Privacy policy

• Your sales data stays yours. There are no advertising or analytics trackers on this site, and no third party is given your data to use for their own purposes.
• You can download everything as one spreadsheet, and delete your account and every row of it, from Settings, without asking anyone.
• Card details never reach our servers. Stripe handles payment.
• whatROI is not affiliated with whatnot, and does not have access to your whatnot account. It only sees the report files you upload.
• The whatROI Lens browser extension reads your reports on your own machine and uploads nothing. It makes one request a day, for the fee schedule, and that request carries nothing about you.

Only what the product needs to work. In practice that is four things.

• Your account. Your email address, and either a hash of your password or an identifier from the sign-in provider. Passwords are hashed with Argon2 and the original is never stored.
• What you import or type. whatnot Weekly Orders Reports and Show Reports, and everything in them: orders, listing titles, categories, fees, shipments, and the buyer usernames, states and countries whatnot puts in the file. Then the things you record yourself — inventory, lots, shows, saved views, and operating expenses including any name you enter as the person or company paid.
• Your settings. Display name, region, currency, time zone, and the thresholds that decide what counts as slow stock or a low return.
• Billing, if you subscribe. A Stripe customer identifier, a subscription identifier and its status. Card numbers go directly to Stripe and are never sent to, or stored by, whatROI.
• Invites. Your invite code, and, if you signed up from another seller's link, which account invited you. The seller who invited you sees only a count of the accounts their link made, never who they are.

Diagnostics are also recorded: errors thrown by the server or by your browser (the message, the screen it happened on, and React's error digest), and the fact that an account signed up, imported, upgraded, exported or was deleted. These are used to find and fix breakages. They are deleted after 90 days.

whatnot's reports contain the usernames of people who bought from you, and their state and country. whatROI processes that information on your instructions, to produce the figures and the buyer lists you asked for. It is not used for anything else, and it is never combined across sellers.

You are responsible for what you upload. Only upload reports for an account you sell on, and only use what is in them for running your own business.

whatROI Lens is a free Chrome extension for whatnot sellers, published by us. It reads a Show Report or Weekly Orders Report and shows what you kept after fees. It is a separate thing from the whatROI account above, and it does not need one.

• Your reports are never uploaded. The file you drop in is parsed in your own browser and the figures are stored on your own device, using the browser's local storage. They are not sent to whatROI or to anyone else, they do not sync between your machines, and each report is deleted automatically thirty days after it is read. Clearing the extension's data, from its own settings page or by removing the extension, deletes them immediately.
• One request goes out, and it carries nothing. Once a day the extension fetches the published whatnot fee schedule from https://www.whatroi.com/api/rates, so its arithmetic stays right when rates change. That request has no body, no query string and no cookies: it says nothing about you, your orders or your account. It is the only network request the extension makes.
• What it reads on whatnot.com. On your own seller pages it reads the order figures already displayed on screen, to total them and subtract what your shipping labels cost. That reading happens in the page and stays there. It has no access to your whatnot login, and it never sends the contents of any whatnot page anywhere.
• Sending a report here is a deliberate act. Nothing moves from the extension to a whatROI account unless you press “Save to whatROI”. That opens this site, asks the extension for the one file you chose, and imports it under your account. Nothing else is transferred, and nothing is transferred in the background.
• No analytics, no trackers, no advertising. The extension contains no analytics code and no third-party scripts, and it collects no personal information of any kind. Notifications and the marketplace sourcing badge are optional and are only ever switched on by you.

whatROI Lens is not affiliated with, endorsed by, or connected to whatnot.

There is one cookie that matters: the session cookie that keeps you signed in. It is httpOnly, so scripts cannot read it, restricted to this site, and marked secure in production. Signing out deletes it and invalidates the session behind it.

A second short-lived cookie is set after signup so the “check your inbox” screen knows which address to show. Following another seller's invite link sets a cookie holding their invite code for up to 60 days, so the account you make is credited to them. Opening the sample shop sets a cookie for two hours that shows the sample instead of the sign-in page; it names no one. Arriving from an ad or another site sets a cookie for 90 days holding what that link said about itself — its campaign tags or advertising click id, and the site it came from — so that a signup can be counted against the ad that brought it; if you make an account it is stored with it, and if you do not it expires. No cookie here is read by anyone else: nothing is shared with an advertising network, no third party tracks you across other sites, and the content security policy on every page only allows scripts from this site.

Four companies help run the service. Each one only receives what it needs for its job.

• Vercel hosts the application and serves the pages.
• Supabase hosts the database your rows live in, in Canada.
• Stripe takes payment and holds the card details.
• Resend delivers the email the service sends: password resets and the optional Monday reminder.

Nobody else. Your data is not sold, rented, or handed to advertisers or data brokers. It would be disclosed if the law required it, and it would be transferred if the business were ever sold, in which case this policy travels with it.

Both are buttons in Settings, and neither needs anyone's permission.

• Download everything gives you one Excel workbook with a sheet for every table your data lives in, on any plan.
• Delete account cancels the Stripe subscription first, then removes the login and every row belonging to it. You type your email address to confirm. It cannot be undone.

If you are in the UK, the EU or another place with data protection law, those buttons cover the rights to access and erasure directly. For anything else — correction, restriction, objection, or a copy in another format — email support@whatroi.com and it will be handled.

Your sales data is kept for as long as your account exists, because the product is a ledger and a ledger with holes in it is no use. Diagnostics are deleted after 90 days. Deleting your account removes everything immediately; backups taken before the deletion age out on their provider's schedule.

• Everything travels over HTTPS, and the connection from the application to the database is verified against Supabase's own root certificate rather than trusting whatever certificate is presented.
• Row level security is on in the database, and every query is scoped to the signed-in seller. One seller cannot read another's rows.
• Passwords are hashed with Argon2. Session tokens are random and stored only as a hash.
• Pages set a strict content security policy and refuse to be framed, which stops script injection and clickjacking.

No system is perfect. If you find a security problem, email support@whatroi.com and it will be taken seriously.

whatROI is for people running a selling business and is not intended for anyone under 18. If you believe a child has created an account, email and it will be removed.

When this policy changes, the date at the top changes with it. If a change materially affects what is collected or who sees it, account holders will be told by email before it takes effect.

whatROI is run from California, so this comes up. Whatever else the law does or does not require of a business this size, two things are worth stating plainly:

• Your personal information is not sold, and it is not shared for cross-context behavioural advertising. It never has been. There is no advertising network anywhere near this product.
• You can see what is held, correct it, and delete it. Download everything and Delete account in Settings do the first and the last without anyone's involvement; email for a correction and it will be made.

Asking for any of that will not get you worse service, a higher price, or a smaller product. There is nothing to retaliate with.

whatROI is a sole proprietorship operated from California, in the United States. support@whatroi.com reaches a person, and it is the right address for anything in this policy: a question, a correction, a deletion, or a security problem.