Privacy notice · October 31, 2026

Your documents
stay with your store.

Our sales and update service handles your license and billing. It has no purchase-order upload or document-reading endpoint.

What stays in your store

PO Inbox’s default reader runs in the merchant’s browser. We do not receive purchase orders, customer orders, product catalogs, OCR results or local usage counts. Optional saved work remains in that browser. If the merchant enables source copies, those are stored on the merchant’s WordPress server. Quick Order Pad and Line Sheets use the merchant’s store for real customer and product actions.

If a merchant separately chooses an optional cloud reader, an approved document goes from that merchant’s server to its chosen provider under that provider’s terms and the product’s consent screen. This is separate from our local reading and subscription. This launch does not include a seller-funded cloud-reading service.

What our service receives

For paid purchases, Stripe handles card entry, billing details, receipts and billing email verification. The seller can access the payment information available in its Stripe account, but card numbers never enter our application.

Our database stores Stripe customer, subscription and invoice references, the purchased plan, paid dates, license hashes, connected store addresses, installation identifiers, and email-delivery status. Update checks send the license key, product, store address, installation identifier and requested action over HTTPS. We use those to verify access and provide the right download.

A free trial needs no email or payment details. It stores a trial/license record and expiry date, plus the store connection if you choose automatic updates. Keep the key private. The application stores a hash, rather than the recoverable key, in its database; the server uses a separate protected secret to derive keys.

Cookies, logs and messages

The trial and account use an essential, week-long session cookie to keep access and protect requests. No advertising cookies or third-party analytics are included. Request limits use hashed network-address buckets; hashing is not a promise that an address is anonymous. The application does not log document contents or license-bearing requests. The reverse proxy is configured without access logs for these routes.

If you email support, Gmail receives the message and any attachments you choose to send. Please use a redacted or fictional example wherever possible. We do not add trial users or buyers to a promotional mailing list automatically.

Service providers

The website and application run on a Hostinger VPS in Boston, United States. Stripe processes payments and billing. Resend, using its North Virginia region, delivers purchase license emails from licenses@mail.randomlantern.io, with replies going to our Gmail support inbox. We have not configured email open/click tracking. These providers process data under their own service and privacy terms.

Retention and deletion

Expired browser sessions and request-limit records are cleared routinely. Expired trial records and their update connections are removed 90 days after trial access ends. Ended paid license and payment-reference records are normally kept for seven years after paid access ends to support accounting, refunds and disputes. An ongoing account, open dispute or legal obligation can require longer retention; we keep only what is needed for those purposes. Provider records follow their own retention and legal obligations.

Support messages are reviewed for deletion after 24 months of inactivity, except information needed to resolve an open issue or meet a legal obligation. This is a manual review process. Send a privacy or deletion request to 1andrewb4@gmail.com; we verify ownership before disclosing or changing account information. Necessary accounting or dispute records may need to be retained.

Server recovery snapshots are kept for 14 days. The owner’s encrypted Windows recovery copy keeps seven distinct snapshots, so it ages by backup runs rather than a fixed number of days. Deleted records can remain in protected backups until those copies rotate. A baseline recovery copy contains setup/test data, not future customer activity. A restored backup is checked against completed deletion requests before it is used.

Your questions

Random Lantern is operated from Connecticut, United States. Email 1andrewb4@gmail.com about access, corrections, deletion or this notice. We do not sell customer information. The merchant’s own site, privacy policy and other plugins remain separate from this seller service.

Paid sales remain closed until the legal seller identity and required contact details are finalized. This notice describes the implemented trial and intended paid service; it does not claim an active paid launch.