Privacy Policy

Last updated: April 2026

RecordMan ("we," "us," or "our") operates the RecordMan service. This policy explains what data we collect, how we use it, and your rights.

Information We Collect

Account data: email address, hashed password, display name, and profile preferences you provide during registration.
Collection data: records, valuations, sale prices, notes, and other inventory information you enter into the service.
Usage data: pages visited, features used, and error logs for diagnosing problems. This data is not sold or shared with advertisers.
Payment data: subscription billing is handled by Stripe. We do not store full card numbers. Stripe's privacy policy governs payment data.
Integration credentials: API tokens for Discogs and other third-party services you connect are stored encrypted at rest.

How We Use Your Data

To provide, maintain, and improve the RecordMan service.
To send transactional emails (receipts, password resets, membership invitations). We do not send marketing email without your explicit consent.
To monitor service health, diagnose errors, and prevent abuse.

Data Sharing

We do not sell your personal data. We share data only with the sub-processors necessary to operate the service (hosting, email delivery, payment processing) and only to the extent required for those services to function.

Data Retention

Your data is retained for as long as your account is active. When you delete your account, your personal data and collection records are permanently deleted within 30 days. Billing records may be retained longer as required by law.

Your Rights

You may request a copy of your data, correction of inaccurate data, or deletion of your account and all associated data at any time by contacting us. Workspace owners can export their full collection from the Settings page.

Cookies

We use a single session cookie to keep you signed in. We do not use tracking or advertising cookies.

Security

Passwords are hashed using bcrypt. Sensitive credentials are encrypted at rest. We use HTTPS for all data in transit. No security measure is perfect; please use a strong, unique password.

Contact

Questions about this policy? Contact us through the support channel in your account settings.