Privacy Policy

Profitbench is operated by Profitbench LLC, a limited liability company formed in New Jersey, United States (“Profitbench”, “we”). This policy explains what personal information we handle when you visit profitbench.io, use the Profitbench app, or contact us.

It covers two groups of people:

• Merchants — the people who sign up and use Profitbench. For your account, billing, support and technical information we are the controller: we decide how and why it is used.
• Marketplace buyers — people who bought from a merchant on Etsy or eBay. We process their order records on the merchant’s behalf, as the merchant’s processor or service provider. Section 2 explains what those records contain and section 8 explains how to make a request.

Etsy, eBay, Stripe and the other services you use alongside Profitbench have their own privacy policies. This policy does not cover them.

Account and store. Your contact and sign-in information, your store settings (name, type, currency, units and time zone) and team membership details, used to create and manage your account. Our authentication provider, Clerk, handles sign-in and the related session information. If you sign in through Google or Apple, we receive your email address and name from them.

Marketplace and business information. When you connect Etsy or eBay, we receive shop, listing, order, fee and payout information to calculate and report your business performance, together with the access token that lets us read it. Marketplace responses may include buyer details. Our order import does not save buyer names or contact details in dedicated fields; the order records we keep hold order numbers, dates, amounts, fees, refunds and the items sold. We process those records on the merchant’s behalf.

Information you enter. Products, materials, machines, costs, expenses, receipt files and manual orders. Personal information may appear in content you enter or upload, so you control what goes in.

Billing. Stripe runs checkout and the billing portal on its own pages and collects your card and billing details there. We keep only Stripe’s identifiers for your customer and subscription, your plan, its status and its billing-period dates. We never receive full card numbers.

Support. Your name, email address and message when you use the support form or in-app help, delivered to our email inbox.

Notifications. Your notification preferences for each store, the alerts generated for that store and the status of email delivery attempts. If you enable email alerts, our email provider receives your verified primary email address, the store name, alert content and links back to Profitbench.

Technical information. Your IP address and standard request details reach our servers and our hosting provider. We use them for service delivery, security, rate limiting and diagnostics. We run no analytics or advertising trackers.

AI interactions. On plans that include the AI coach, the questions you ask and the briefings generated for you (section 4).

We use personal information to run Profitbench for you and for nothing unrelated: to provide the service (your account, marketplace sync, calculations, reports, export and deletion); to bill you and keep required financial records; to answer support requests; to generate AI coach briefings and answers; to keep the service secure; to send service emails; and to comply with the law.

Notification emails contain operational alerts you enable, such as low stock or a connection needing attention. You can turn off notification email in Settings or through the unsubscribe link in an alert. Your choices apply to your membership in that store.

If you are in the European Economic Area or the United Kingdom, the law requires a legal basis for each use:

Swiss law does not use the same list; for Swiss users we process under the Federal Act on Data Protection for the same purposes. Marketplace order records are handled on the merchant’s instructions, and the merchant’s own legal basis applies to buyers.

Our commitments. We do not use your information for advertising, we do not sell or license it, and we do not train AI models on it. We send only service emails; marketing email requires your opt-in, which you can withdraw at any time. Plan limits are applied automatically from your order count; we make no other automated decisions about you with legal or similarly significant effects.

On plans that include the AI coach, Profitbench sends selected business figures, product, material and expense-category names, order summaries, and your questions with their conversation context to Anthropic’s Claude API to generate briefings and answers. Briefings are generated automatically on a schedule; questions are processed when you submit them. Names and questions are sent as written, so avoid including sensitive personal information in them.

The application does not include your marketplace credentials, receipt files or another store’s data, and it has no dedicated buyer fields to send.

We use Anthropic’s Claude API under its commercial terms. Anthropic states that, by default, it does not use API inputs or outputs to train its models. Its retention policy provides for deletion within 30 days, with exceptions including Usage Policy enforcement and legal requirements. It may process data in the United States and other countries. We do not train models of our own on your data.

We keep generated briefings for 90 days. We do not keep your questions after answering them; during a conversation your browser sends the earlier turns with each new question.

If you do not want this processing, choose a plan without the coach. Briefings are generated text: they can be wrong and are not financial, tax or legal advice.

We share information only as described in this section, within the commitments in section 3.

Service providers. These companies process information for us under contracts that limit what they may do with it:

Sentry (Functional Software, Inc.) provides application error monitoring, hosted in the US. It receives minimized technical error categories, release/environment identifiers and approved code locations in the compiled application (file, line, column and function name) as event data, plus standard network metadata (the backend’s egress IP address) and our staff’s account and alert-email details. The application is designed to exclude customer content and tenant/user identifiers from events. No source code or source maps are sent, and the application uses no upload token. Error events are retained under the provider’s plan terms (currently 30 days on the Developer plan); provider backups follow its policy.

