Privacy Policy

Last updated: 2026-07-01

1. Uploaded files are processed in memory, not stored

CSV files you upload for a scan or report are parsed and processed in memory on our servers. They are not written to disk, not kept as original files, and cannot be recovered after processing.

To make a report available after checkout, we keep a PII-scrubbed computed report behind an unguessable link token. An unpaid report link expires within six hours. After a payment is verified, the report link remains available for up to 30 days; the service will not return it after that expiry. We do not retain the uploaded CSV itself. Expired report rows are deleted when encountered during normal service operation; a fixed-schedule cleanup is required before public launch to enforce physical deletion on a fixed timetable.

2. Sensitive columns are excluded from storage

Uploaded files are parsed in memory when you run a scan. The importer detects columns that look like customer, staff, payment, or accounting data (for example customer_email, cashier_name, card_number) and excludes them before normalization or storage. Reports are built only from product, inventory, and sales figures; those sensitive values are not retained.

3. Optional pilot-contact email

If you request pilot updates, we store the email address you provide, the time you joined, and which page you joined from. We use it only to contact you about ShelfReport. It is kept until you unsubscribe or ask us to delete it — one email to us is enough.

4. Payments

Paid checkouts are handled securely by our payment provider — Paddle.com (acting as merchant of record) or Stripe. We never see or store your card details. We retain only the payment-completion status and transaction reference needed to unlock and recover a paid report during the retention period above.

5. Cookies and analytics

We use no advertising cookies and no advertising pixels. The only client-side state used for the product is what is strictly necessary to operate your session (for example, keeping your scan result reachable between the checkout redirect and the report page).

The public site uses Plausible Analytics, a cookieless visitor counter hosted in the EU. It records aggregate page views, referrers, and device type. It does not use cookies, does not store personal identifiers, and does not track you across other websites. We use it to see which pages help retailers find ShelfReport. We do not sell this data.

6. Contact

Questions or deletion requests: support@shelfreports.com. We will respond within a reasonable time.