Keeping and deleting your data

Every saved plan is preserved as history, so you can look back at what a category used to be and restore it. Clearing data archives it first rather than destroying it, which protects you from an accidental wipe.

If you want your data deleted outright, email info@slottedai.com and say so. We will delete it and confirm when it is done.

Connecting your POS

A direct connection is authorized by you, through the POS provider's own login screen. We never ask for your POS username or password, and you can revoke the connection from inside your POS account at any time without contacting us.

The access we request is read only: items, inventory, orders and basic merchant profile. SlottedAI cannot change prices, edit your catalog, issue refunds or move money.

Telling us about a problem

If you believe you have found a security problem, email info@slottedai.com with the subject line "Security". Describe what you found and how to reproduce it. We will acknowledge it and tell you what we are doing about it. We will not pursue anyone who reports a genuine issue in good faith.

Certifications

SlottedAI does not currently hold a SOC 2 or ISO 27001 certification. We would rather say so than imply otherwise. If your business requires one before you can work with a vendor, tell us and we will give you a straight answer about timing instead of a vague one.

Questions about any of this, including a security questionnaire from your own IT provider, go to info@slottedai.com or (925) 236-9771. A person answers.