Privacy Policy
Last updated: October 30, 2026
DeliveryMargin is a service of Shadowfax Industries LLC, a California company ("we", "us"). This policy covers deliverymargin.com and the DeliveryMargin app. It says what we collect, why, who else handles it, and what you can do about it. If anything here is unclear, email [email protected].
The short version
- We collect what we need to run DeliveryMargin.
- We don't sell your personal information, and we don't use your data to train AI.
- Your name, email, business name, and locations are encrypted in our account records.
- You can delete your account and your data yourself, at any time, in Settings.
What we collect
When you create an account
- Your name and email address. If you sign in with Google, Microsoft, or Apple, we receive your name and email from them.
- Your business name, your location names, and, if you choose to add them, each location's street address, city, and state.
When you use DeliveryMargin
When you pay
- Payments go through Link, Stripe's checkout service, which is the seller of record for your subscription. Link collects your card or other payment details; we never see your full card number. Stripe tells us your subscription status, plan, and billing dates, and keeps its own record of each payment, which can include your name and email.
Automatically
- Like any website, our hosting provider (Cloudflare) handles the technical details of each request, such as your IP address and browser type, to deliver pages and keep the service secure.
How we use it
To run DeliveryMargin for you, which means turning your statements into your dashboard, plus:
- to sign you in and keep your account secure;
- to bill your subscription and apply referral credits;
- to send the emails the service needs: welcome, trial reminders, payment, plan change, cancellation, and referral credit emails. You can turn off trial reminders with the link in those emails;
- to answer your questions, and to fix problems you report;
- to meet our legal obligations.
We never use what's in your statements for advertising, and we don't sell your personal information.
Who else handles your data
We use a small number of service providers. Each handles what its job needs.
| Provider | What it does for us |
| Cloudflare | Hosts the website and app, and stores our database, your uploaded files, and our backups |
| Clerk | Handles sign-up and sign-in, and stores your login details |
| Stripe and Link | Process payments; Link is the seller of record |
| Anthropic | Identifies which platform a statement came from (see "AI" below) |
| Resend | Delivers our emails |
| Google, Microsoft, Apple | Sign-in, only if you choose to use them |
We may also share information:
- within the Shadowfax Industries family of companies, and with our business partners and affiliates, to run and improve our services under this policy;
- if the law requires it, or to protect our rights or someone's safety;
- with a new owner, if DeliveryMargin or Shadowfax Industries is ever sold, merged, or reorganized. Your data would stay covered by this policy.
AI
When you upload a statement, we send its first 20 lines (the column headings and the first 19 rows) to Anthropic's Claude, so it can tell us which platform the file came from and what each column means. Nothing else you upload or store goes to an AI. Under Anthropic's commercial terms, Anthropic doesn't use this data to train its models.
What other people can see
- Share links. When you create a share link, anyone who has the link can see that snapshot: your business name, the location and date range you chose, and the figures in it. Each time you share, you get a new link. Links don't expire on their own. To have one turned off, email us and we'll disable it; we can also disable links at our discretion. Deleting your account removes them all. Share a link only with people you'd show those numbers to.
- Referrals. If you sign up with someone's referral link, their Referrals page shows a masked version of your email address, for example j•••@example.com, and whether you've subscribed.
- Us. We look at an account's records only to answer that account's support or billing questions, or to fix a problem with the service.
Cookies and tracking
Today, we use only the cookies needed to sign you in and keep the service secure.
We may add analytics or advertising tools in the future, such as measuring which ads bring people to our website. If we do, we'll update this section before they go live, and we'll offer the opt-outs the law requires where you live. We don't currently respond to browser Do Not Track signals.
How we protect your data
- Everything sent between your browser and our servers is encrypted in transit.
- Your name, email, business name, and location details are encrypted in our account records with AES-256-GCM, and the keys are kept separately.
- Your uploaded files are encrypted at rest by Cloudflare.
- Each account can see only its own data, and our systems check that on every request.
No system is perfectly secure. If we learn of a breach that affects your data, we'll tell you as the law requires.
How long we keep it
- While you have an account, including after you cancel, we keep your data so you can pick up where you left off.
- When you delete your account (Settings → Danger Zone), we permanently delete your statements, uploaded files, orders, items, locations, share links, and dashboard history, and we remove your name and email.
- We keep a record of your account's billing and referral history so we can answer billing and referral questions:
- a scrambled (hashed) form of your email, which lets us find your account if you contact us about it;
- your subscription and payment events, including Stripe's copy of each event, which can include your name and email;
- your referral records and any free months we gave you.
- Backups of our database expire within 30 days.
- Our email provider keeps its own log of emails we've sent you.
- Link and Stripe keep their own payment records under their own policies. You can ask Link to delete your data at link.com.
Your choices and rights
- See and export your data: your dashboard can export your figures as CSV or PDF. For anything else we hold about you, email us.
- Correct it: in Settings, or by emailing us.
- Delete it: in Settings → Danger Zone, or by emailing us.
- Stop trial reminders: use the link at the bottom of those emails.
Depending on where you live, including California and other US states, the EU, and the UK, you may have further rights: to know what we hold, to get a copy, to correct or delete it, and to object to certain uses. Email [email protected] and we'll respond within the time the law requires. We'll never treat you differently for using these rights.
We don't sell personal information.
Children
DeliveryMargin is for businesses and people 18 and older. We don't knowingly collect data from anyone under 18.
Where your data is
We're based in the United States, and our providers process data in the US and, through Cloudflare's network, elsewhere. If you use DeliveryMargin from outside the US, your data will be processed in the US.
Changes to this policy
We may update this policy from time to time. When we do, we'll post the new version here with a new date at the top. If the law requires us to tell you about a change directly, we will.
Contact
For anything about your privacy or this policy:
Shadowfax Industries LLC
6754 Bernal Ave, Suite 740
Pleasanton, CA 94566
United States
[email protected]