Privacy Policy
Last updated: June 2026
1. What We Collect
We collect your email address, name, and hashed password when you create an account. We collect product watchlist data, landed cost calculations, and alert settings that you create within the app. We use cookies only for authentication sessions.
2. What We Don't Collect
We do not collect advertising data, behavioral tracking, or sell your data to third parties. We do not use third-party analytics trackers on authenticated pages.
3. How We Use Your Data
Your data is used solely to provide the DutyDesk service: to show your watchlist, run calculations, send tariff change alerts you have opted into, and process billing. We do not use your product or trade data for any commercial purpose beyond service delivery.
4. Third-Party Services
We use Stripe for payment processing (subject to Stripe's privacy policy), Resend for transactional email delivery, and DigitalOcean for hosting. These services process data only as necessary to operate the platform.
5. Data Retention
Your account data is retained while your account is active. You may request deletion of your account and associated data by emailing [email protected]. We will process deletion requests within 30 days.
6. Security
Passwords are stored as bcrypt hashes. Database connections use TLS. We do not store payment card information — all billing is handled by Stripe.
7. Your Rights
You may access, correct, or request deletion of your personal data at any time by contacting [email protected]. If you are in the EU or California, additional rights may apply under GDPR or CCPA respectively.
8. Contact
Privacy questions: [email protected]