Privacy Policy

• We read only the mailboxes you connect, and only to find order, shipping and sale emails.
• We store the order details we extract, not a copy of your inbox.
• Your mailbox credentials are encrypted at rest and never shown back to you or anyone.
• We don’t sell your data, don’t show ads, and don’t use your data to train AI models.
• You can delete your account and all of your data yourself, at any time.

Account information. Your email address and a hashed (not readable) password, plus the invite code you used and sign-up date.

Mailbox connections. For each mailbox you add: its address, server details and the app password you supply, which we store encrypted.

Information extracted from your email. When you run a scan, the Service reads messages from the retailers, carriers and marketplaces it supports and saves details such as: retailer, product names and quantities, prices and totals, order and tracking numbers, order status and dates, the shipping address and destination city/ZIP shown in the message, the card brand and last four digits where the email shows them (never full card numbers), and sale details from marketplace emails. Messages that aren’t recognised as orders, shipping or sales are discarded, and we don’t keep a copy of your full emails.

What you add. Inventory, sales, expenses, notes, costs, place names and settings you enter.

Billing. If you subscribe, Stripe collects your payment details. We receive only your plan, subscription status, and the card brand and last four digits.

Technical data. Standard server logs (IP address, browser type, pages requested, errors). We use one essential cookie to keep you signed in, and no advertising or cross-site tracking cookies.

Discord (optional). If you connect Discord, we receive your Discord ID, username and avatar to show on share cards and to assign a customer role.

• To run the Service for you: scan, organise and display your orders, shipments, inventory, sales and profit.
• To keep the Service secure, prevent abuse, fix bugs and support you.
• To bill you, once paid plans begin.
• To contact you about your account or important changes to the Service.

We do not use your emails or order data for advertising, profiling, or training machine-learning models, and we do not sell or rent it.

Only the providers needed to run the Service, and only what each needs:

• Hosting and infrastructure providers that store the data and serve the app for us.
• Your email provider, which we connect to in order to read your mail.
• Stripe, for payments.
• TCGplayer: product names are sent to look up market prices.
• Geocoding and map providers (for example a ZIP-code lookup service and OpenStreetMap tiles): ZIP codes or city names, and your browser’s request for map tiles.
• Carrier tracking services, if live tracking is switched on: tracking numbers.
• Discord, if you connect it.

We may also disclose information if required by law or to protect people or the Service, or as part of a merger or sale of the business (we’d tell you first and this policy would continue to apply).

Each account’s data is stored separately and can only be reached when signed in to that account. Passwords are hashed, mailbox credentials are encrypted, connections use HTTPS, and sign-in attempts are rate limited. No system is perfectly secure, and this is beta software. If we learn of a breach affecting you we will tell you promptly. Please use a limited app password for your mailbox, not your main one.

We keep your data while your account exists. Settings → Delete my account removes your login and everything stored for you immediately; backups made before that are overwritten on their normal schedule. You can also delete inboxes, orders, sales and other records individually, or wipe all data without deleting the account. Revoking the app password at your email provider cuts our access at once.

Depending on where you live (for example the EU/UK under GDPR, or California under the CCPA/CPRA) you may have the right to access, correct, export, delete or restrict the use of your personal data, and to object to some processing. You can export your orders as CSV and delete your account from inside the app; for anything else email support@orderpilot.live and we’ll respond within a reasonable time (and within 30 days). We don’t sell or share personal information for advertising.

Where GDPR applies, we process your data to perform our contract with you, for our legitimate interests in running and securing the Service, and with your consent where you give it (such as connecting a mailbox). You can withdraw consent by disconnecting the mailbox or deleting your account.

Our servers may be located in the United States or another country. If you use the Service from elsewhere, your data will be transferred to and processed there.

The Service is for adults (18+). We don’t knowingly collect information from children, and will delete it if we learn we have.

We’ll post updates here and, for material changes, tell you in the app or by email. Questions or requests: support@orderpilot.live.