Legal notice: This document requires review by qualified counsel before public launch.

Privacy Policy

Last updated: May 2026

1. Who We Are

CogsHelper is operated by 1134 Digital LLC. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

We collect the following categories of data:

Account information: your name, email address, and hashed password.
Inventory and listing data: records, prices, descriptions, images, and location notes you enter.
Integration credentials: encrypted Discogs and WooCommerce API tokens you connect.
Usage data: log entries, error reports, and session metadata used to operate and improve the service.
Device and browser information: browser type, IP address, and user-agent string for security and fraud prevention.
SMS opt-in data (for participating shops): mobile numbers and consent records for customers who have opted in to receive SMS messages from a shop. See our SMS Opt-In page for full details.

3. How We Use Your Data

We use your data to:

Provide, maintain, and improve the CogsHelper service.
Send transactional emails (account verification, password resets, billing receipts).
Detect and prevent fraud, abuse, and security incidents.
Deliver SMS messages on behalf of participating record shops to customers who have explicitly opted in.
Comply with legal obligations.

We do not use your data to serve advertising, and we do not sell or rent your data to third parties.

4. Data Sharing

We share your data only with the third-party services necessary to operate CogsHelper:

Resend — transactional email delivery.
Twilio — SMS message delivery for participating shops.
Cloudflare — CAPTCHA verification and DDoS protection.
Railway / Postgres — database hosting.
Discogs / WooCommerce — at your direction, when you connect these integrations.

Each of these services has its own privacy policy. We do not permit them to use your data for their own purposes beyond fulfilling the service they provide to us.

5. Cookies and Local Storage

CogsHelper uses an HttpOnly session cookie to maintain your login session in the web application. We do not use cookies for advertising or tracking. We store your access token in memory only (not localStorage) to reduce XSS exposure.

6. Data Retention

We retain your account and inventory data for as long as your account is active. When you request account deletion, we delete your personal data within 30 days, subject to our legal retention obligations (e.g., billing records).

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. You can exercise these rights through Settings → GDPR, or by emailing support@cogshelper.com.

8. Security

We use industry-standard security measures including encryption at rest, TLS in transit, and hashed password storage. No system is perfectly secure; please use a strong unique password and notify us immediately if you suspect unauthorized access to your account.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email. Your continued use of CogsHelper after changes are posted constitutes your acceptance of the updated policy.

10. Contact

Questions about this policy? Email us at support@cogshelper.com.