Privacy Policy
Effective date: 16 October 2026. This policy covers the Sorrelmark application for the Clover App Market and this website, both operated by Code Possum ("we", "us").
The short version
- Sorrelmark reads your store's own Clover data, read-only, and keeps a history of it so it can show it back to you.
- We do not collect customer names, contact details or payment card data — we don't request customer records, and card data is never available to us.
- We do not sell your data, and we do not use it for advertising.
- Uninstall the app, or ask us, and the data we hold for your store is deleted.
What we access from your Clover account
When a store installs Sorrelmark and authorises it, the app is granted read-only access to:
- Inventory — items, categories, modifiers and stock levels.
- Orders — orders and their line items.
- Payments — payment records attached to those orders.
- Employees — the employee identifiers that appear on captured records.
- Merchant profile — the store's own account details (for example its name and timezone).
Sorrelmark does not request write access to any of these, and does not request access to customer records.
What we store
To show an item's history, the app keeps its own copy of the following for each store:
- Item catalogue records — item name, alternate name, SKU, barcode/UPC, category, tags, modifiers, price, cost, price type, unit and tax names, stock quantity and stock alert threshold, and the timestamps Clover supplies for those records.
- A per-item event ledger — one entry per captured sale, refund, void, stock receipt or stock adjustment, holding: the event type, its time, the order or receipt reference it came from, the item name and unit price as recorded at the time (so history isn't rewritten when you later edit an item), quantity, discount and tax amounts, the employee identifier and name where the source record carries one, and the device identifier and name where present.
- Access credentials — the per-store authorisation token needed to read that store's Clover data, stored encrypted and scoped to that one store.
We hold no other personal data. This website sets no tracking cookies and runs no analytics.
Why we hold it
Solely to provide the service to the store that installed it: displaying an item's history, its stock movements, and the store's own sales reporting. We do not use it for any other purpose, we do not profile individuals, and we do not sell or rent it to anyone.
Who else touches it
- Cloudflare — our hosting and database provider, which stores the data on our behalf.
- Clover / Fiserv — the platform we read from, and the system that bills your subscription.
Beyond those processors, we disclose data only if the law compels us to.
Employee information
Captured records can include an employee identifier and name, because that is how a stock adjustment or a sale is attributed in the underlying record. We use it only to render the history. A store owner can ask us to remove employee names from their records, and we will.
How long we keep it, and how it's deleted
We keep a store's data while Sorrelmark is installed for that store. When the app is uninstalled, or when a store asks us to delete its data, we delete the records we hold for that store — including its stored access token, which stops working the moment access is revoked. Requests go to support@sorrelmark.com; we confirm when it's done.
Security
Data is transmitted over TLS and held in an access-controlled database. Each store's token is scoped to that store alone and is encrypted at rest; one store's credentials cannot read another store's data.
Changes
If this policy changes materially we will update the effective date above and note the change on this page.
Contact
Code Possum — support@sorrelmark.com. Postal address: 400 Limerick Ln, Pensacola, FL 32514, United States.
See also our Terms of Service and Support.