In short (not part of the policy)
- Your business data stays on your PC (and wherever you send it yourself, such as your e-mail or your off-site backup folder): your products, stock, costs, orders, your customers' and buyers' details, your vendors and your users. We do not receive a copy unless you send us files or show us your screen for support.
- If your License Key is checked online (every key bought online or from a Reseller, and keys we issue by hand that say so), the app checks it with our server about once a day. Apart from that, the app talks to us only when someone at the PC enters an override code, or an Admin uses Manage subscription or Change plan. It sends no usage statistics, analytics or crash reports.
- The AI Assistant (Coming soon) will run on your PC: your questions and its answers never reach us.
- We keep what we need to sell and support your license: your name, e-mail, company, your License Key and the PCs it is activated on. You buy from Paddle, our online reseller and Merchant of Record; we never see card details.
- We do not sell personal data, share it for advertising, or use it to train AI.
- Ask us at [email protected] to see, correct or delete your data.
LivingRoom Privacy Policy Draft 2 of 2026-10-25 - not yet in effect
1. Who we are
This Privacy Policy is published by Point of the Mountain Software LLC, a Utah limited liability company ("Company", "we", "us", "our"), which makes and licenses LivingRoom, inventory and order management software for Microsoft Windows ("Software"). It explains what personal data we handle when you visit our Website, buy, try, renew or use the Software, contact our support, or work with us as a Reseller, and the choices you have.
Privacy contact: [email protected], or by post to the address above.
2. Our role, and your role
2.1 We are responsible (the "controller") for the personal data described in section 3: the data we need to sell, issue, check, renew and support Licenses, to run the Reseller Portal and the Website, and to answer you.
2.2 You are responsible for Customer Data. Everything your business keeps in the Software - including personal data of your users, your customers, your vendors and marketplace buyers - stays on your PC (or your office server PC) and is under your control. We do not receive it. If you ask us for help in a Support Session, or send us a support file, we handle what we see only on your instructions (section 8, and our Data Processing Addendum where it applies).
2.3 When you buy or renew a License, you buy it from Paddle, our online reseller and Merchant of Record (Terms of Service section 2). Paddle is responsible for the data you give it at checkout, under Paddle's Privacy Policy (https://www.paddle.com/legal/privacy). A Reseller that sells you a License is responsible for the data it holds about you, and gives us only what section 3 lists.
3. What we collect, why, and on what basis
| Data | Where it comes from | Why we use it | Legal basis (where the GDPR or UK GDPR applies) |
|---|---|---|---|
| Order details: your name, e-mail address and business name; Paddle's order, customer and subscription IDs; the Plan, amount and currency; the status of your payments (paid, refunded, past due, cancelled); the License Key we issued. Never card or bank details | Paddle, after you buy | To issue and e-mail your License Key, renew it, ask Paddle to make the Plan changes you request, apply cancellations, refunds and chargebacks to your License Key, and keep tax and accounting records | Performance of a contract; legal obligation (records) |
| License records: the License Key and what it states (Plan, limits, expiry, and the name, e-mail address and company it was issued to); its status; its activations (the Machine ID of each PC, and when it was first and last checked) | Our License Server, when we issue the key and at each License Check | To activate the Software, check that a License Key is valid and within its PC limit, deliver renewals, and stop misuse (shared, refunded or charged-back keys) | Performance of a contract; legitimate interest in preventing misuse |
| License Check data: the license ID, the License Key, the Machine ID (a one-way hash of the PC's name, processor architecture, a network-card address and operating-system family) and a one-time number; an override code when someone at the PC enters one; a request to open Paddle's subscription page or change the Plan when an Admin uses Manage subscription or Change plan; your network (IP) address as part of each connection | The Software, at start-up and about every 24 hours for License Keys that are checked online (a Trial Key, and a key we issue by hand that is not marked for online checks, is never checked) | As above | As above |
