Duty Ledger · policy

Privacy notice

What we collect, why, and who touches it — short, because we collect little. Data minimization is the design here, not a slogan.

1. What we collect

• Your email address — when you join the founding list or subscribe.
• Your two signup answers — whether you have ACE portal access, broker-sent 7501s, only broker invoices, or aren't sure; and whether you'd spend ~15 minutes emailing your broker for them. They tell us how to build your first landed-cost statement, nothing more.
• Your entry documents, only when you choose to send them (broker invoices, 7501s) — to produce your statements and, at launch, your ledger.
• Ordinary server logs your browser sends to any website (IP address, browser type, timestamp), kept briefly to keep the service secure and running.

That's the whole list. The service needs a business email and customs paperwork — not Social Security numbers, dates of birth, or other sensitive personal identifiers, and we don't ask for them. We can't leak what we never hold.

2. Why we collect it

Only to deliver what you signed up for: the per-category duty digest, your landed-cost statements, and — at launch — the self-serve ledger. Your email also carries the occasional service message. There is no other purpose.

3. Who processes it (our sub-processors)

Kept short and named plainly:

• Cloudflare — hosting, and the database and file storage your records live in.
• Resend — delivers the digest and transactional emails.
• Paddle — our merchant of record; it runs checkout, cards, and tax. Card details go straight to Paddle and never touch our servers.

Each one processes your data only to do its job for us. We never sell, rent, or share your data with anyone else.

4. Cookies & tracking

No advertising trackers, no third-party marketing cookies, no cross-site profile of you. If we ever turn on analytics it is Cloudflare's cookieless, privacy-first Web Analytics — counts, not surveillance.

5. How long we keep it, and your control

We keep your data while your subscription is active. Digests and statements already delivered, and any exports, stay yours if you cancel. Ask and we delete the documents we hold. To access, correct, or delete your data, email khoile5399@gmail.com — one inbox, answered daily.

6. Where it's processed

Your data is stored on Cloudflare's infrastructure and handled by the sub-processors above. Duty Ledger is operated from Vietnam by its founder; by using it you understand your data is processed that way.

7. Children

This is a business tool, not directed at anyone under 18, and we don't knowingly collect their data.

Privacy notice as printed 2026-07-19 · contact khoile5399@gmail.com. Changes are dated on the changelog and only ever narrow what we collect or widen your control.

---