Privacy Policy

W/L Ledger ("we", "us") helps resellers track their sales, costs and profit. This policy explains what information we collect, why, who we share it with, and the choices you have. Questions: support@wlledger.com.

The short version: we use your information to run the app for you. We don't sell it, we don't show ads, and we don't use third-party tracking. You can download or delete your data at any time.

Information we collect

Information you give us

• Account: your email address. If you sign in with Google, we receive your name, email address and profile picture from that service.
• Sign-up answers: a display name, the state you sell from (for sales tax), where you sell, what you sell, and your usernames on selling platforms, if you add them.
• Your ledger: the sales, inventory, shows, trades, partners, fee settings, notes and tax documents you enter, import or upload.
• Information about other people: buyer usernames from your sales, your notes about buyers, and names, phone numbers and notes for your trade contacts. Please only add what you need. The app never asks for anyone's home address, and you shouldn't enter one.
• Files: card photos, sale screenshots, spreadsheets you import, and tax documents. Spreadsheets are read in your browser; only the rows you choose to save are sent to us.
• Messages to the AI assistant and anything you ask an AI feature to read (see "AI features" below).

Information collected automatically

• Cookies we need: a sign-in cookie to keep you signed in, and small cookies for your light/dark setting and your time zone. We don't use advertising or analytics cookies.
• Your browser's storage: a few settings stay on your device only, such as which banners you closed and your chat with the assistant during a visit.
• Technical logs: our hosting and database providers record things like IP addresses, browser type and error details when you use the app, to keep it running and secure.
• Usage counts: how many AI actions (and how much AI processing) you use each month, and when your plan changes (trial, paid, cancelled), so plan limits work and we can run and price the service.

How we use it

• To run the app: show your scoreboard, work out fees and profit, import your files, and keep your account secure.
• To run the AI features you choose to use.
• To answer you when you contact us.
• To find and fix bugs, prevent abuse, and keep the service working.
• To follow the law.

We don't sell your information, share it for targeted advertising, or use it to build advertising profiles.

AI features

Some features use Anthropic's Claude AI: the chat assistant, screenshot import (including show summary screenshots), card photo scans, filling in card details, matching spreadsheet columns, "talk it out", coach tips, and reading a 1099-K. When you use one, we send Anthropic only what that feature needs (for example, the screenshot you picked, or a summary of your numbers for a coach tip). Coach tips replace buyer usernames with placeholders before anything is sent. If you ask the AI to read a 1099-K, the whole form is sent, which can include your taxpayer ID number and address; if you'd rather not, type the totals in yourself. Under Anthropic's commercial terms, content sent through its API isn't used to train its models.

Nothing the AI reads or suggests is saved to your ledger until you check it and confirm.

Who we share it with

Only the service providers that run the app for us, and only so they can do that:

• Supabase: database, sign-in and file storage.
• Vercel: website hosting.
• Anthropic: AI features, when you use them.
• Google: only if you choose to sign in with it.
• Stripe: payment processing for paid plans. Stripe handles your card details; we never see or store your full card number.
• Our email provider: to send sign-in links.

We may also share information if the law requires it, to protect someone's safety, or as part of a sale or transfer of W/L Ledger, in which case this policy keeps applying to your information.

Share links you create are public. Anyone with the link can see what's on that card (your record, win rate, and dollar amounts only if you turned them on). Share links never show buyer names or who made the link. You can turn any link off in Settings → Share links.

How we protect it

• Your data is stored encrypted and sent over encrypted (HTTPS) connections.
• The database only lets your account read or change your data, on every request.
• You sign in with a one-time email link or with Google instead of a password. We don't use passwords because people often reuse them, and leaked or guessed passwords are the most common way accounts get broken into. A sign-in link works once, expires in an hour and only reaches your inbox, and we never store a password that could be stolen. "Keep me signed in" keeps you signed in on your own device; if you untick it, you're signed out when you close the browser (or after 12 hours).
• To run the service, we can see account-level information: your email, when you joined and were last active, your plan, how many sales and items you have, your AI usage counts, and feedback you send. We don't look at the contents of your ledger, notes, contacts or files unless you ask us to help with a problem or the law requires it.
• Your notes (on sales, items, trades, buyers and contacts), where you bought items, and your contacts' phone numbers get an extra layer of encryption before they're stored.
• Tax documents are encrypted on your device, each with its own key, before they're uploaded, so the stored file can't be read without our server.
• Photos, screenshots and tax documents are kept in private storage that only your account can open.
• W/L Ledger never logs in to Whatnot, eBay or any other platform for you, and never asks for your passwords to them.

No system is perfectly secure, but we work to protect your information and will tell you if a breach affects it, as the law requires.

How long we keep it

We keep your information while your account is open. When you delete your data or your account, it's removed from the app right away. Copies can remain in our providers' encrypted backups for a short time (usually up to 30 days) before they're overwritten. Technical logs are kept for a limited time by our providers.

Your choices and rights

• Download: Settings → Data & privacy → Export my data gives you everything in a ZIP of spreadsheets.
• Correct: edit anything in the app at any time.
• Delete: Settings → Data & privacy lets you delete all your data, or your whole account.
• Share links: turn them off in Settings → Share links.

Depending on where you live (for example California, Colorado, Virginia or other U.S. states), you may have the right to know what we collect, get a copy, correct it, delete it, and opt out of its sale or use for targeted ads. We don't sell or share it for targeted ads, and you can do the rest in the app or by emailing support@wlledger.com. We'll reply within 30 days and won't treat you differently for asking.

Children and teens

W/L Ledger is for people 13 and older. We don't knowingly collect information from children under 13. If you believe a child under 13 has an account, email support@wlledger.com and we'll delete it. If you're under 18, please use W/L Ledger with a parent or guardian's permission; a parent or guardian must buy any paid plan.

Where it's processed

W/L Ledger is run from the United States. Your information is processed in the United States and in other places where our service providers operate.

Changes to this policy

If we make important changes, we'll tell you in the app or by email before they take effect. The date at the top shows when it last changed.

Contact

Email support@wlledger.com, or see the Contact page.