Legal

Privacy

Operator: PivotOrder. Site: pivotorder.com. This page describes how the English product actually stores data today. It is not a claim that we only collect email.

Logged-out use

If you do not sign in, this week’s plan and daily log stay in this browser. We do not create an account row from that preview. Starting Stripe Checkout or joining the checkout-down notify list does send the email you type.

Signed-in accounts

Sign-in uses your email — a link or a 6-digit code. No password. When you are signed in we store that email, a session cookie, first-week trial start and end times, the weekly plan, daily meal log, week review check-ins, and your product-email preference. Newer local and server copies are compared by timestamp; we do not silently overwrite a newer log with an older one.

Billing

Stripe handles Checkout and the Customer Portal. For a signed-in Checkout we send your account email as the customer email. We store Stripe customer and subscription ids plus status, cancel-at-period-end, and period end so we can show paid vs first-week vs residual access. We do not store card numbers.

Checkout-down notify list

If Checkout is unavailable and you leave an email, we store only that address and when you joined so we can tell you when checkout is back.

Product analytics

Product analytics (PostHog) load only when a project key is configured on this host. We do not send plaintext email, login tokens, or the full food / health / daily-log payload. If you sign in we identify a hashed email, not the address itself. A hashed id is still a persistent identifier — it is not fully anonymous.

Transactional email

We send sign-in, welcome, trial-progress, week-review, empty-week, payment-failed, and weekly come-back notes through an email delivery provider. Product emails honor the account opt-out. Welcome and payment mail still send. The outgoing From address is PivotOrder <noreply@pivotorder.com>.

What we do not store

We do not store labs PDFs, a shot log, or a clinic chart. We do not sell your logs. We do not operate a supplement shop.

Retention, export, and deletion

Account, log, and billing records stay while the account exists. Stripe keeps payment records under Stripe’s policy. Signed-in users can export this week’s plan and daily log as JSON from Account. There is no self-serve delete-account control in the product yet. To request access or deletion, email info@pivotorder.com; we aim to confirm within 30 days.

Consumer health data

Body weight, drug class, week on drug, and appetite state are consumer health data under Washington’s My Health My Data Act and Nevada SB370. Those laws require a notice separate from this page, so there is one: Consumer Health Data Privacy. It covers what we collect, who sees it, how long we keep it, and how to have it deleted. We do not sell it.

Operator and entity details are on Contact.