Privacy Policy

Last updated: draft — pending legal review before live launch.

Two kinds of data

Business X-Ray handles two entirely separate kinds of data, and treats them very differently. This page is the customer-facing summary; the full technical detail lives in our public documentation (docs/PRIVACY.md and docs/COMMERCE_SECURITY.md in the project repository).

Your spreadsheet and analysis results

The product/cost/price data you upload, and every number Business X-Ray calculates from it, is processed entirely in your browser. It is never uploaded to our servers, never stored by us, and never shared with any third party. Closing the tab or starting over discards it completely.

Purchase (commerce) data

If you unlock Full X-Ray, a minimum amount of purchase-related data is processed to verify your purchase and grant access: an anonymous, randomly generated identifier stored in your browser (not tied to your name or any account), and the order confirmation Lemon Squeezy — our payment processor and merchant of record — sends us to verify it. We never send your spreadsheet, product data, or analysis results to Lemon Squeezy or anyone else as part of a purchase.

Restoring access on a new browser or device

If you need to restore purchased access on a different browser or device, you can enter the email you purchased with and we'll send a one-time code to it. We use that email only to send the code and to check — using a one-way cryptographic match, never by storing your address as readable text — whether it belongs to a valid purchase. There is no account, no password, and no profile created by this; the code expires shortly after it's sent and works once.

What we don't have

• No account system — no name, password, or profile is ever collected.
• No advertising or tracking pixels.
• No sale of data to third parties — we don't have data to sell.

Payment processing

Purchases are processed by Lemon Squeezy, who act as the merchant of record and handle payment details, billing, and tax collection directly. We never see or store your card details.

Contact

Questions about this policy: contact details to be added before live launch.