Privacy Policy
Last updated: [DATE]
Template. This service is run by [BUSINESS NAME], [BUSINESS ADDRESS]. Contact: [email protected]. This page is a plain-language template, not legal advice.
Short version
- We read your order and shipping emails so we can show your orders. That is the only reason.
- Mail logins are encrypted and never shown again, not even to you.
- Raw email bodies are kept for 30 days, encrypted, then deleted.
- Stripe handles your card. We never see or store your card number.
- We do not sell your data.
What we collect
- Discord account: your Discord id, username and avatar, from Discord sign-in.
- Inbox logins: the email address and app password (or sign-in token) for each inbox you connect.
- Emails: we look for emails from supported stores and carriers. From those we save order details: store, order number, items, prices, ship-to address, tracking numbers and status.
- What you enter: manual orders, expenses, inventory status, sale prices, settings and themes.
- Billing: your subscription status and plan, from Stripe. Not your card number.
- Logs: IP address and browser type for sign-in sessions and security.
How we protect it
- Inbox passwords and tokens are encrypted before they are saved. No screen in the app shows them.
- Raw email bodies are encrypted at rest and deleted after 30 days. The order details we pulled out of them stay with your account.
- Webhook URLs and API keys you give us are encrypted and only shown masked (first 4 characters).
- All traffic uses HTTPS.
Who we share it with
- Stripe for payments and tax.
- Discord for sign-in, and to send alerts to webhooks you set up.
- Carriers and tracking services (and 17TRACK if you add your own key): tracking numbers only, to get delivery status.
- Market price providers: product names only, to match items to prices. Never your personal details.
- Partners on your team see your team's data, as you allow.
If you press "Send to dev" on an email we could not read, our server removes personal details from it before our team sees it.
How long we keep it
- Raw email bodies: 30 days.
- Orders, shipments, inventory and settings: while your account exists. If you cancel, scans stop but your data is kept, so you can come back. Ask us and we delete it.
- When you remove an inbox, its saved login is deleted at once. You choose whether its orders are deleted too.
Your choices
- Export your data as CSV from the app at any time.
- Ask for a copy, a correction or full deletion: email [email protected].
- Revoke an app password from your email provider at any time. Scans of that inbox stop.
Cookies
We use a sign-in cookie to keep you signed in, and a referral cookie for 30 days if you arrive from an affiliate link. No advertising cookies.
Changes
If we change how we use your data, we update this page and tell you in the app or on Discord.