Trust Center

Data Ownership

Your inventory data belongs to you. You can export everything at any time from within the app, in a machine-readable format. If you close your account, we delete your data within 30 days.

Payment Security

All payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor. Instica never stores raw card numbers. Stripe's security posture is available at stripe.com/docs/security.

Marketplace Credentials

eBay, Shopify, and Discogs connections use OAuth 2.0. Instica does not store your marketplace passwords. Tokens are encrypted at rest and in transit.

Infrastructure

Instica runs on DigitalOcean managed Kubernetes in the US region. Data is encrypted at rest and in transit using TLS 1.2+. We use automated backups with point-in-time recovery.

Incident Response

To report a security vulnerability or a suspected incident, email support@instica.com with subject line "Security". We will acknowledge within one business day.

Last updated: May 2026