Privacy Policy

Data Entryless helps retail businesses and wholesale brands eliminate manual data entry. To provide the Service, we process the documents you upload — such as invoices, purchase orders, and line sheets — and the business data they contain, and we exchange data with third-party systems you choose to connect, such as your point-of-sale or e-commerce platform.

This policy describes what we collect, why we collect it, where it lives, who can see it, how long we keep it, and the choices you have. If anything is unclear, email us at hello@dataentryless.com — we will give you a straight answer.

In plain English: we handle your business documents so you don't have to type them in. This page explains exactly what happens to that data.

Account information. When you create an account, our authentication provider, Clerk, collects your name, email address, and login credentials (or your third-party sign-in identity, such as a Google account), along with your organization or workspace membership. We receive your basic profile and a unique account identifier from Clerk; we do not store your password.

Documents you upload. The core of the Service is the documents you provide — invoices, purchase orders, line sheets, and similar files — and the structured data our AI extracts from them, such as vendor names, styles, sizes, colorways, quantities, costs, and payment terms. These documents may contain personal information about other people, such as vendor or sales-rep contact details; you are responsible for having the right to share that information with us.

POS and integration data. When you connect a third-party platform such as Shopify or Lightspeed, we collect the credentials or access tokens needed to connect (stored encrypted), and we exchange product, catalog, inventory, and receiving data with that platform on your behalf.

Usage and device information. Like most online services, we automatically collect basic technical information when you use the Service — such as IP address, browser type, pages visited, and actions taken — which we use for security, debugging, and improving the Service.

Communications. If you contact us, join our waitlist, or request a demo, we collect the information you provide, such as your name, email address, company, and message.

In plain English: we collect your account details (through Clerk), the documents you upload, the data needed to talk to your POS, and standard usage logs.

We use the information we collect to:

• provide the Service — including extracting structured data from your documents, matching items against your catalog, computing suggested pricing, generating barcode labels, and syncing data to connected platforms at your direction;
• create and manage your account, workspace, and organization membership;
• communicate with you about your account, security, transactions, and updates to the Service;
• secure the Service, prevent fraud and abuse, and enforce our Terms of Service;
• debug, analyze, and improve the Service, including through deidentified or aggregated data; and
• comply with legal obligations.

We do not sell your personal information, and we do not use the contents of your uploaded documents for advertising.

When you upload a document, we send it to a third-party artificial intelligence provider to read the document and extract structured data from it. The AI provider processes your document on our behalf to return the extracted fields; it acts as our service provider under contractual confidentiality and data-protection obligations.

We do not permit our AI providers to use your documents or extracted data to train their general-purpose models.

Extracted data is presented to you for review before you rely on it or sync it downstream. We may retain documents and their extracted data together so you can re-review, correct, and audit past extractions, and so features like catalog matching and reorder detection work across your invoice history.

In plain English: your invoices are sent to an AI service to be read, that service can't keep them for training, and you always get to review what the AI extracted.

Your data — including uploaded documents, extracted data, catalog records, and workspace settings — is stored in Convex, our cloud database and file-storage provider, on infrastructure hosted in the United States. Our web application is hosted on Vercel. Authentication data is stored by Clerk.

Credentials for connected third-party platforms (such as Shopify or Lightspeed access tokens) are stored encrypted, scoped to your organization, and used only to perform the syncs you initiate.

If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your jurisdiction.

Service providers. We share information with vendors that help us operate the Service — including Clerk (authentication), Convex (database and file storage), Vercel (hosting), and our AI extraction providers. Each processes your information only to provide services to us.

Platforms you connect. When you connect and sync to a third-party platform such as Shopify or Lightspeed, we send data to that platform at your direction (for example, creating products or receiving inventory). That platform's own privacy policy governs its handling of the data it receives.

Your workspace. Documents and data in your workspace are visible to the members of your organization, according to the access you and your organization's administrators configure.

Legal and safety. We may disclose information if we believe it is reasonably necessary to comply with a law, regulation, or legal process; to protect the safety, rights, or property of Data Entryless, our users, or the public; or to detect and prevent fraud or security issues.

Business transfers. If Data Entryless is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.

We do not sell or rent your personal information to third parties.

We retain your account information, uploaded documents, and extracted data for as long as your account is active, so your invoice history, catalog, and audit trail remain available to you. You can delete individual documents and their extracted data from within the Service at any time.

When your account is closed, we delete or deidentify your personal information within a reasonable period, except where we need to retain it to comply with legal obligations, resolve disputes, enforce agreements, or maintain security logs. Deidentified and aggregated data may be retained without limit.

We take security seriously. Data is encrypted in transit using TLS and encrypted at rest by our storage providers. Third-party platform credentials are additionally encrypted at the application level. Access to production data is restricted, and authentication is handled by Clerk with support for modern sign-in methods.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you as required by applicable law. Please notify us immediately at hello@dataentryless.com if you suspect unauthorized access to your account.

Depending on where you live, you may have rights regarding your personal information, including the right to access, correct, export, or delete it, and the right to object to or restrict certain processing. We extend the core of these rights to all users:

• Access and export. You can access your documents and extracted data in the Service, and export extracted data (for example, as CSV). You can also request a copy of the personal information we hold about you.
• Correction. You can correct extracted data in the review workflow and update your account details in your account settings.
• Deletion. You can delete documents from within the Service, and you can request deletion of your account and associated personal information by emailing us.
• Marketing opt-out. You can opt out of marketing emails at any time using the unsubscribe link; service and security notices will still be sent while you maintain an account.

To exercise any of these rights, email hello@dataentryless.com. We will verify your request and respond within the time required by applicable law. We will not discriminate against you for exercising your privacy rights.

In plain English: you can see, export, fix, or delete your data — and if you want your whole account gone, one email does it.

We use cookies and similar technologies that are necessary to operate the Service — primarily session cookies set by Clerk to keep you signed in and protect your account. These are essential cookies; the Service does not work without them.

We may also use analytics that rely on cookies or similar identifiers to understand how the Service is used and to improve it. We do not use cookies for third-party advertising. You can control cookies through your browser settings, but blocking essential cookies will prevent you from signing in.

The Service is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you — for example by email or a notice in the Service — before the changes take effect. The “Last updated” date at the top of this page shows when this policy was most recently revised. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

Questions, concerns, or requests about this Privacy Policy or your personal information? Email us at hello@dataentryless.com.