Privacy Policy

1. What we collect

When you create a Deathpile account we store your email address, display name, and a password hash (never your plain-text password). We also store the workspace, tub, item, and listing data you enter while using the service, the main job you ask Deathpile to solve, and a session cookie used to keep you signed in. If you choose a finding-stock or picking goal, you may also give us an estimated range for how long finding one sold item took before Deathpile.

2. Payments and billing

Paid plans are billed through Stripe, our payment processor. Stripe collects and stores your payment card details directly. Deathpile never sees or stores your full card number. We store the billing information Stripe shares back with us: your subscription plan, billing interval, trial and renewal dates, and cancellation status, so we can show your billing state in Settings and keep your account entitlements in sync. Stripe's own privacy policy governs how it handles the payment details you give it directly.

3. Marketplace integrations (eBay and Shopify)

If you connect an eBay or Shopify account, Deathpile stores encrypted credentials and reads your own listings, including SKU, title, price, quantity, and images. If you enable sale detection, Deathpile also stores a limited order reference, item details, quantity, price, and status needed to show and reconcile the sale. Buyer names, email addresses, phone numbers, payment details, and shipping or billing addresses are removed before storage. For eBay, we store a one-way keyed digest of the account's stable identifier so a future marketplace account-deletion notice can be matched without retaining that identifier in readable form.

4. Cookies and analytics

Deathpile sets a single session cookie required for you to stay signed in. It isn't used for advertising. The service uses Vercel Speed Insights to measure page performance (aggregated, non-identifying metrics such as load times), and Google Analytics 4 to understand how visitors find and use the site. Google Analytics may set its own cookies and processes usage data on our behalf; we do not use it for advertising and do not sell your data. You can opt out of Google Analytics with Google's browser add-on or by blocking analytics cookies.

If you start a pick run, we record server timestamps, the number of items in the run, successful outcomes, duration, mode, and whether the run was completed, cancelled, or abandoned. We use qualifying completed runs to show you measured retrieval time and, where enough evidence exists, a conservative estimate of time saved against the range you provided. We do not turn this estimate into money or project it across work you have not completed.

5. Email and communication preferences

Deathpile sends essential account and service emails such as verification, password, security, and workspace invitation messages. Account owners may also receive trial setup, progress, expiry, and relevant Deathpile product emails based on their direct account relationship with us. Signup clearly discloses this use. Every commercial email contains a no-login unsubscribe option, and you can also change the preference in Settings. Unsubscribing from commercial email does not stop essential account or service messages. We store consent, preference, delivery, bounce, complaint, and unsubscribe records so we can operate the service and honour communication choices. Trial and product emails may use your selected workspace goal, factual inventory outcomes, and qualifying retrieval measurements to explain what changed and suggest the next useful action.

6. How we protect your data

Passwords are hashed with argon2. Marketplace tokens and other secrets are encrypted at rest. Workspace data is only accessible to accounts you've added as members of that workspace. We don't sell your data, and we don't share it with third parties except the services required to run Deathpile itself (hosting, database, email delivery, error monitoring, Stripe for payment processing, and eBay's and Shopify's own APIs where you've connected an account).

7. Retention and deletion

We keep your account and workspace data for as long as your account is active. You can ask us to delete your account and associated data at any time by contacting us below. Connected marketplace integrations can be disconnected from Settings, which removes stored credentials and stops future sync. When eBay sends a verified marketplace account-deletion notice, we remove matched credentials, account mappings, listing caches, sale records, provider identifiers, images, prices, and generated provider-reference notes. The workspace owner's physical inventory, locations, quantities, and item names remain but are detached from eBay. Minimal request audit records are removed after 180 days. Workspace goal history and pick-run records are retained with the workspace so later estimates remain auditable.

8. Changes to this policy

If this policy changes materially, we'll update the “last updated” date above and, where appropriate, let you know directly.

9. Contact

For privacy questions or data requests, contact accounts@deathpile.io.