Marketplace Wheel & RR Wheel — Privacy Policy v2.2

Effective Date: October 1, 2026

Operator: Marketplace Wheel, LLC ("Company", "we", "us")

Contact: admin@marketplacewheel.com

Supersedes: RR Discovery Engine Privacy Policy v1.4, Privacy Addendum v2.0 and Privacy Policy Draft v2.1.

1. What this policy covers

• RR Wheel browser extension (Chrome, Microsoft Edge, Safari) — Order Sync / Claims capture and Discovery for the Recognized Reviewer and Vine programs.
• Marketplace Wheel web app at https://app.marketplacewheel.com — ledger, FMV adjustments, dispositions, tax periods, exports, Vine program report imports, support.

Independence: RR Wheel is an independent software tool developed by Marketplace Wheel Company. It is not affiliated with, endorsed by, sponsored by, or associated with Walmart Inc., Amazon.com, Inc., or any of their respective subsidiaries, affiliates, or review programs. In this policy, "Recognized Reviewer program" and "Vine program" (together, "supported third-party marketplace reviewer programs") refer only to programs operated by those third parties.

2. Health and pharmacy data screening

• Not a HIPAA entity: Marketplace Wheel Company is not a healthcare provider or Covered Entity under HIPAA. The Service is strictly a consumer productivity and record-keeping tool. We do not solicit, require, or intend to collect Protected Health Information (PHI) or confidential medical records, and users should not submit or store private medical documentation within the Service.
• Automated screening: RR Wheel employs automated keyword- and category-based filtering during capture to screen out prescription pharmacy and sensitive medical items, and the app screens imports a second time. The only trace kept of a screened item is a count of how many orders were filtered out (no titles, no item details).
• Limitations: Because automated filters rely on product listings and metadata, novel or ambiguously described items may occasionally evade screening.
• Your control: You retain full control to manually delete any inadvertently captured item from your ledger at any time. You may also email admin@marketplacewheel.com to request prompt deletion, including from support records.
• Not excluded: General wellness, fitness, personal care, and over-the-counter (OTC) reviewer claims are not excluded from capture or accounting.
• User-submitted content: Please do not type prescription or medical information into claim notes, paste receipt screenshots showing pharmacy items or medical details, or send health information in support messages.

3. Information we process

We do not read your marketplace passwords, payment cards, address book, browsing outside the pages listed in Section 4, or prescription pharmacy data.

3.1 Vine program spreadsheet imports

If you subscribe to the optional Vine Accounting feature and upload an official Vine program Itemized Report (.xlsx or .csv):

• What is processed: Only program tax fields — Order ID, ASIN, product title, order/ship/cancellation dates, order type, and Estimated Tax Value (ETV). We do not collect marketplace account passwords, payment card numbers, bank details or delivery addresses.
• Client-side parsing: The spreadsheet is read and parsed entirely within your web browser. The raw file is never transmitted to our servers.
• No file retention: We do not retain, store or back up your uploaded spreadsheet file. Once parsed, the raw file is cleared from browser memory.
• Where records live: The resulting claim records are saved to your private accounting ledger under your account. You can edit, adjust, export or delete them at any time.

3.2 Logs, sign-in storage and cookies

• Operational logs: Our servers record standard diagnostic data (IP address, user-agent/browser headers, timestamps, request URLs and error traces), retained for up to 90 days for stability, security and abuse prevention.
• Sign-in: Authentication uses browser local storage and session cookies solely to keep you signed in.
• No ad tracking: We use no third-party advertising trackers or marketing analytics pixels.

4. When the extension runs

Only on pages you open and only when you act: your marketplace order pages (order sync and back-fill), the Recognized Reviewer program claims page (Discovery and claim capture), and app.marketplacewheel.com (to hand captured records to your signed-in app). If the marketplace shows a security challenge, the extension stops. It never makes claims or purchases for you.

5. Free mode vs paid mode

• Free (extension only): Captured data stays in your browser's local extension storage and is never transmitted to our servers.
• Paid (app): The extension hands records to the app page you have open through a local in-browser bridge. The app then saves them to your account over an encrypted (HTTPS) connection, and database-level security rules restrict access to your account. The extension itself stores no passwords or sign-in tokens.

6. Product photo relay

When you share a claim to Reddit, the app fetches the product photo from the marketplace's image servers through our server so it can be copied to your clipboard. Only those image addresses are accepted; photos are passed through and not stored or linked to you beyond standard short-lived caching (up to 24 hours).

7. How we use information

To run the service (ledger, tax calculations, exports, Discovery, support), secure it, and improve it. We do not sell personal information and do not use it for advertising.

8. Aggregated, de-identified data

We may create aggregated, de-identified product and pricing information (for example, which items appeared on the claims page and at what listed value) solely to operate, improve and power community inventory, drop alerts and discovery features within the Service. This data cannot reasonably identify you and never includes health data, notes, proofs or account details. We do not sell, rent or license it to data brokers or marketing firms.

9. Sharing

Only with service providers that host, authenticate, process payments or deliver email for us, under confidentiality obligations; when required by law; or in a merger or sale, subject to this policy. We do not share data with any marketplace or reviewer program operator.

10. Your data, exports, cancellation and deletion

You own your records. You can export at any time as CSV ledgers, printable tax worksheets and a full JSON archive ("Download everything").

• Cancellation: Cancelling a subscription never locks you out of your history or exports for as long as your account exists.
• Account deletion: Deleting your account is different — it permanently removes your records (see Section 11), ends app access and cancels any active subscription billing. Export first if you want a copy.
• Suspension or service closure: If an account is suspended or the Service is discontinued, we will preserve export access where lawful and give at least 30 days' advance notice where commercially practicable.

Files you export are under your control once downloaded.

11. Retention and deletion

• Active account data: Kept while your account exists. You may delete individual claims at any time in the app.
• Account deletion: Account records, claims, notes and proof images are permanently deleted from active systems within 30 days.
• Backups: Disaster-recovery backup snapshots expire and are overwritten on a standard cycle of up to 90 days.
• Billing records: Subscription and invoice records are kept for up to 7 years to meet tax and financial record-keeping obligations. Card data is handled by our payment processor and never held on our servers.
• Operational logs: Retained for up to 90 days.
• De-identified aggregated data: May be kept indefinitely because it contains no personal information.
• Local extension storage: Removing the extension deletes its local data.

12. Security

Encrypted connections, per-account access rules, and least-privilege access by staff. No system is perfectly secure.

13. Children

Not directed to anyone under 18. We do not knowingly collect children's data.

14. Location and hosting

The service is offered to United States residents only. Primary databases, application hosting and account storage reside on United States infrastructure (database hosted in AWS US-West-2, Oregon; payments processed by Stripe in the United States). Cloudflare provides secure global edge routing and DNS, which may briefly handle traffic outside the United States.

15. Your rights

Depending on your state, you may have rights to access, correct, delete or obtain a copy of your data. Contact admin@marketplacewheel.com.

16. Changes

We will post updates here and change the "Last Updated" date; material changes will be notified in the app.

17. Contact

Marketplace Wheel, LLC · admin@marketplacewheel.com · 6265 PA-29, Springville, PA 18844