We're putting the finishing touches on Sovereign Shelf. Browse around — full ordering launches soon.
Own Your Shelf

Privacy Policy

Privacy Policy

Last updated: March 2026

Sovereign Shelf Inc. ("Sovereign Shelf," "we," "us") operates the sovereignshelf.com storefront and the sovereignshelf.net platform. This policy describes how we collect, use, store, and protect your information.

1. Information We Collect

Account information: Name, email address, billing address, phone number, and password when you create an account or place an order.

Payment information: Credit card and billing details are collected by our payment processor (Stripe). We do not store full card numbers on our servers.

Business data: Product names, prices, SKUs, and other inventory data you enter into the platform. For Sentinel and Guardian tiers, this data is synced to our cloud infrastructure. For Vault tier, this data remains entirely on your premises.

Tag telemetry: Battery level, signal strength, firmware version, and push status for ESL tags connected to your account.

Usage data: Server logs including IP addresses, browser type, pages visited, and timestamps. Used for security monitoring and service reliability.

2. How We Use Your Information

  • Operate and maintain your ESL platform account and subscriptions
  • Process orders and deliver hardware
  • Provide technical support and respond to inquiries
  • Send transactional emails (order confirmations, password resets, service notifications)
  • Monitor platform security and prevent unauthorized access
  • Improve our products and services

We do not use your information for advertising or profiling. We do not send marketing emails unless you explicitly opt in.

3. Data Residency & Storage

Sentinel and Guardian tiers: Your business data is stored on Canadian-hosted infrastructure (Vultr, Toronto region). Account data and order history are stored in our Canadian-hosted databases.

Guardian tier: Data is additionally cached on your on-premises Commander hardware and synced to the cloud via encrypted WireGuard tunnel.

Vault tier: Your business data never leaves your premises. Only your account and order information (for hardware purchases and optional support contracts) is stored in our systems.

4. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with:

  • Payment processor (Stripe) — to process payments
  • Shipping carriers (Canada Post, Purolator) — to deliver hardware orders
  • Law enforcement — only when required by valid Canadian legal process

5. Data Retention

Account data is retained for the duration of your active account plus 90 days after cancellation. Order records are retained for 7 years as required by Canadian tax law. Server logs are retained for 30 days. You may request deletion of your account and associated data at any time (see Section 7).

6. Cookies

This website uses functional cookies required for account login, shopping cart, and session management. We do not use tracking cookies, advertising cookies, or third-party analytics.

7. Your Rights

You have the right to:

  • Access your personal data — request a copy of all data we hold about you
  • Correct inaccurate information in your account
  • Delete your account and associated personal data
  • Export your business data (product lists, tag assignments, templates) in standard formats
  • Withdraw consent for optional communications at any time

To exercise any of these rights, contact us at sovereignshelf.com/contact. We will respond within 30 days.

8. Security

We protect your data with encryption in transit (TLS), hashed passwords (Argon2id), OAuth 2.0 authentication, and role-based access controls. Cloud infrastructure is monitored for unauthorized access. Hardware shipped to customers is pre-configured with unique cryptographic credentials.

9. Canadian Privacy Law

Sovereign Shelf complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. Our Privacy Officer can be reached at sovereignshelf.com/contact.

10. Children

Our services are designed for business use and are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to active account holders. The "Last updated" date at the top reflects the most recent revision.

12. Contact

For privacy inquiries or to exercise your data rights:
Sovereign Shelf Inc.
Email: sovereignshelf.com/contact
Alberta, Canada