Privacy Policy

• We read only the mailboxes you connect, and only to find order, shipping and sale emails.
• We store the order details we extract, not a copy of your inbox.
• Your mailbox credentials are encrypted at rest and never shown back to you or anyone.
• We don’t sell your data, don’t show ads, and don’t use your data to train AI models.
• You can delete your account and all of your data yourself, at any time.

Account information. Your email address and a hashed (not readable) password, plus the invite code you used and sign-up date.

Mailbox connections. For each mailbox you add: its address, server details and the app password you supply, which we store encrypted.

Information extracted from your email. When you run a scan, the Service reads messages from the retailers, carriers and marketplaces it supports and saves details such as: retailer, product names and quantities, prices and totals, order and tracking numbers, order status and dates, the shipping address and destination city/ZIP shown in the message, the card brand and last four digits where the email shows them (never full card numbers), and sale details from marketplace emails. Messages that aren’t recognised as orders, shipping or sales are discarded, and we don’t keep a copy of your full emails.

What you add. Inventory, sales, expenses, notes, costs, place names and settings you enter.

Billing. If you subscribe, Stripe collects your payment details. We receive only your plan, subscription status, and the card brand and last four digits.

Technical data. Standard server logs (IP address, browser type, pages requested, errors). We use one essential cookie to keep you signed in, and no advertising or cross-site tracking cookies.

Discord (optional). If you connect Discord, we receive your Discord ID, username and avatar to show on share cards and to assign a customer role.

• To run the Service for you: scan, organise and display your orders, shipments, inventory, sales and profit.
• To keep the Service secure, prevent abuse, fix bugs and support you.
• To bill you, once paid plans begin.
• To contact you about your account or important changes to the Service.

We do not use your emails or order data for advertising, profiling, or training machine-learning models, and we do not sell or rent it.

Only the providers needed to run the Service, and only what each needs:

• Hosting and infrastructure providers that store the data and serve the app for us.
• Your email provider, which we connect to in order to read your mail.
• Resend, which sends our account and service emails to you.
• Stripe, for payments.
• TCGplayer: product names are sent to look up market prices.
• Geocoding and map providers (for example a ZIP-code lookup service and OpenStreetMap tiles): ZIP codes or city names, and your browser’s request for map tiles.
• Carrier tracking services, if live tracking is switched on: tracking numbers.
• Discord, if you connect it.

We may also disclose information if required by law or to protect people or the Service, or as part of a merger or sale of the business (we’d tell you first and this policy would continue to apply).

Each account’s data is stored separately and can only be reached when signed in to that account. Passwords are hashed, mailbox credentials are encrypted, connections use HTTPS, and sign-in attempts are rate limited. No system is perfectly secure. If we learn of a breach affecting you we will tell you promptly. Please use a limited app password for your mailbox, not your main one.

We keep your data while your account exists. Settings → Delete my account removes your login and everything stored for you immediately; backups made before that are overwritten on their normal schedule. You can also delete inboxes, orders, sales and other records individually, or wipe all data without deleting the account. Revoking the app password at your email provider cuts our access at once.

Depending on where you live (for example the EU/UK under GDPR, or California under the CCPA/CPRA) you may have the right to access, correct, export, delete or restrict the use of your personal data, and to object to some processing. You can export your orders as CSV and delete your account from inside the app; for anything else email support@orderpilot.live and we’ll respond within a reasonable time (and within 30 days). We don’t sell or share personal information for advertising.

Where GDPR applies, we process your data to perform our contract with you, for our legitimate interests in running and securing the Service, and with your consent where you give it (such as connecting a mailbox). You can withdraw consent by disconnecting the mailbox or deleting your account.

Our servers may be located in the United States or another country. If you use the Service from elsewhere, your data will be transferred to and processed there.

The Service is for adults (18+). We don’t knowingly collect information from children, and will delete it if we learn we have.

What we request. When you connect a Gmail account, OrderPilot asks Google for the read-only Gmail permission (gmail.readonly). It lets us read messages, and nothing else. We cannot send, change, label, or delete your email.

What we access. We only read messages from the retailers and carriers you choose to scan, and only to find order, shipping and sale details. From those messages we keep the order details listed in section 2. We don’t keep copies of your emails.

How we use it. Only to show your orders, shipments, inventory, sales and profit inside OrderPilot.

Who we share it with. We do not sell or transfer Gmail data to third parties, and we do not share it for advertising. The providers listed in section 4 receive it only to run the Service.

AI and machine learning. We do not use Gmail data to develop, improve or train AI or machine learning models.

Limited Use. The use of raw or derived user data received from Gmail APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Your control. You can disconnect a Gmail account at any time from Inboxes, which stops all reading of that mailbox. You can also revoke OrderPilot’s access from your Google Account settings at myaccount.google.com/permissions. Deleting your account, or an individual inbox, removes the data stored for it as described in section 6.

We’ll post updates here and, for material changes, tell you in the app or by email. Questions or requests: support@orderpilot.live.