Data and privacy

Where data lives

Settings → About shows the current location with a Show button. --user-data-dir=<path> moves it for any build.

Inside:

• profiles.json, settings.json — suppliers and app settings
• storage/ — recipe caches, the downloaded-invoice cache, per-profile portal settings
• secure.json — the device token and portal credentials, ciphertext only
• folder-sources.json — content hashes of files each folder source has already sent
• Partitions/ — the per-profile browser sessions (cookies)

What is encrypted

The device token, portal passwords, 2FA setup keys and the Bridge password are encrypted with the OS user key — macOS Keychain or Windows DPAPI. So is the cookie key of the embedded browser. None of it is readable from another user account or another machine.

What is sent to Tailride

• Invoice documents — for Proton Mail and folders, every document that passed the local pre-check (anything that might be an invoice, receipt or credit note); the reading and data extraction happen on Tailride's servers
• Collection progress (counts, portal, errors) so the dashboard can show what happened
• The credit balance is read from your account; nothing else from your machine is uploaded

Mailbox contents, portal passwords and browser sessions never leave the computer.

Deleting everything

Settings → Advanced → Delete data… signs out (revoking the device token on the server), forgets every stored login and password, removes settings and caches, and quits. Saved invoice PDFs in your Downloads folder are kept. Uninstalling the Windows installer build removes %APPDATA%\Tailride as well. For the portable build, delete the Tailride Data folder.