Legal

Privacy Policy

Effective 22 August 2026 · Last updated 22 August 2026

This policy explains what Isa Top Trades, LLC ("Rutinelle", "we", "us") does with personal information in connection with rutinelle.com and the Rutinelle Wedding Planning System.

1. What stays on your device

Every figure you enter into Rutinelle — your target budget, vendor names, quotes, deposits, payment dates and refund windows, guest list, checklist progress, contract notes and risk-report answers — is stored in your own browser's local storage. It is written by your browser, read by your browser, and transmitted nowhere.

This is enforced technically, not merely promised. Every page is served with a Content Security Policy including connect-src 'none', which instructs your browser to block the page from sending data to any server at all, including ours. There is no server-side database to send it to.

The practical consequence: clearing your browser data, using private browsing, or switching device or browser will lose your entries, and we cannot restore them — we never had a copy. Every screen offers Save as PDF for exactly this reason. Export occasionally and keep it with your wedding paperwork.

2. What we actually receive

Payment information — handled by Stripe

Checkout is processed by Stripe, Inc. You enter your card details on Stripe's own systems. We never see, receive or store your card number, CVC or full payment credentials. From Stripe we receive your email address, the amount and currency paid, the last four digits and card brand, the country of the card, and whether the purchase completed — the minimum needed to deliver access and support the purchase. Stripe's own handling is governed by stripe.com/privacy.

Your email, if you contact us

If you email support, we hold that correspondence and your address so we can help you and keep a record of what was resolved.

Ordinary server logs

The site is hosted by Vercel, Inc., which keeps standard web server logs — IP address, page requested, user agent, timestamp — for security, abuse prevention and reliability. We do not use these to build a profile of you, and we do not combine them with purchase records for marketing.

3. How we use it

• To deliver your purchase and grant access to the tools;
• To send your receipt and, when needed, a replacement unlock link;
• To answer your support emails;
• To detect and prevent fraud, abuse and unauthorised access sharing;
• To keep our own accounting and tax records, as the law requires.

That is the complete list. We do not profile you, score you, or make automated decisions with legal or similarly significant effects about you.

4. Legal bases (UK/EU)

Where the UK GDPR or EU GDPR applies, we rely on: performance of a contract (delivering and supporting your purchase); legal obligation (tax and accounting records); and legitimate interests (security, fraud prevention and keeping the site working), balanced against your rights. We do not rely on consent for marketing because we do not send marketing.

5. Who we share with

We share personal information only with the service providers needed to run the business, and only for that purpose:

• Stripe, Inc. — payment processing (privacy policy)
• Vercel, Inc. — website hosting and delivery (privacy policy)
• Our email provider — to send and receive support correspondence

We may also disclose information where legally required — for example in response to a valid legal request — or to protect our rights, and in connection with a merger or sale of the business, in which case this policy continues to apply to the transferred information.

6. What we never do

• We never sell or rent personal information. We never share it for cross-context behavioural advertising.
• No advertising trackers, no Meta/Facebook pixel, no Google Analytics, no session recording, no heatmaps, no fingerprinting.
• No accounts and no user database — there is nothing to breach.
• No marketing email unless you explicitly ask to hear from us.
• No use of your information to train machine learning models.

7. Cookies

Rutinelle sets one cookie, and only after purchase. It records that this browser has paid — nothing else. It contains no personal information and nothing about your wedding, and exists solely so the paid tools open without asking you to log in. A second cookie of the same kind is set if you bought the Protection Pack.

These are strictly necessary cookies, required to deliver a service you asked for, which is why the site shows no cookie banner: there is nothing optional to consent to. There are no advertising, analytics or tracking cookies on this site. Blocking the access cookie will prevent the paid tools from opening.

8. Retention

Planning data on your device is kept until you delete it — by clearing site data or using the Erase saved data button in the tools. We keep purchase and transaction records for as long as tax and accounting law requires (generally up to seven years in the US). Support correspondence is kept for up to two years, then deleted.

9. Security

The site is served exclusively over HTTPS with HSTS, a strict Content Security Policy, and standard protective headers. Payment data is handled entirely by Stripe, a PCI-DSS Level 1 certified provider. Because your planning data never leaves your device and there is no user database, the most sensitive information in this product is structurally out of reach of any breach of ours. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Your planning data is already entirely under your control: you hold it, and you can erase all of it at any time from within the tools or by clearing site data.

For the limited information we do hold — your purchase record and any support emails — you may request access to it, a copy of it, correction of it, deletion of it, restriction of its processing, or that we stop processing it, and you may object to processing based on legitimate interests. Email isatoptradesllc@gmail.com. We will respond within 30 days and will not charge you or treat you differently for asking. We may need to keep transaction records where tax law requires it, and may need to verify your identity by confirming the purchase details.

If you are in the UK or EU and believe we have handled your information improperly, you also have the right to complain to your local data protection authority.

11. California residents

Under the CCPA/CPRA you have the rights to know, access, correct, delete and to opt out of sale or sharing. We do not sell personal information and do not share it for cross-context behavioural advertising — and have not in the preceding 12 months — so there is nothing to opt out of. We collect identifiers (email address, IP address) and commercial information (purchase record) for the purposes in section 3. We do not collect sensitive personal information. Exercise any right by emailing isatoptradesllc@gmail.com; we will not discriminate against you for doing so.

12. International transfers

We operate in the United States and our providers (Stripe, Vercel) process data there. If you use Rutinelle from outside the US, information we receive will be processed in the US, under appropriate safeguards offered by those providers, including standard contractual clauses where applicable. Your planning data is not transferred anywhere, because it never leaves your device.

13. Children

Rutinelle is intended for adults aged 18 or over planning a wedding, is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, email us and we will delete it.

14. Changes

If this policy changes, the effective date at the top changes with it, and material changes will be noted on the home page. We will never apply a materially less protective policy to information already collected without telling you.

15. Contact

Isa Top Trades, LLC
Email: isatoptradesllc@gmail.com
Web: www.rutinelle.com