Privacy Policy

Last updated: October 8, 2026

ShelfReport is operated by JAX & NOAH STUDIOS INC., Kimberley, British Columbia, Canada. Support and deletion requests: support@shelfreports.com. Paddle is a separate merchant of record for payments. See also the Terms of Service and Refund Policy.

1. Uploaded files are processed in memory, not stored

CSV files you upload for a scan or report are parsed and processed in memory on our servers. They are not written to disk, not kept as original files, and cannot be recovered after processing.

To make a report available after checkout, we keep a PII-scrubbed computed report behind an unguessable link token. An unpaid report link expires within six hours. After a payment is verified, the report link remains available for up to 30 days; the service will not return it after that expiry. We do not retain the uploaded CSV itself. Access expiry is immediate: unpaid links stop working after six hours, and paid links stop working after 30 days. Expired report rows are deleted when they are next encountered during normal service operation. We do not currently run a separate timed wipe of already-expired rows.

2. Sensitive columns are excluded from storage

Uploaded files are parsed in memory when you run a scan. The importer detects columns that look like customer, staff, payment, or accounting data (for example customer_email, cashier_name, card_number) and excludes them before normalization or storage. Reports are built only from product, inventory, and sales figures; those sensitive values are not retained.

3. Optional pilot-contact email

If you request pilot updates, we store the email address you provide, the time you joined, and which page you joined from. We use it only to contact you about ShelfReport. It is kept until you unsubscribe or ask us to delete it — one email to us is enough.

4. Payments

Paid checkouts are handled by Paddle.com as merchant of record. We never see or store your card details. We retain only the payment-completion status and transaction reference needed to unlock and recover a paid report during the retention period above.

5. Cookies and analytics

We use no advertising cookies and no advertising pixels. The only client-side state used for the product is what is strictly necessary to operate your session (for example, keeping your scan result reachable between the checkout redirect and the report page).

The public site uses Plausible Analytics, a cookieless visitor counter hosted in the EU. It records aggregate page views, referrers, device type, and a small set of product events (scan started, scan ready, checkout started, purchase, waitlist join). Those events do not include email, payment references, SKUs, or other personal identifiers. Plausible does not use cookies, does not store personal identifiers, and does not track you across other websites. We use it to see which pages and steps help retailers find and use ShelfReport. We do not sell this data.

6. Contact

Questions or deletion requests: support@shelfreports.com. We will respond within a reasonable time.