Privacy Policy

What we collect

• Account: your email address and a bcrypt hash of your password (never the password itself).
• Report inputs: the device, condition, carrier, plan and target answers you enter, plus the engine output snapshot.
• Ledger entries: the monthly expected/received credit amounts you record and any labels you type.
• Billing: your Stripe customer id, checkout session ids, and grant records. Card details never touch our servers — Stripe handles them.
• Security logs: in-memory rate-limit counters that expire automatically.

What we do NOT do

• We do not sell or rent your data. There is no advertising of any kind.
• We do not connect to your carrier or bank account — nothing is read without you typing it.
• We do not earn affiliate commissions from carriers, Apple, or marketplaces, so there is no incentive to skew any number.

Cookies

One cookie: an httpOnly, SameSite=Lax session token (signed JWT, 7-day expiry) used to keep you logged in. No analytics, tracking, or third-party cookies.

Data removal

Delete your account or request deletion of your report and ledger data at any time by emailing support@your-domain.com (Edit before launch) — removal is processed within 30 days.

Contact

Upgrade Decoder LLC (Edit before launch) · 123 Edit Before Launch St, Suite 100, Your City, ST 00000 (Edit before launch) · support@your-domain.com (Edit before launch)