| Trial requests: your name, e-mail address, business name and what you write; for a Trial Key we issue, the same details (not what you write) and its end date, registered on our License Server | You, by e-mail | To decide the request, issue a Trial Key (with a customer record in our licensing records) and e-mail you once, 3 to 7 days before the Trial ends [not yet released] | Steps at your request before a contract |
| Support: your name, e-mail address and what you write to us. (Files, screenshots and support files you send us, and what we see in a Support Session, may contain Customer Data: we handle that only for you, section 8.) | You | To answer you and solve the problem | Performance of a contract; legitimate interest in supporting customers |
| New Business applications: business name, start date, marketplaces you sell on, contact e-mail and (optionally) contact name, your confirmation that the business is less than 12 months old, our decision, and checks for a second application from the same business (same name, e-mail or e-mail domain) | You, on our Website | To decide the application; if approved, we pass your e-mail, contact name and business name to Paddle to prepare your discounted checkout | Steps at your request before a contract |
| Reseller accounts: name, e-mail address, company, country, notes, password (stored only as a one-way hash), authenticator secret (stored encrypted) and recovery codes (stored as hashes), sign-in sessions and an audit log of account actions (network address and browser stored only as keyed hashes) | The Reseller, and us when we invite it | To run the Reseller Portal securely and process wholesale orders (we pass the Reseller's details to Paddle for its checkout) | Performance of a contract; legitimate interest in security |
| Resellers' customers: the name, e-mail address and company a Reseller enters when it assigns a License Key, which are written into that key | The Reseller | To issue, renew and reassign the key, and to support that customer | Performance of our contract with the Reseller; legitimate interest |
| Security records: short-lived counters of requests per network address, used to slow down repeated attempts | Your connection | To protect our services | Legitimate interest in security |
| Website: no analytics, advertising or tracking tools; section 14 describes the cookies it uses | |||
| Marketing preferences: your consent and opt-outs | You | To send marketing e-mail only to people who agreed | Consent |
| Renewal consent records: the renewal text you agreed to (version, exact text, SHA-256 fingerprint), the time, your e-mail address, the Plan, the transaction, (once linked) the Subscription ID and when it ended; not your network address [not yet released] | You, on our Website before Paddle's checkout opens | To show the automatic-renewal consent the law asks for | Legal obligation; legitimate interest |
We do not collect health, financial-account, government-ID, precise-location or children's data. Reseller sign-in credentials are kept only as the table above describes (passwords and recovery codes as one-way hashes, authenticator secrets encrypted). Our License Server refuses a License Key automatically when its payment is fully refunded or charged back (and cancels its Subscription; a refunded Plan change voids nothing), its Subscription ends or a Reseller reassigns it (EULA section 4.7), and on any PC beyond the number of PCs it allows (EULA section 4.6); if you think it did so wrongly, contact us and a person will review it (EULA section 4.8).
4. What we do not collect
- Customer Data. The products, stock, costs, orders, sales and settlements, expenses, reports, your customers' and buyers' names and addresses, your vendors and your users that you keep in the Software stay on your PC. We do not receive a copy; we see them only if you show us in a Support Session or send us files (section 8).
- Usage data. The Software sends no usage statistics, analytics, crash reports or telemetry.
- AI questions and answers. The AI Assistant, when available, runs on your PC; we receive nothing from it (section 7).
- Payment details. Card and bank details go only to Paddle.
5. What the Software sends, and to whom
The Software runs on your PC. It makes the connections in this table; nothing else is sent from it.
