1. Single Purpose Description

OrderStack - Custom Order Batch Exporter is a single-purpose productivity utility built for e-commerce sellers, personalized gift workshops, and 3D printing makers. Its sole purpose is to allow store owners to extract customer orders, un-truncated customization notes, and line-item details from their own authorized seller dashboards (Etsy, Shopify, eBay) and export them into structured local files (CSV format) or directly to their own personal Google Sheets.

2. User Data We Collect, Access & Handle

OrderStack accesses and processes only the minimum data strictly necessary to execute user-requested batch export workflows:

Data Category	Specific Elements	Purpose & Storage Method
E-Commerce Order Data	Buyer names, shipping addresses, order IDs, product SKUs, quantities, prices, currency, platform fees, and un-truncated customer notes.	Temporary In-Memory Only: Read from the active seller tab DOM upon user command to compile the CSV or Google Sheets export. Never transmitted to Layered Lumens 3D servers.
Local User Preferences	Selected export preset (Standard, ShipStation, YunExpress, Accounting), consolidated vs. itemized toggle, column mapping selections.	Stored locally on the user's computer via chrome.storage.local. Never transmitted off the device.
Google OAuth Tokens (Optional)	OAuth 2.0 access token with scopes: spreadsheets and drive.file.	Used strictly when the user clicks "Sync to Google Sheets" to create or update spreadsheets in the user's personal Google Drive. Handled securely via chrome.identity.
Subscription & Billing State	Trial start timestamp, active trial status, ExtensionPay user token.	Used to verify trial status and paid licensing via ExtensionPay (Stripe). We never collect, process, or see credit card numbers.
Operational Telemetry	Anonymized interaction events (e.g., extension opened, export format clicked, version number).	Sent to PostHog for crash monitoring and diagnostic health. Zero PII or order records are ever included.

3. How We Use Your Data

All data processed by OrderStack is used exclusively to:

• Render the floating order detection badge on authorized store admin pages.
• Assemble accurate, formatted CSV files for instant local download.
• Push formatted rows directly into the user's designated Google Sheet when authorized.
• Enforce licensing and subscription tier limits.

4. Third Parties With Whom Data Is Shared

We share user data only with the trusted third-party service providers listed below, strictly to the extent required to provide core extension services:

• Google LLC (Google Sheets & Google Drive): When you choose to export to Google Sheets, OrderStack transmits order data directly from your browser to Google's official APIs under the user's authenticated Google Account. Data transferred to Google is governed by the Google Privacy Policy. OrderStack adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements.
• ExtensionPay / Stripe, Inc.: We use ExtensionPay (powered by Stripe) to manage checkout and subscription verification. Payment transactions occur entirely within Stripe's PCI-DSS compliant environment. Layered Lumens 3D never receives, processes, or retains card details.
• PostHog, Inc.: Provides privacy-friendly, anonymized application analytics to detect extension errors and crashes. IP addresses are masked, and no e-commerce order details or buyer personal data are ever captured.
• Cloudflare, Inc.: Provides edge hosting for web assets and zero-trust API proxy routing.

5. Permissions Audit & Justification

OrderStack requests only the narrowest possible permissions necessary to deliver its functionality:

• activeTab: Granted temporarily only on the active seller page tab upon user action to inspect the visible order table and extract customer notes.
• storage: Used to save your column preset preferences and trial license verification state locally on your machine.
• scripting: Allows the extension to safely inject and run the order parsing script on supported seller dashboards.
• identity: Used to facilitate secure Google OAuth 2.0 authorization for optional Google Sheets synchronization.

Note on Downloads: OrderStack does not request the privileged downloads permission. All CSV exports are generated client-side and saved through standard browser Blob URL object links, eliminating unnecessary permission prompts.

6. User Controls, Data Retention & Erasure

• Immediate Local Deletion: You can purge all locally saved preferences and cached data at any time by clearing your browser's extension storage or uninstalling OrderStack.
• Revoke Google Access: You can revoke OrderStack's access to Google Drive and Google Sheets at any time via your Google Account Security Permissions.

7. Data Security

All communication between OrderStack, Google APIs, and ExtensionPay uses industry-standard Transport Layer Security (TLS 1.3 / HTTPS). Because order data never leaves your local browser sandbox, your customers' information is protected from server-side database breaches.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be posted here with an updated "Effective Date" and announced in the extension's release notes.

9. Contact & Data Controller Information

If you have questions, feedback, or concerns regarding your privacy or this policy, please contact:

Data Controller: Layered Lumens 3D
Email: support@layeredlumens3d.uk
Website: https://layeredlumens3d.uk/#orderstack