Privacy Policy

Last updated October 6, 2026

The short version. We collect what we need to run your account and nothing more. We never see your customers’ full card numbers — Stripe handles those. The camera scanner reads barcodes on your device and never uploads pictures. We do not sell personal information, and we do not run ads or third-party tracking. You can ask for a copy of your data or ask us to delete it.

Each section starts with a one-line summary. The full text under each summary is the actual policy.

1. Who we are and what this covers

In plain EnglishRooted Coast Design runs Ledger, and this explains what happens to information in it.

Rooted Coast Design LLC (“Rooted Coast,” “we,” “us”), an Oregon limited liability company, operates Rooted Coast Ledger (the “Service”) at rootedcoastledger.com. This policy explains what we collect, why, and what you can do about it. It does not cover Stripe, eBay, or any other site you reach from ours; each has its own policy.

2. Two kinds of information

In plain EnglishYour account info is ours to look after. Your customers’ info belongs to you, and we only store it for you.

Merchant information — we decide how it is used

Information about the businesses and people who hold Ledger accounts. We are the controller of this information, and this policy governs it.

Your customers’ information — the Merchant decides

Information a Merchant enters about their own customers, such as a name and email on an invoice. We are a processor of it: we store and process it on the Merchant’s instructions to provide the Service, and we do not use it for our own purposes.

If you are a customer of a shop that uses Ledger and want your information seen, corrected, or deleted, contact that shop. They control it. We will help them act on your request.

3. What we collect

In plain EnglishYour login, your business details, and the records you create. Not card numbers, not camera pictures, not tracking data.

You give us

Account details — your email address and a password, stored only as a secure hash we cannot read.
Business details — business name, town, business type, and sales tax rate.
Records you create or import — items, prices, barcodes, SKUs, stock counts, sales, refunds, tips, estimates, invoices, and any customer names or emails you add. When you import a spreadsheet, we keep the rows you choose to import, not the file itself.
Staff names and PINs — PINs are stored only as a secure hash, so nobody, including us, can read them.
Anything you send us — the contents of support emails.

Created automatically

Sign-in session data — a cookie that keeps you logged in.
Server and security logs — IP address, browser type, pages requested, times, and errors, recorded by our hosting provider and used to keep the Service running and secure.

What we do not collect

Full card numbers, security codes, or expiry dates. Card details are entered on Stripe’s pages and handled by Stripe. We may see the last four digits, the card brand, and whether a payment succeeded.
Camera pictures or video. When you scan with your camera, the barcode is read on your device and only the barcode number is used. No image is uploaded or stored. Your browser asks your permission before the camera turns on, and it turns off when you close the scanner.
Bank account and ID details for payouts. Stripe collects those directly during its own setup.
Advertising or cross-site tracking data. We run no ad networks, no analytics pixels, and no third-party trackers.

4. The no-account demo

In plain EnglishThe demo keeps everything on your own phone or computer. We don’t receive any of it.

The demo at rootedcoastledger.com/demo asks for a business name and town so it can label your practice register. That information, along with any demo items and demo sales, is saved only in your own browser’s storage on that device. It is not sent to us. “Start over” clears it, and so does clearing your browser’s site data. Demo payments are pretend; nothing is charged.

5. Why we use it

In plain EnglishTo run the app for you, keep it safe, and follow the law. Not to market to you or your customers.

To create and operate your account and provide the Service.
To process payments through Stripe and record the results.
To provide support and reply to you.
To secure the Service, investigate abuse, and prevent fraud.
To send service messages about your account, billing, or important changes.
To meet legal, tax, and accounting obligations.
To fix problems and improve the Service, using aggregated or de-identified information wherever that is enough.

We do not use your business records or your customers’ information to build marketing profiles, and we do not use them to train machine-learning models.

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are used in U.S. state privacy laws. We never have.

6. Who we share it with

In plain EnglishOnly the three companies that make the app work — and the law, if it makes us.

Stripe, Inc. — payment processing and merchant setup. Stripe’s privacy policy.
Supabase — the database and sign-in system that stores your account and records.
Vercel — hosting and delivery of the app, and server logs.

Links you choose to open. If you tap an item’s “eBay sold prices” link, your browser opens eBay’s website with that item’s barcode or name as the search. eBay then sees that search under its own privacy policy. We do not send eBay anything else.

We may also disclose information:

when required by law or valid legal process, or to protect our rights, your safety, or others’ safety; and
as part of a merger, acquisition, or sale of assets, in which case we will tell you before your information becomes subject to a different policy.

7. Cookies and storage on your device

In plain EnglishOnly what’s needed to keep you signed in and remember a couple of settings. No ad or analytics cookies.

We use cookies that are strictly necessary: a session cookie that keeps you signed in and security cookies that protect against forged requests.

We also use your browser’s own storage for a few device settings — for example, whether a register should print every receipt automatically — and to hold the demo. These stay on your device.

You can block cookies in your browser, but the Service won’t be able to keep you signed in.

8. How long we keep it

In plain EnglishAs long as your account is open, then at least 30 days so you can export, then we delete it.

While your account is open — we keep your account and records so the Service works.
After you close your account — we keep your data for at least 30 days so you can export it, then delete or de-identify it within a reasonable time.
Longer where required — transaction and tax records may be kept as long as the law requires, and backups may last a limited time before rotating out.

9. Security and where it’s stored

In plain EnglishEncrypted, locked to your own account, and stored in Oregon. No system is perfect, and we’ll tell you if something happens.

We protect information with encryption in transit (HTTPS) and at rest, hashed passwords and PINs, database rules that limit each account to its own records, and access limited to people who need it. Our database is hosted in the United States, in the Oregon region.

No system is perfectly secure. We cannot guarantee absolute security, and you are responsible for keeping your password confidential. If a breach affects your personal information, we will notify you as the law requires.

The Service is meant for use in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States.

10. Your rights

In plain EnglishAsk to see, fix, download, or delete your information, and we’ll do it.

Depending on where you live — including under the Oregon Consumer Privacy Act and similar laws in other states — you may have the right to:

know what personal information we hold about you and get a copy;
correct inaccurate information;
delete your information;
get your information in a portable format; and
not be treated differently for using any of these rights.

Because we do not sell personal information, share it for targeted advertising, or use it for profiling with legal or similarly significant effects, there is nothing to opt out of in those categories.

To use a right, email hello@rootedcoastdesign.com. We will confirm it’s you, usually by checking you control the account email, and respond within 45 days (extended once where the law allows, and we’ll tell you if so). You may use an authorized agent where the law permits. If we say no, you can appeal by replying to our decision, and we will answer the appeal within 45 days.

11. Children

In plain EnglishLedger is for businesses, not kids.

The Service is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you think a child has given us information, email us and we will delete it.

12. Changes to this policy

In plain EnglishIf we change this in a way that matters, we’ll tell you first.

We may update this policy. We will change the “Last updated” date above, and for material changes we will let account holders know by email or in the Service before the change takes effect.

13. Contact

Questions, requests, or complaints about privacy:
Rooted Coast Design LLC
Bandon, Oregon, United States
hello@rootedcoastdesign.com