| Where to | What is sent | When |
|---|---|---|
| Our License Server (hosted by Cloudflare) | The License Check data in section 3. When someone at the PC enters an override code, that code; when an Admin uses Manage subscription or Change plan, a request to open Paddle's subscription page or change the Plan | License Keys checked online: a few seconds after start-up and about every 24 hours; and when one of those is used |
| Walmart (your own seller account) | Requests made with the API keys you saved (kept encrypted on your PC) to read your orders, settlements, items, inventory and reports, and to ask Walmart to prepare reports | When you sync or your scheduled syncs run |
| Your own e-mail server | Alerts, scheduled reports, purchase orders and follow-ups to your vendors, sent through the mail server you set up, to the recipients you chose | When you or your schedules send them |
| The European Central Bank | A request for its public exchange-rate files (your network address only; no business data) | Once a day while a Company File that is not archived uses a currency other than your main one; once a purchase order in another currency has needed a rate, every day from then on; and whenever an Admin clicks "Fetch now" |
| Hugging Face, or our own download host on Cloudflare (R2) | A request to download an AI Model file (your network address only) | Only when an Admin downloads a model (the AI Assistant is a Coming Soon Feature until we publish its model) |
| Spelling dictionaries | Nothing: spelling is checked on the PC, by Windows' own spellchecker or an English (US) dictionary that ships with the Software; no dictionary is downloaded. [not yet released] | |
| Your web browser or e-mail program | Nothing from the Software. Some links (for example to Paddle's subscription page, a marketplace's help page, a model's license, or our support e-mail) open in your browser or e-mail program | When you click them |
Inside your own network (not sent to us): with Office Server Mode, the other PCs and phones of your office connect to your office server PC over an encrypted connection; tools you connect to the Reporting API (for example Power BI) read your data with the key you gave them. Backups are saved by default in the Backups folder on the same PC (in the Software's data folder); if an Admin also sets an off-site copy folder (for example a cloud-synced folder or a USB drive), encrypted Backups are copied there, and your own sync tool (for example OneDrive or Dropbox) may upload them under its terms.
Coming Soon Features - including direct Amazon, eBay, Etsy and Shopify connections, signing in to Walmart or QuickBooks Online through our connection service, third-party logistics connections, a phone companion over the internet, an online add-on for the AI Assistant and automatic updates - send nothing until a later release switches them on (or, with your agreement, we switch one on for a limited test). We will update this policy, and tell you what a feature sends and to whom, before any of them sends data.
6. Licenses bought from a Reseller
If you bought your License from a Reseller, the Reseller gave us your name, e-mail address and company to issue your License Key. The Reseller sees your key's status, its expiry date and on how many PCs it is activated - not your Customer Data and not Machine IDs. The Reseller's own handling of your data is governed by its privacy notice.
7. The AI Assistant
The AI Assistant is a Coming Soon Feature in the current release: it is not available and is not part of what any Plan pays for. When we publish its model it becomes a Beta Feature included in every Plan. [to be confirmed]
When it is available, the AI Assistant runs an AI Model on your PC (or your office server PC). Your questions, the figures it reads to answer them, and its answers stay on that PC; we do not receive them. No conversation is stored: it is gone when the panel is closed. Neither we nor the AI Model use your questions, answers or Customer Data to train any AI model. An online add-on is a Coming Soon Feature; if we offer it, it will be off until an Admin turns it on, and this policy will name the provider and what it receives before anything is sent.
8. Support Sessions and support files
8.1 If you ask for help, our support may sign in to your Installation while you share your screen or give us remote access (EULA section 10). Our support account then has Super User rights in every Company File: everything an Admin can do, and more (for example restoring Backups or permanently deleting an archived Company File); we use the destructive powers only on your written request. EULA section 10.3 lists these powers and what a Support Session cannot do. We use what we see only to give the support you asked for, we do not copy Customer Data unless you ask us to (for example to investigate a problem file), and every change made in the session is recorded in your activity log, marked "(vendor access)". The Software also records on your PC when each Support Session started and ended (the record stays there, with your Customer Data; we do not receive it): when one of your Admins next signs in, the Software shows when each Support Session started and how long it lasted; the License page lists them. [not yet released]
8.2 A support file is a ZIP the Software makes on request (version information, settings, record counts and recent log lines). The Software removes keys and passwords and replaces the names of your users, your Company Files and your vendors, but other details (for example a customer's name in a log line) can remain: look at it before you send it. It is sent only if you attach it to an e-mail to us.
8.3 Files, screenshots and support files you send us, and anything we note from a Support Session, are handled for you, on your instructions: we keep them only as long as we need them for your case and delete them within 30 days after it is closed, unless you ask us to keep them or the law requires it. [not yet available] Our Data Processing Addendum sets out these terms for business customers who want them in writing.
