Security & data

Where your data goes and who sees what

The short version. The full detail is in the Privacy Policy and the Terms of Service.

Where it is stored and processed

Hosting

The website runs on Vercel and the application server on Railway.

Database and files

Your account, workspace data and uploaded files are kept with Supabase (database, sign-in and file storage).

AI processing

Analysis and reference search are run by third-party AI providers.

The providers and their terms: Privacy Policy, section 3

Payments and email

Payments go through Paddle — we never store card numbers. Emails are delivered by Resend.

These providers are based mainly in the United States (Paddle in the United Kingdom).

How it is protected

Encrypted in transit

Data travels over encrypted connections (HTTPS).

Private storage

Uploaded files are kept in private storage under internal identifiers — there are no public links to them.

Sessions

You are signed out after 30 minutes without activity, and an account can be open in one place at a time — signing in elsewhere ends the earlier session.

No training on your files

Under the AI providers’ API terms, what is sent to them is not used for training. The service uses no analytics or advertising scripts.

Who sees what

Between a brand and a factory

Cost sheets

A factory’s draft stays private until it sends it. Once sent, the brand sees the cost sheet as sent — every line, overhead and margin included.

Retail stays with the brand

A factory does not see the brand’s retail price or retail margin in the analysis.

Factory orders stay with the factory

A factory’s orders, buyer names, PO numbers, payment terms, order periods and plants are not shown to any brand.

Price-change reasons

A factory sees only the reasons it wrote — never the brand’s or another factory’s.

Inside a team

Shared work

Team plans, masters and the costing archive are shared with the workspace. What you made before joining stays yours unless you share it.

Assigned only

By default a seat sees the whole team’s plans; an admin can limit a seat to the styles assigned to it.

Owner and admins

The owner and admins see each seat’s usage and the activity log, including which team plans and cost sheets were opened.

Your choices and your data

AI learning is opt-in

Off by default. Only if you turn it on are anonymized reference patterns built from your data — cost structures, how prices moved in negotiations, the kinds of negotiation moves, questions and actions; never names, prices tied to you or raw files. Turn it off in Settings at any time, and your past contributions are removed.

Export everything

Settings → Download all your data gives you one zip — Excel, JSON and your original files — to download for 7 days.

Delete your account

Your email, name and the personal data held with your account are deleted immediately. On someone else’s team, the team work you did stays with the team.

If you cancel

Cancelling takes effect at the end of the billing period. When a team subscription ends, the workspace data is kept, not deleted, and comes back if the owner subscribes again.

Never sold

Personal data is never sold to third parties or used for advertising.