Privacy Policy

SKU Profit Autopsy analyses sales files you choose to upload. This page explains what we store, why, and what control you have over it.

What we collect

• Files you upload (sales, stock, cost, charges, customer/channel exports). They are stored in private storage and are only readable through authenticated server routes tied to your session — never publicly, and never by other users.
• Account data: your email address and sign-in credentials when you create an account or claim a report.
• Payment data: payments are processed by Stripe. We never see or store your card number — we store only the payment status and reference needed to unlock your report.
• Product events: which steps you complete (upload, preview, checkout) so we can fix funnel problems. No advertising trackers are used.

Cookies and analytics

We use Google Analytics to understand how the product is used (pages viewed, steps completed). Analytics cookies are set only if you accept the consent banner; if you decline, measurement continues in cookieless mode without identifying your browser across visits. Advertising features, ad personalisation, and data sharing for ads are permanently disabled. Essential cookies (your sign-in session and the anonymous report session) are always set — the product cannot work without them.

What we never do

• We never ask for your marketplace login or API keys. You export your own file.
• We never sell your data or share it with third parties for marketing.
• We never use your uploaded data for anything except generating your report.

PII in your files

Your exports may contain personal data (for example buyer names). We treat every uploaded file as confidential, minimise how such fields are displayed, and support deletion requests where legally possible.

Processors we rely on

Supabase (database and file storage), Stripe (payments), Resend (transactional email), and Vercel (hosting). Each processes data only as needed to run the service.

Retention and deletion

You can delete uploaded files and exports from your report page, subject to legal and payment-record retention needs. Anonymous (unclaimed) reports are automatically cleaned up after their retention window. To request full deletion of your account and data, contact us — see the contact page.