---
title: Privacy policy
Metadescription: How Wholesale Handler handles your data. Plain-English privacy policy covering what I collect, how I use it, and your rights.
author: Dan Edwards
author_role: Founder
updated: 14-05-2026
---

# Privacy policy

By **[Dan Edwards](https://wholesalehandler.com/about)**, Founder.

## The short version

Wholesale Handler is built and run by me, Dan Edwards. I collect the minimum data needed to run the service. I don't sell it, share it with advertisers, or do anything unexpected with it. Your payment details go directly to Stripe - I never see your card numbers.

## What I collect

When you create an account, I store

-   Your name and email address
-   Your business name
-   A hashed version of your password (never stored in plain text)

As you use the service, I also store

-   Products, orders, invoices, and customer relationships you create
-   Business settings you configure (delivery preferences, packing slip text, invoice details)
-   Your currency (detected automatically from your country) and timezone

I do not collect or store payment card details. Payments are handled entirely by Stripe.

## What I use it for

Running the service. That's it.

I send the following emails, all transactional

-   Email confirmation when you sign up
-   Password reset requests
-   Email change verification
-   Customer invitations (sent by merchants to their customers)
-   Invoices
-   Restock notifications
-   Subscription confirmation
-   Account deletion notifications (sent to connected businesses)
-   Inactive account warnings (if you haven't signed in for over a year)

I do not send marketing emails.

## Where your data is stored

Different parts of the service are hosted across the UK, EU, and US

-   Database hosted by Neon (AWS EU-West-2, London)
-   Application hosted by Fly.io (London)
-   Emails sent via Postmark (EU endpoint)
-   Cache hosted by Upstash (AWS US-East-1, N. Virginia)

The cache only stores storefront content that merchants have explicitly submitted for publication. No personal information, account details, or authentication data is cached.

Stripe processes payment data on their own infrastructure under their own privacy policy.

## Who else has access to your data

| Service | What they receive | Why |
| --- | --- | --- |
| Stripe | Payment and billing data | Processes subscriptions |
| Postmark | Email addresses | Delivers transactional emails |
| Neon | All account data | Hosts the database |
| Fly.io | All account data | Hosts the application |
| Inngest | Event metadata | Handles background email delivery |
| Sentry | Error details, IP addresses, browser information | Monitors errors and performance |
| Upstash | Storefront content that merchants have submitted for publication (business details, product listings, prices) | Serves approved public storefront pages |

None of these services use your data for their own marketing purposes.

## AI and machine learning

I don't use your data, or your customers' data, to train artificial intelligence or machine-learning models.

I also don't share your data with any AI provider for training purposes. None of the sub-processors above receives your data for AI training, and the contracts I have with them prohibit it.

Wholesale Handler doesn't currently use generative AI inside the product. If I add features that do (for example, drafting an email to a customer based on order context), I'll explain in advance which AI provider is involved, what data is sent to it, and how to opt out. I'll never send your data to a third-party AI provider without telling you first.

## Cookies

Wholesale Handler sets the following cookies

| Name | Purpose | Duration |
| --- | --- | --- |
| token | Keeps you signed in to your account | 7 days |
| menu\_sidebar | Remembers whether the sidebar menu is open or closed | 7 days |
| demo\_industry | Remembers which industry demo you viewed so the demo stays consistent as you browse | 90 days |
| current\_party | Remembers whether you are viewing the demo as a seller or buyer | 365 days |
| trading\_currency | Remembers your preferred currency for products, orders and invoices | 365 days |
| billing\_currency | Remembers your preferred currency for the Wholesale Handler subscription | 365 days |

During checkout, Stripe may set its own cookies (such as \_\_stripe\_mid and \_\_stripe\_sid) for fraud prevention. I don't control these - see [Stripe's cookie policy](https://stripe.com/gb/cookie-settings) for details.

## Browser local storage

I store a small amount of functional data in your browser's local storage to keep the demo working between page loads

| Name | Purpose |
| --- | --- |
| demo-access-token-merchant | Remembers your demo session so your changes are saved |
| demo-access-token-customer | Remembers your demo session for the customer view |
| dashboard-period | Remembers your selected time range on the dashboard |

This data stays in your browser and is not sent to any third party.

## Analytics

I use Umami, a self-hosted analytics tool that does not use cookies and does not collect personal data. It records anonymous page views, device types, browsers, and country-level location. No individual visitors are identified or tracked.

I do not use tracking pixels, advertising scripts, or any analytics service that profiles users.

## Error monitoring

I use Sentry to detect and fix errors. When something goes wrong, Sentry receives technical details about the error including your IP address and browser information.

## How long I keep your data

Your data is kept for as long as your account is active. If you cancel your subscription, your data remains available in read-only mode.

If you haven't signed in for over a year, I'll send you an email with 30 days notice before scheduling your account for deletion. Signing in at any point resets the clock.

When a merchant deletes a customer, financial records (orders and invoices) are preserved for accounting compliance.

## Deleting your data

You can delete your business data (products, orders, invoices, customers) from the [settings](/settings) page in the app.

To delete your account entirely, go to the Danger zone section on the [settings](/settings) page. Account deletion is scheduled immediately but your data is kept for 90 days in case of mistakes or fraudulent account takeovers. After 90 days, all data is permanently removed.

If you change your mind during the 90-day window, email me at [dan@wholesalehandler.com](mailto:dan@wholesalehandler.com) and I can restore your account.

## Your rights

Under UK GDPR, you have the right to

-   Access the personal data I hold about you
-   Correct inaccurate data
-   Request deletion of your data
-   Export your data in a portable format
-   Object to processing of your data

To exercise any of these rights, email me at [dan@wholesalehandler.com](mailto:dan@wholesalehandler.com).

## Changes to this policy

If I make changes, I'll update the date at the top of this page. For significant changes, I'll notify you by email.

## Contact

Dan Edwards

[dan@wholesalehandler.com](mailto:dan@wholesalehandler.com)