Marketplaces you connect. Etsy or eBay can see that Profitbench is reading your account through their API; their own policies govern what they do with your information.

Team members you invite can see your store’s data according to the access you give them.

Legal reasons and business transfers. We may disclose information when the law requires it, to respond to a valid legal request, or to protect the rights, safety or property of Profitbench, our customers or others. If Profitbench is part of a merger, acquisition or sale of assets, your information may transfer with it; we will tell you before it becomes subject to a different policy.

Profitbench itself sets no cookies. Our authentication provider, Clerk, sets the cookies needed to keep you signed in and to protect your session; because sign-in is loaded on every page, they apply across the site. On the support page, Cloudflare Turnstile may set a cookie for bot protection. We use no analytics or advertising cookies.

The app also keeps a few preferences in your browser’s storage: your theme, which notices you have dismissed, and identifiers for your store, user and session that keep notifications and the marketplace-connection flow working. The app in your browser reads them; they are not sent to any analytics or advertising service.

You can block or clear cookies and site data in your browser settings. Blocking the authentication cookies will prevent sign-in. We do not track you across other sites, so browser signals such as Do Not Track and Global Privacy Control have nothing further to switch off.

Disconnecting a marketplace. You can disconnect Etsy or eBay in Settings › Integrations. We remove the credentials used to access that marketplace, but keep your previously imported records and shop identifier. You can also revoke access through your marketplace account. Disconnecting does not delete your Profitbench store. If eBay tells us you have closed your eBay account, we delete the stored eBay credentials and keep a record of that notification for 24 months.

Deleting your store. You can delete your store in Settings › Data › Delete store. Deletion starts immediately and removes your store’s data and files, except for the records described below. We also cancel any remaining Stripe subscription and delete your organization and sign-in account from Clerk. If your sign-in account belongs to another Profitbench store, we keep it so you can continue accessing that store.

How long we keep information. Retention depends on the type of information and why we need it:

Contact us. Write to info@profitbench.io. Profitbench LLC is based in New Jersey, United States.

Manage your information. You can download your store’s records and receipt files, or delete your store, in Settings › Data. You can edit orders, products, costs and settings in the app, and update your name and email through your account menu.

Your privacy rights. Depending on where you live, you may have the right to:

• Access, correct or delete your personal information.
• Receive a copy of your information.
• Restrict or object to how we use it.
• Withdraw consent where processing depends on it.
• Complain to a data protection authority.

These rights apply under the GDPR in the European Economic Area, the UK GDPR in the United Kingdom, and the Federal Act on Data Protection in Switzerland. Several US states provide similar rights, including the right to opt out of the sale or sharing of personal information and targeted advertising. We do none of these. Where you have a right to appeal a refused request, you can do so by replying to our response. We will never treat you differently for exercising your rights.

Making a request. Email us with what you would like to access, change or delete. We verify that the request comes from you, normally through the email address on your account. If you cannot sign in, write from the address you used to register. You may use an authorized agent where local law allows it.

We respond to requests promptly upon receiving them and within the time required by applicable law. If we need an extension permitted by law, we will tell you why and when to expect a response. Requests are free unless clearly excessive.

Marketplace buyers. If you bought from a merchant who uses Profitbench, contact the seller first. They control your order record. Our marketplace imports do not save buyer names or contact details in dedicated fields, so we cannot search for your order using those details. If you contact us with the order details, we will explain what we hold and act on the seller’s instructions, including requests to delete it.

Complaints. You can contact the Information Commissioner’s Office in the UK, the Federal Data Protection and Information Commissioner in Switzerland, or your country’s data protection authority in the European Economic Area.

We use technical and organizational safeguards appropriate to the information we hold, including encryption in transit, encrypted storage of marketplace access tokens, per-store isolation in our database, payment details handled only by Stripe, and limited access to production systems. No service can promise perfect security; if a breach affects your personal information we will notify you and the relevant authorities as the law requires.

Profitbench is based in the United States, and our providers process information mainly there; some may also process it in other countries where they operate. If you use Profitbench from the European Economic Area, the United Kingdom or Switzerland, your information is transferred out of those regions. We rely on data processing agreements with our providers that include the European Commission’s Standard Contractual Clauses, with the UK addendum and Swiss adaptations where required. Contact us for details.

Profitbench is intended for adults aged 18 and older. We do not knowingly allow minors to create accounts. If we discover that an account belongs to a minor, we will close it and handle its data according to our retention and deletion practices. Information about marketplace buyers is handled as described in Section 2.

We may update this policy as our practices or legal requirements change. The effective date identifies the current version. If a change materially affects how we use your information, we will notify you by email or through the app before it takes effect.