8.4 We keep a log of the Support Tokens we issue (when, for how long, and the fingerprint of the Installation's License Key) to protect your Installation and ours. [not yet available]
9. Who receives personal data
| Recipient | Role | What it receives |
|---|---|---|
| Paddle (Paddle.com and its affiliates) | Our online reseller and Merchant of Record; an independent controller | Everything you enter at its checkout. We send it your e-mail, contact name and business name for a New Business checkout, a Reseller's details for a wholesale checkout, and your Paddle customer and subscription IDs when an Admin uses Manage subscription or Change plan, or we cancel a Subscription after a full refund or chargeback |
| Cloudflare, Inc. | Hosts our License Server and the Reseller Portal and their storage (service provider / processor) | License records, order records, Trial registrations, renewal consent records, New Business applications, Reseller accounts and their customers' details, network addresses |
| Resend (e-mail delivery) [to be confirmed] | Sends our e-mails (service provider / processor) | Each recipient's e-mail address and the message, which may contain a License Key or (before a Trial ends) the requester's business name |
| [E-MAIL PROVIDER of [email protected]] [to be confirmed] | Hosts our support mailbox (service provider / processor) | Your e-mails to us and their attachments |
| [SCREEN-SHARING TOOL] [to be confirmed] | Carries a Support Session's screen (service provider, or your own provider if you choose the tool) | The screen image during the session |
| Resellers | If you bought through a Reseller | The status, expiry and number of activations of your key |
| Professional advisers (lawyers, accountants, auditors) | Under a duty of confidentiality | As needed |
| Authorities | Where the law requires | As required |
| A buyer of our business | If we sell or merge our business or the Software, under this policy | The data in section 3 |
We do not sell personal data, share it for cross-context advertising, or use it for targeted advertising.
Our Subprocessor List names our service providers, what they do and where. Hugging Face and the European Central Bank receive only your network address when the Software downloads from them, under their own terms. Our own download host on Cloudflare (R2) receives only your network address when an Admin downloads an AI Model; it is not in use yet.
10. How long we keep it
| Data | Kept for |
|---|---|
| Order records, the License Keys we issued and their status, the e-mails that deliver License Keys, and our licensing records on our own PC (except activations) | 7 years after your last order (tax and accounting records) |
| Activations (the Machine ID of each PC and when it was first and last checked) | 12 months after the License ends |
| Records of Paddle's payment events | 30 days (to avoid processing the same event twice); the resulting order record as above |
| Request counters keyed to network addresses | About 2 hours |
| Renewal-reminder markers | 60 days |
| Override-code records | Until the code expires, plus 7 days |
| Trial requests and support e-mails (not the files and Customer Data in them, section 8.3) | 3 years after the last contact |
| Trial registrations on the License Server (section 3) | Until 7 days after the Trial ends |
| Files, screenshots and support files you send us, and Customer Data we note in a Support Session | Deleted within 30 days after your case is closed, unless you ask us to keep them or the law requires it (section 8.3) |
| New Business applications (approved or declined) | 3 years after the decision |
| Reseller accounts, their address book and audit log | While the Reseller account exists, then 3 years after it ends |
| Support Token log (section 8.4) | 3 years after each token is issued |
| Renewal consent records [not yet released] | 3 years after the Subscription ends, or 3 years after the consent if it was never linked to a Subscription |
After these periods we delete the data or make it anonymous: our License Server and Reseller Portal automatically, every day [not yet released]; our own PC's licensing records and our support mailbox by hand, once a year [not yet available]. We may keep data longer where the law requires it or to establish or defend a legal claim.
11. Security
We protect personal data with measures suited to it: every License Key is digitally signed by us, so a changed key is refused; our services are reached only over encrypted connections (HTTPS); Reseller accounts require an authenticator app; and our own accounts use multi-factor authentication [to be confirmed]. In the Software, the databases are encrypted on your PC, Backups are encrypted, user passwords are stored only as one-way hashes and saved API keys are encrypted. By default a Backup opens with your License Key, which we keep (to deliver and renew your License) and which our e-mail with your key contains, so keep it private, like a password. For new Backups that only you can open, set a Backup Password and choose that only it opens them; Backups made before that keep opening with the License Key (EULA section 8.4). Our Security Overview describes these measures and their limits. No system is completely secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.
