Draft. This page is a placeholder until the publishing entity and region are decided (PRD Q12). It is not a legal text.

Privacy policy

Invitation-only Pilot data

The website stores your invited sign-in email, stable account ID, sessions, connected PC names and display preferences. Authentication uses essential secure session cookies; it does not start a subscription or trial. Authentication email delivery uses Resend with the configured sending domain.

Stripe sends signed snapshot payloads. The service stores normalized amount, currency, test/live mode, provider event IDs and delivery status, and discards raw payloads. Customer names and customer emails are not stored. Endpoint signing secrets are encrypted using a separate service key; your sale integration never asks for your Stripe API secret key.

Optional subscriptions

If you choose a subscription offered in your account, Stripe processes payment details through hosted Checkout and Customer Portal pages. We send Stripe your account email and an internal account identifier, and store Stripe customer and subscription IDs, subscription status, plan, trial and billing-period dates, and processed billing event IDs. Card numbers and security codes are handled by Stripe and never stored by the website or desktop app. Sandbox billing uses separate test records and does not create real charges.

Retention and controls

Normalized events are available for 72 hours. Deduplication keys remain for 35 days to prevent retries from showing duplicate birds. Sign-in links expire after 10 minutes and work once after confirmation; browser sessions expire after 30 days. Local database backups retain 24 hourly and seven daily snapshots, so deleted records can remain in backups for up to seven additional days.

Manage up to three PCs, revoke a PC, replace an endpoint URL and hide amounts through your account. The Windows app protects device credentials using Windows DPAPI outside its installation directory. Its local display queue supports replay across restarts. Contact the operator about account deletion; account records remain while the account exists.

The public landing page uses no analytics or advertising trackers. Account pages use essential session cookies. Public registration and automatic off-server backup storage are outside this Pilot. Subscription availability is shown inside invited accounts; Existing Pilot accounts keep free access. New accounts need an active trial or subscription for sales notifications. Publishing-entity and regional legal details still need completion before public launch.