Privacy Policy

1. Scope

This policy explains what Mongoose Wholesale (a wholesale workspace for versioned line sheets, retailer orders, stock reservations, partial shipments and invoices) collects, why, and what you can do about it. It covers wholesale.mongooselabs.app. Other Mongoose Labs products have their own policies.

2. What we collect

Your account: your email address, your password, and the name you give your workspace. Your password never leaves your browser in readable form: it is stretched on your device first, and the result is stretched again with a unique salt before it is stored. We cannot see or recover it.

Your workspace: the your catalog, line sheets and prices, retailer details, orders, reservations, shipments, invoices, your selling settings, and notes that you enter. Each change is kept in the record’s history (what changed, when, and by which account) so your records stay trustworthy.

Abuse prevention: the network (IP) address of requests, held only in short-window rate-limit counters used to stop automated abuse such as password guessing.

3. What we don’t collect or do

• We don’t sell your data or share it for advertising.
• We don’t send your workspace data to AI models, except for an AI assist you start yourself (see below).
• Mongoose Wholesale does not hold or move your money (card payments for your invoices go straight to your own Stripe account).
• Mongoose Wholesale does not list your products on a public marketplace.
• Mongoose Wholesale does not charge a platform fee or take a cut of your sales.
• We don’t use advertising or cross-site tracking cookies.

4. Signing in with Mongoose ID (optional)

If you choose “Continue with Mongoose,” you approve the connection on mongooselabs.app. Mongoose Wholesale then receives a random identifier that is unique to Mongoose Wholesale, your Mongoose account’s email address, and the list of permissions you approved. If you approve showing your Wholesale numbers in your Mongoose wallet, a summary of those numbers is shared with your Mongoose account. Mongoose Wholesale never receives your Mongoose password. Accounts are never linked by email address alone. You can disconnect Mongoose Wholesale from your Mongoose account’s Connected apps settings.

5. Purchases, AI assists and your letterhead (optional)

Some extras (Wholesale Pro with monthly sales reports, branded line-sheet PDFs, and line-sheet copy) can be bought with your Mongoose Card, which is run by Mongoose on mongooselabs.app. The price is shown before you pay and nothing is charged without your confirmation; an agent acting for you can only ask, and you approve or decline in Mongoose. Mongoose Wholesale keeps a record of what your workspace bought and when; your Card balance and receipts are kept by Mongoose.

An AI assist runs only when you start it. It sends that published line sheet (products, prices, case sizes, minimums and lead times) to Mongoose, which has an AI model write the result and returns it to you. Nothing else from your workspace is sent, and the AI provider does not receive your name or email address.

If you set up a letterhead for branded PDFs, Mongoose Wholesale stores the company name, address, colour and logo you provide and prints them on your documents. The PDFs are made when you download them and are not kept.

6. Retailer invite links

You can invite a retailer with a private link to a line sheet. Anyone who holds that link can view that line sheet and place orders into your workspace until you revoke it, so share it only with the retailer. What a retailer enters (their order and contact details) is stored in your workspace, where you control it.

7. Invoices and card payments

An invoice is shown to anyone who holds its link: your workspace name, the business address and bank-transfer instructions you entered, the retailer’s name, and the order lines. If you connect Stripe, a retailer paying by card enters their card details with Stripe, never with us; the payment is made to your own Stripe account, and we receive only whether it was paid. We don’t take a fee.

8. Emails we send for your workspace

We send email through our email provider: to you (new order requests, “Stock us” enquiries, card payments) and, on your behalf, to a retailer at the address you recorded for them (a line-sheet link or an invoice you choose to send, and, while “Email retailers” is on in Selling settings, updates when their order is accepted, ships or is cancelled and at most three reminders about an overdue invoice you emailed). Each email says why it was sent, and replies go to you.

9. Your “Stock us” page

If you publish a “Stock us” page, anyone can see your workspace name and the introduction you wrote, and send an enquiry. What they send (their shop, name, email, website and message) is added to your workspace as a retailer and emailed to you.

10. Information about other people

Your workspace may hold details about your customers, suppliers or contacts. You decide what to enter and are responsible for having the right to store it. We process it only to run Mongoose Wholesale for you and never contact those people ourselves.

11. Who else handles your data

Mongoose Wholesale runs on our cloud hosting provider, which hosts the application and its database and delivers it over encrypted connections (HTTPS/TLS). Emails are delivered by our email provider. If you connect Stripe, card payments for your invoices are handled by Stripe in your own Stripe account. Mongoose ID sign-in, if you use it, is handled by Mongoose on mongooselabs.app. Mongoose Card payments and AI assists are handled by Mongoose on mongooselabs.app, which uses an AI model provider to write the assists you start. These providers process data only to provide their service to us. We may disclose information if the law requires it.

12. Cookies and local storage

We use one essential sign-in cookie (secure, HTTP-only, first-party, valid for up to 30 days or until you sign out). Mongoose Wholesale does not store data in your browser’s local storage. Our host may measure aggregate, cookieless page-performance statistics.

13. Data retention

Your account and workspace are kept until you ask us to delete them. Record history is kept as long as the record it belongs to. Rate-limit counters are overwritten each short window.

14. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information and to object to certain processing. You can download all of your workspace data at any time with “Download all workspace data” in the app. You can delete your account and workspace yourself at any time with “Delete account” in the app; it takes effect immediately and can’t be undone. You can also email privacy@mongooselabs.app from the address on the account. We respond to verified requests within the time the law requires.

15. Security

Passwords are stretched twice and never stored in a recoverable form. Sessions are protected against cross-site request forgery, every workspace is isolated from every other, and all traffic is encrypted in transit. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you as the law requires.

16. International transfers

Our providers may process and store data in countries other than your own. Where the law requires it, we rely on appropriate safeguards for those transfers.

17. Children

Mongoose Wholesale is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 13 (or the higher age some jurisdictions set). If you believe a child has given us information, contact us and we will delete it.

18. Changes to this policy

We may update this policy as the product changes. We will post the new version here with a new effective date, and tell account holders about material changes before they take effect.

19. Contact

Questions can be sent to privacy@mongooselabs.app.

Mongoose Athanor LLC
1001 S. Main St., STE 600, Kalispell, MT 59901, USA