Privacy policy
Your export stays with you
Processed in your browser
Usage records, item costs, on-hand quantities, supplier terms and decision results are processed in browser memory. These are not sent to the account service, email provider or payment provider. There is no inventory database, chat service or advertising tracker.
Optional website analytics
With your permission, Cloudflare Web Analytics measures visits and page performance on public information pages. The analytics script is not loaded in the calculator, workbench, demo, sign-in or account screens. We do not send your files, form contents, supplier terms or results to analytics. Cloudflare processes ordinary connection information to receive these requests; its Web Analytics service does not use analytics cookies or identify visitors across sites.
Choose “Necessary only” to keep optional analytics off. You can change or withdraw your choice through “Cookie settings” in the footer. We also honor your browser’s Do Not Track and Global Privacy Control signals. Your choice is stored locally in this browser. Hosting still requires normal network requests to Cloudflare whether or not you allow optional analytics.
Optional accounts and previous billing records
The full workbench is free and does not require an account. If you choose to sign in, the service keeps your email address, hashed sign-in tokens, hashed session identifiers and connected provider identifiers. Provider connections are linked to your verified account, not merged by email. Resend delivers sign-in emails. Apple authorization tokens needed for disconnection are stored encrypted. Existing payment references and subscription records are retained for reconciliation and cancellation through Stripe. New paid subscriptions are not offered.
Local preferences and exports
Your browser may remember column mappings, carrying-cost assumptions and staple selections scoped to a vendor and line. Downloaded memos and worksheets are files on your device. Sign-in uses a secure session cookie that expires after seven days; sign-out revokes every active session.
Retention and deletion
Expired sign-in tokens, sessions and rate-limit records are removed by daily maintenance. Webhook delivery identifiers are retained for 90 days. Account closure removes your email and sign-in access; the free workbench remains available. Existing accounting records and payment-provider records remain for reconciliation. Usage data cannot be restored by the service because it is never stored there.