Privacy policy

Last updated: July 20, 2026

The short version: your business data lives in your own isolated database, we run no analytics, and we don't sell or share your data. Zipkes Solutions LLC is the data controller.

• What we store: the business data you enter — products, purchase orders, sales, expenses, channel settings, invoice photos — plus market-price snapshots for products you link. Each account's data lives in its own database file; no other account can access it. If you submit the beta request form, we store what you typed (name, email, shop, message) to process your request.
• Sign-in (Clerk): authentication is handled by Clerk, which processes your email, name, optional profile photo, and sign-in metadata, and sets the session cookies that keep you signed in. Those are the only cookies; there is no advertising or cross-site tracking.
• Payments (Stripe): subscriptions are billed by Stripe. Your card details go directly to Stripe and never touch our servers; we receive only your email, subscription status, and receipts.
• Hosting & backups: the service runs on Microsoft Azure in the United States. Encrypted nightly backups are kept for 30 days so your data survives hardware failure; they're subject to the same access restrictions as the live database.
• Analytics: none. The app sends no usage data, telemetry, or business figures anywhere.
• Outbound requests: your account's server (never your browser) contacts tcgcsv.com and TCGplayer to fetch market prices for products you've linked — those requests contain product identifiers only. If you configure the optional email digest, your SMTP credentials are stored in your own database and used solely to send your digest.
• Your rights: request a full export of your data or complete deletion at any time — both honored promptly. After cancellation, data is retained 90 days and then eligible for deletion.

Privacy questions or data requests: email us.