Draft — under review. This policy is a plain-language draft and has not yet been reviewed by a lawyer. It may change before launch.
Privacy Policy
Your recipes are yours
Last updated: October 8, 2026
Soap Ledger is a record-keeping and calculation tool for soapmakers. This policy explains what information we collect, why, where it's kept and the choices you have. If anything is unclear, email hello@soapledger.com.
The short version
- We collect what we need to run your account and your workspace, and nothing more.
- We don't sell your data, and we don't share it for advertising.
- This website and the app have no ad trackers and no analytics.
- Your workspace is visible only to the people you invite.
- You can export all of your data at any time, and ask us to delete it.
What we collect
- Account details: your name, email address and a securely hashed password.
- What you put in your workspace: recipes, batches, notes, molds, inventory, costs, labels, photos and files you upload, and the people you invite.
- Sign-in and security data: session cookies that keep you signed in, and the IP address and browser type of each session, used to protect your account and limit abuse.
- Feedback you send us: your message, the page or screen it came from (with record ids removed), your browser type and app version, and your email only if you choose to give it. When you send feedback from inside the app, we also record your user id, your workspace's mode and your role, so we can understand the problem. We never include recipe names, batch numbers or amounts.
- Emails we send: a copy of account emails (like sign-up confirmations, invitations and reminders) is kept in our system so we can see whether they were delivered. Links in those copies are removed after sending.
How we use it
- To provide the service: run calculations, store your records, send reminders you've turned on and let you share a workspace.
- To keep it secure: prevent abuse, rate-limit requests and investigate problems.
- To answer you and to improve Soap Ledger, for example by fixing the bugs you report.
- To tell you about important changes to the service or these terms.
We don't use your recipes to train AI models, and we don't look at the contents of your workspace except when you ask us to help, or when we must to keep the service secure or meet a legal obligation.
Where your data is kept, and who helps us
We use a small number of service providers. They process data only to provide their service to us.
| Provider | What they do | Location |
|---|---|---|
| Neon | Database (PostgreSQL) holding your account and workspace records | United States (US East) |
| Railway | Hosts the app, and stores uploaded files on a private disk | United States |
| Amazon Web Services (SES) | Sends account emails, reminders and feedback confirmations | United States |
| Cloudflare | DNS, network delivery and protection for our websites, hosting of this website, and the Turnstile spam check on the feedback form | Global network |
| GitHub | Our private issue tracker. Bug reports and ideas are copied there with your email, user id and workspace details removed. | United States |
| Anthropic | Optional AI help for reading imported PDFs, only if your workspace turns it on. When it's on, the text of the PDFs you import is sent to Anthropic to extract the recipe. | United States |
If you live outside the United States, your information is transferred to and stored in the United States.
When paid plans start, payments will be handled by Paddle, who will act as the seller of record. We'll update this policy before that happens.
Cookies
The app uses cookies only to keep you signed in and secure. This website sets no cookies of its own. The Cloudflare Turnstile check on the feedback form may use data from your browser to tell people from bots.
How long we keep it
- Workspace data: for as long as your account is open. When you ask us to delete your account or a workspace, we remove it from the live database; copies in backups are removed as those backups expire.
- Feedback: kept while it's useful for improving Soap Ledger. We delete the email address you gave us after one year, or sooner if you ask.
- Security records like rate-limit counters: a few days.
Your choices and rights
- Access and export: export your workspace data as CSV, JSON or a full archive from Settings, on every plan.
- Correction: edit your details and records in the app.
- Deletion: email us to delete your account and data.
- AI help: it's off unless your workspace turns it on, and you can turn it off at any time.
- Depending on where you live, you may have other rights, such as objecting to processing or complaining to a data protection authority. Email us and we'll help.
Security
Passwords are hashed, connections are encrypted, every request checks that you belong to the workspace you're opening, and uploaded files are stored privately. No system is perfectly secure, so please use a strong, unique password.
Children
Soap Ledger is not intended for children under 16, and we don't knowingly collect their information.
Changes
If we make important changes, we'll update the date above and tell signed-up users by email or in the app.
Contact
Questions or requests: hello@soapledger.com.