Minimal data.
Explicit purpose.

What is processed

Account email, password hash, session records, subscription identifiers, audit summaries, and the line-level evidence needed to reopen a saved audit.

Invoice handling

Free scans run in your browser. When you choose to save an audit, the CSV is sent over HTTPS, processed in memory, and discarded. The raw file is not stored. Tracking numbers are encrypted before database storage.

Payments

Stripe processes payment and billing details. OFFSET/15 stores Stripe customer, subscription, status, price, and renewal identifiers, not card numbers.

Deletion

Delete individual audits from their detail page. Delete the account from the dashboard after cancelling an active plan. Database relations remove associated sessions, audits, and evidence.

Launch note

This document describes the implemented product behavior but is not a substitute for jurisdiction-specific legal review, processor agreements, retention policy, and company contact details before live launch.