Privacy Policy

1. What we collect

• Account data: email address (for magic-link sign-in), display name if provided, account creation date.
• Billing data: Stripe customer ID, subscription status. We do not store credit card numbers. Payment details live with Stripe.
• Uploaded sales data: we parse the contents of Whatnot CSV exports you upload (Weekly Orders Report, Order History Export). We extract sales, fees, refunds, tips, shipments, items, and buyer usernames.
• Cost data: what you paid for inventory (entered manually or via lot distribution).
• Usage data: pages viewed, features used, error logs. No third-party ad trackers.

2. What we do NOT store

We do not store the original raw CSV files. We parse them on upload, persist the normalized records, and discard the source file. We do not store credit card details, social security numbers, or government IDs.

3. How we use your data

• To provide the analytics, dashboards, and exports you sign up for.
• To send transactional emails (magic links, payment receipts, weekly recap if subscribed).
• To improve the parser and product (aggregated, anonymized error patterns).
• To debug specific issues you report.
• To comply with legal obligations.

4. Subprocessors

We rely on the following service providers. They process data on our behalf under contractual data-protection terms.

5. Data retention

Parsed sales data is retained for the lifetime of your account so historical comparisons work. You can delete or export your data anytime from account settings. After account deletion, we purge data within 30 days, except where legal obligation requires longer retention (e.g., tax / payment records via Stripe).

6. Your rights

You have the right to:

• Access the data we hold about you (settings page export).
• Correct inaccurate data.
• Delete your account and data (settings page wipe).
• Receive a copy of your data in machine-readable format.
• Object to certain processing.

For California residents: under CCPA, you have the right to know, delete, correct, and opt-out of the sale of personal information. We do not sell personal information.

7. Cookies

We use a session cookie to keep you signed in. We do not use third-party advertising cookies or cross-site tracking.

8. Security

We use HTTPS for all connections, encrypt data at rest in our database (Neon), and limit internal access to production data. No system is bulletproof. If you believe your account is compromised, email hello@aftershows.co immediately.

9. Children

The Service is not directed to anyone under 18. We do not knowingly collect data from minors.

10. International transfers

We are based in the United States. Your data may be processed in the US. By using the Service, you consent to this transfer.

11. Changes

We may update this policy. Material changes will be communicated by email or in-app notice. The "last updated" date at the top reflects the most recent revision.

12. Contact

Privacy questions: hello@aftershows.co. See also our Terms of Service.