12. Your choices and rights
12.1 Wherever you live, you can ask us to: tell you what personal data we hold about you and give you a copy; correct it; delete it; restrict or object to how we use it; and give you your data in a portable format. Where we rely on your consent (marketing e-mail), you can withdraw it at any time. Some laws - for example the GDPR and UK GDPR, and the privacy laws of some US states - make these legal rights; we honour them for everyone.
12.2 How to ask: write to [email protected]. We will confirm who you are (for example from the e-mail address on your License), and answer within 30 days (or sooner if the law that applies to you requires it). If we cannot do what you ask, we will say why, and you can ask us to reconsider. Someone you authorize can ask for you. We will not treat you differently for using a right.
12.3 Limits. We need some data while you hold an active License (to keep your License Key working), and we must keep some records for the periods in section 10.
12.4 Customer Data is yours to manage. You can change or delete it in the Software; we do not hold it and cannot delete it for you.
12.5 Complaints. We sell only to businesses located in the United States. If you are not satisfied with our answer, you can also complain to the authority that enforces privacy law where you are (for example, your state's attorney general).
13. Your customers' data
If your Customer Data holds personal data of your own customers, marketplace buyers, vendors or staff, you are responsible for it, including the rules of the marketplaces it came from (for example, using buyers' details only to fulfil and service their orders). Requests from those people should go to you; if one reaches us, we will pass it to you.
14. Cookies and similar technologies
- The Software sets no cookies. In its own local storage on your PC it keeps the signed-in user's account details (name, user name, e-mail address and role), a remembered user name, and display and working preferences. This storage is not encrypted by the Software and is not sent to us.
- The Reseller Portal sets one cookie that is strictly necessary to keep a Reseller signed in (it ends after 12 hours, or 30 minutes without activity). Its checkout page, like the buying pages of the Website, loads Paddle's checkout, which sets Paddle's own cookies and may collect device information for fraud prevention, under Paddle's Privacy Policy.
- The Website uses only what is strictly necessary: Paddle's checkout on its buying pages (above) and, if we switch on bot protection at our host, a short-lived security cookie. It uses no analytics, advertising or tracking tools. [to be confirmed]
- Do Not Track. We do not track you across other websites over time, and we do not let others do so through our Website or Software. Because of that, there is nothing for a browser's "Do Not Track" signal to switch off, and we do not change what we do when we receive one.
Our Cookie Policy gives the details.
15. E-mails from us
We send e-mails needed for your License or Reseller account: License Keys and renewed keys (for a Subscription, the e-mail with your License Key after the first payment confirms the automatic-renewal terms and how to cancel); renewal reminders for Yearly plans; a yearly reminder for Monthly plans and a reminder 3 to 7 days before a Trial ends [not yet released]; notices of price changes [not yet available] and of changes to our terms and policies; notices of new versions of the Software [not yet available]; security notices; New Business decisions and the reminders before your second year; Reseller invitations, payment confirmations and renewal reminders; and answers to your requests. Paddle sends its own receipts and payment e-mails. We send marketing e-mail only if you agreed to receive it; every marketing e-mail identifies us, includes our postal address and lets you unsubscribe, and we honour an unsubscribe within 10 business days. We do not sell or rent e-mail addresses.
16. Children
The Software and the Website are for businesses and for people 18 or older acting for a business (Terms of Service section 1.4); they are not directed at children. We do not knowingly collect personal data from anyone under 16, and if we learn that we have, we delete it.
17. Where we process data
We are based in the United States and sell only to US businesses. Our service providers may process data outside the United States (Subprocessor List).
18. Changes to this policy
We publish each change on https://livingroomlogistics.com with its effective date. For a material change, we also e-mail our customers and Resellers at least 30 days before it takes effect (Terms of Service section 18). We will not use personal data we collected before a material change in a materially different way without your consent. The version shipped with the Software is updated with each release.
19. Contact
Point of the Mountain Software LLC, [email protected].