Terms & privacy.
Version 2026-10-11-draft-1. These documents are not approved for a commercial launch. The operator’s legal name, registered address, privacy/support contacts, governing terms, refund policy and processor arrangements must be completed and reviewed before live billing is enabled.
Terms of Service — draft
CurdLedger helps dairy producers estimate product costs and margins from their own inputs. Illustrative recipes and numbers are not production instructions, market prices, accounting records or tax advice. Verify your inputs and decisions independently.
Accounts and use
The local calculator stores calculations on your device. A CurdLedger account uses sign-in with a one-time code sent to your email address. You are responsible for protecting access to that email account, enabling additional security when appropriate, and keeping your own backups. The service is intended for adult business users.
Subscriptions
Paid cloud workspace access requires an eligible, current subscription. The available plan, recurring price, billing interval, trial, taxes and renewal terms must be shown in Lemon Squeezy hosted checkout before purchase. Purchases are sold by Lemon Squeezy as Merchant of Record under its checkout terms. This preview is not accepting live purchases.
Plan changes and payment details are managed in the Lemon Squeezy customer portal. Review its displayed proration and effective date. Cancellation stops future renewals; access continues until the confirmed paid-through date. An unpaid or expired subscription stops cloud saving. Pausing with voided invoices stops cloud access until resumed. Read/export access to existing account data remains available.
Deletion, refunds and statutory rights
Deleting an account immediately ends cloud access and requests cancellation of renewals before removing app data. It is not a refund request. Refund terms, support escalation, any applicable consumer withdrawal rights and required digital-service acknowledgements must be finalized before launch. Nothing in this draft purports to waive statutory rights.
Launch details still required
The operator must publish its legal identity, contact information, service and support commitments, refund/withdrawal procedures, applicable terms for each market, and dispute procedures. Material policy updates will require a new policy version and acceptance at checkout.
Privacy Notice — draft
The CurdLedger operator is responsible for app account and workspace processing. Its identity and privacy contact must be supplied before commercial launch. Lemon Squeezy separately handles purchases, tax and its transaction records under its Privacy Policy.
Information processed
- Your email address is stored to send sign-in codes and may prefill checkout. Your account has a random internal identifier. CurdLedger has no passwords; sign-in codes and session tokens are stored only as hashes.
- Products, material costs, margin calculations and history are uploaded only when you choose Save to cloud. Local calculator data otherwise stays in your browser.
- We store subscription identifiers and status, billing dates, invoice amount/currency/tax metadata, policy acceptance, privacy choices, privacy requests and security activity.
- Authenticator secrets are encrypted; recovery codes and session tokens are stored as hashes. Raw payment-card data, full webhook bodies and invoice download links are not stored.
- If you join the launch waiting list, we store your email, the country and product type you choose, your interest in the founding offer and the version of the wording you agreed to. We use it only to email you about the launch and that offer. Ask us to remove it at any time.
- Invoice addresses you submit for a PDF are sent to Lemon Squeezy for generation and not persisted by CurdLedger.
Purposes and proposed legal bases
Account, workspace and subscription processing support providing the requested service. Limited security logs and fraud-prevention records support service security. Optional tracking requires an affirmative choice; no optional trackers are installed in this version. Terms acceptance and acknowledgement of this notice are separate from optional marketing consent. The operator must document the final legal bases, interests assessment and processing register before launch.
Cookies and advertising choices
Optional analytics and advertising are off by default. You can accept, reject or change them independently. “Do Not Sell or Share My Personal Information” disables optional advertising. Global Privacy Control overrides advertising permissions where detected. Your choice is available regardless of location. The current application does not send data to Meta or other advertising networks.
Access, portability and deletion
Use Account → Privacy to download your app data or request deletion. These tools remain available without an active subscription. Deletion removes your email address, sign-in sessions, the cloud workspace, preferences, app consent records, invoice metadata and MFA data after renewal cancellation succeeds. If the billing provider cannot confirm cancellation, the account stays pending deletion and you can retry.
Minimal pseudonymous account/billing identifiers, privacy request references and security activity are retained for up to 90 days under the proposed security retention policy. They help prevent late billing events from recreating a deleted account. The operator must approve this period and keep the retention job running. Lemon Squeezy’s tax/transaction records, downloaded backups and data on other devices are separate and are not erased by this action.
Retention and recipients
Active account/workspace data remains until you delete it. The scheduled maintenance workflow removes security logs after 90 days and webhook event hashes after 30 days. Browser privacy choices expire after 180 days. Sign-in codes expire after 10 minutes. Sign-in sessions expire after 30 days without use. Authenticator verification grants expire after 30 minutes.
Hosting and the database are provided by Cloudflare; sign-in emails are sent through Resend; billing uses Lemon Squeezy. Before launch, the operator must confirm processor/controller roles, DPAs, subprocessors, hosting locations, international-transfer safeguards, backup retention and deletion procedures. This deployment makes no EU-only data-residency promise.
Other rights and requests
Subject to applicable law, rights may include correction, restriction, objection, appeal, withdrawal of optional consent, and a complaint to a supervisory authority. The operator must add a working contact and request-handling process, including identity checks, deadlines and authorized-agent requests. The app does not intentionally collect sensitive health information or children’s information.