Privacy

Back to the tool

PayPal data

CSV files are read in your browser. For a signed-in seller with access to save, the app stores a private, encrypted copy of filtered transaction rows so files you assign to the same business can be combined. Anonymous uploads stay in this browser for the current visit.

Stored rows contain date, type, amounts, currency, quantity, status and available fee, hold and tracking indicators, country, cart details and item titles. Item titles are kept as PayPal gives them and can include whatever a seller or buyer typed in an item or subject field; contact details and web links are removed. Buyer, transaction, reference and invoice values are stored only as stable pseudonymous codes. Names, emails, phone numbers, addresses, notes and the raw CSV file are never stored.

If you request AI help, the app sends your question and item titles with counts and totals. It never sends buyer details, transaction IDs or raw rows.

Sandbox credentials are held in server memory for this visit. A session can expire or be lost when the server changes. Sandbox reads and actions communicate with PayPal’s test system.

When you prepare an offer to quiet regulars, this browser keeps the date and pseudonymous buyer codes so a later upload can show who returned. For anonymous CSV uploads, a random browser key keeps those codes consistent across uploads; clearing browser storage removes it. Buyer names and email addresses used to prepare messages remain in the current browser session and are not saved.

Accounts and saved summaries

When account saving is available, sign-in is handled by WorkOS. The app uses your account ID to keep your workspace separate. Saving is explicit: period totals, monthly summaries, optional reviewed product labels, reminders, tests, business-profile answers and the filtered upload rows above are stored in encrypted private storage. When you choose to save them, business and item identities, confirmed cost and unpaid-owner-hour facts, their effective dates and corrections, and saved partial monthly views are stored there too.

You can download or remove saved workspace content, including filtered upload rows, from the Workspace page. A downloaded file may include item titles; keep it somewhere private. Legacy trial date markers, a revision counter and opaque deletion markers remain after workspace deletion. Saving does not start or extend a paid trial; paid access is determined by the subscription. Billing records and provider account records are managed separately by their providers.

Chat and connected assistants

Website chat calculates answers from transaction rows held in this tab. Optional AI planning receives your question and item titles with counts and totals, never buyer details, transaction IDs or raw rows. Saved business facts are not included in the planning context. Connected assistants can access saved numerical summaries, product rankings and monthly comparisons only when you turn on assistant sharing in Workspace. Reminders and test records are not shared. This permission is off by default, and turning it off blocks the next request, including from an already connected assistant. Product names are anonymous by default and require a separate product-name sharing setting: review and edit labels to remove customer names, contact details, order references and custom messages before enabling it. Turning either setting off cannot remove information already shared with an assistant.

If you use voice, audio is sent to Amazon Transcribe and discarded; speech text is sent to Amazon Polly to play the answer. The app does not store or log audio or transcripts. Your choice to hear chat answers aloud is remembered in this browser.

Billing

Payments are unavailable until billing setup is complete. When enabled, Paddle handles checkout and payment details. The app stores provider record identifiers and subscription status, not card information. Plan & billing provides access to subscription management.

Analytics

With your permission, Google Analytics measures page visits and interactions using fixed control labels. The app does not send field values, uploaded data, names or email addresses to analytics.

Reminders

Workspace reminders are records you can revisit. Signed-out reminders stay on this device; clearing browser storage removes them. Account reminders are saved only when account storage is available. They do not send notifications.

A 30-day check downloads a calendar file. It does not collect your email, send a message or register a background job.

PayPal invoice reminders require your approval. The app stores encrypted proposal details and dispatch receipts in private storage so an interrupted request cannot silently send the same reminder again. PayPal sends the approved reminder to the invoice recipient. This app does not send a separate email.