01Overview
This policy explains what information OnHand collects, how we use it, and the choices you have — for the OnHand order-schedule dashboard (app.onhand.store and every store's own {yourstore}.onhand.store address), this website (onhand.store), and our sales and support communications with you.
OnHand is a business tool, built to be used by staff on behalf of a store — not a consumer product. Most of what it stores is your store's own operational data (suppliers, products, stock counts, orders), which we treat as Customer Data belonging to you, not to us. Section 7 covers that distinction.
02Who we are
SNB Developments Trust, trading as OnHand ("OnHand", "we", "us", "our"), of 3 Romney St, Riverside TAS 7250, Australia, is the operator of OnHand and the entity responsible for the information described in this policy.
Questions about this policy, or requests relating to your data, can be sent to hello@onhand.store.
03Information we collect
Account & store information
When you sign up, we collect your business name, your name, email address, and mobile number, and — if a paid plan — billing details processed by Stripe (see Section 5). We also generate a unique store address (e.g. yourstore.onhand.store) and, if you set one, a kiosk password for shared-device access.
Team member information
Anyone who counts stock or manages orders on your behalf may be added as a team member — first name, and, for managers who approve orders, an optional email, mobile number, and a PIN (stored as an irreversible cryptographic hash, never in plain text).
Customer Data
The operational data you and your team enter to run the dashboard: supplier names and contact details, product lines, stock-on-hand counts, order quantities, notes, and order history. This is the core of what OnHand exists to store, and it's covered separately in Section 7.
Billing information
Payment card details are collected and processed directly by our payment processor, Stripe — we never see or store your full card number. We retain your plan tier, subscription status, and Stripe's own customer/subscription identifiers so the dashboard reflects your plan correctly.
Communications sent through OnHand
Order emails, order text messages, and approval-request notifications the platform sends on your behalf include the recipient details you provide (a supplier's email or phone, a manager's email or phone) and the order content itself.
Cookies & device information
We use a small number of functional cookies — see Section 9 — and standard web server logs (IP address, browser type, pages visited) for security and reliability.
If you're contacted by our sales team
If we reach out about OnHand — by phone, email, or text — we collect and retain your business name, contact details, and (for calls placed by our team) a recording of the call, disclosed to you at the start of the call. You can ask us to stop contacting you and to delete this information at any time; see Section 8.
04How we use information
- To provide, operate, and maintain the dashboard, including sending the order emails/texts and alerts you configure.
- To process payments and manage your subscription.
- To provide customer support and respond to you.
- To detect, investigate, and prevent fraud, abuse, and security incidents (this is what the in-app audit log exists for).
- To improve OnHand — understanding how features are used, fixing bugs, and building what stores actually ask for.
- To contact prospective and existing customers about OnHand, where we have a lawful basis to do so.
We do not sell your personal information or your Customer Data, to anyone, ever.
05Who we share it with
We share information with the service providers that make OnHand work, each only for the purpose of providing their part of the service:
| Provider | What for |
|---|---|
| Stripe | Payment processing and subscription billing. |
| Resend | Sending transactional email (order emails, approval requests, sign-in links). |
| Vonage | Sending SMS alerts and order texts, where you've turned these on. |
| Twilio | Voice calling for our own sales outreach — not used for anything in the customer-facing dashboard. |
| HubSpot | Our sales CRM, for prospective-customer leads only — not connected to dashboard Customer Data. |
| Vercel & Neon | Application hosting and database infrastructure. |
| Google Analytics & Meta Pixel | Aggregate visitor analytics and ad-conversion measurement on this marketing website only — never on the dashboard itself. |
We may also disclose information where required by law, to protect the rights and safety of OnHand or others, or in connection with a merger, acquisition, or sale of assets (with notice to you).
06Data retention
We keep your account and Customer Data for as long as your account is active, and for a reasonable period afterward in case you'd like to reactivate or need a copy — after which it's deleted on request or in the ordinary course of account cleanup. Audit log entries (a record of who did what, for security and accountability) are retained longer, since that's their purpose.
The free live demo is the one exception: a demo store and everything in it is automatically and permanently deleted within 24 hours of creation, whether or not you asked us to.
07Security
Passwords aren't a thing in OnHand — sign-in is a one-time emailed link, and manager PINs and kiosk passwords are stored as salted cryptographic hashes, never in plain text. Data in transit is encrypted (HTTPS). Access to production systems is limited to the people who need it to operate the service.
No method of transmission or storage is 100% secure, and we can't guarantee absolute security — but we take it seriously and will tell you if something goes wrong that affects you.
08Your rights & choices
Wherever you're based, you can ask us to access, correct, or delete the personal information we hold about you by emailing hello@onhand.store. As an Australian business, we handle these requests under the Australian Privacy Principles; if you're in the EU, UK, or California, we'll also honor the specific rights those frameworks give you (such as data portability or opting out of sale — noting again that we don't sell personal information).
You can update your account details from within the dashboard at any time, and can close your account by contacting us.
09Cookies
OnHand uses a small, fixed set of cookies — no third-party advertising cookies on the dashboard itself:
| Cookie | Purpose |
|---|---|
| onhand_session | Keeps you signed in. HTTP-only, so it can't be read by page scripts. |
| onhand_demo | Identifies your own isolated demo sandbox, if you're trying the live demo. |
| onhand_welcome_dismissed | Remembers that you skipped the first-time setup guide, so we don't ask again. |
This marketing website additionally uses Google Analytics and the Meta Pixel to understand traffic and ad performance — you can opt out via your browser's cookie settings or ad-blocking tools.
10Children
OnHand is a business tool for retail and hospitality operators and isn't directed at, or knowingly used to collect information from, children. If you believe a child has provided us information, contact us and we'll remove it.
11International data transfers
OnHand is operated from Australia, but our infrastructure providers (Vercel, Neon, Stripe, and others listed in Section 5) may process data in the United States or elsewhere. By using OnHand, you understand your information may be transferred to and processed in countries other than your own, under this policy.
12Changes to this policy
We'll update the date at the top of this page whenever this policy changes, and post the update here. If a change is significant, we'll also let you know directly — by email, or in the dashboard.
13Contact us
SNB Developments Trust, trading as OnHand
3 Romney St, Riverside TAS 7250, Australia
hello@onhand.store