SupraFolio · Privacy

Privacy Policy

Effective [date] · Publisher: Rabbit Hole Technologies, LLC, a Nevada limited liability company

The short version

We're only checking that your license is legitimate and that's it.

That is what SupraFolio's one connection is for. Buying a license also goes through Stripe and our key email, and every record the server keeps is listed below. Your trial balances, your financial statements, your filings and your company's details never leave your computer: not to Rabbit Hole Technologies, not to an AI service, not to EDGAR, not to anyone. SupraFolio has no account, no cloud, no AI, and no telemetry, crash reporting or analytics of its own.

The license check

When. The first time SupraFolio runs with an internet connection (that starts the free trial); when you enter a key; when you choose Confirm with the server now, Remove this computer or Remove other computers; and about once a week while a license is in use. With no usable license it tries again when the License window is opened. SupraFolio works offline for up to 30 days between checks.

Where to. license.rabbitholetechnologies.ai, over HTTPS. The server runs in Microsoft's Azure cloud, which hosts it and stores its records for us.

What it sends. The product name (SupraFolio), the app version, a one-way code for this computer and, once entered, the license key, marked when you have just typed it. The Remove actions also send which of the two was chosen. The computer code is a scrambled fingerprint of an identifier Windows provides; it cannot be turned back into that identifier, though our records link it to your key and, through Stripe, to your purchase. Nothing else is sent: no document, file name, company name, number or record of how you use SupraFolio. Like any internet request, the check shows your IP address to the server, which uses it only in memory, for about ten minutes, to limit abuse, and never stores or logs it.

What the server keeps.

• For a free trial: the product, the computer code and the date and time the trial started (one trial per computer).
• For each key sold: a one-way fingerprint of the key; the product; whether it was a live or a test purchase; how the key was made and its format version; Stripe's reference numbers for the payment, the checkout and any dispute (they hold no name or email, but point to the purchase record in Stripe); whether it was fully refunded; for a dispute, whether it is open and its outcome; and any hold or computer limit set on the key.
• For each computer on a key: the computer code, the product, whether it is active or removed, and when its latest license pass expires; once removed, the date and time of the removal and whether its place was freed at once; and, per key, the times a removal used one of its three yearly moves.
• The server never stores your key itself. It derives the key again from the payment reference when Stripe reports a refund or a dispute, or to resend a lost key.
• An operations log with one line per outcome (a trial pass given, a key refused, a key made and emailed, a removal with how many computers it freed), with the time to the second. It never records the key, its fingerprint, a computer code, an IP address, a payment reference, a name, an email or a billing address, and it clears itself within days.

Buying, and who else is involved. Rabbit Hole Technologies, LLC is the seller. Buying opens our checkout in your browser; Stripe processes the payment and works out sales tax from your billing address. Your card number goes to Stripe and never to the license server. When you buy, Stripe sends the server a signed notice with your name, email address, billing address and sometimes a phone number; the server uses only the email address, only to send you your license key, and stores and logs none of them. On a refund or a dispute Stripe sends another signed notice, which may include the same details and the payment method's type and last four digits (never full numbers); the server reads only the reference numbers and the outcome. The key email is sent through Resend, an email delivery service, which receives your email address and the message with the key and keeps its own delivery records. Apart from Azure, checking a license involves no other company.

On your computer. SupraFolio keeps the license pass, your key (protected with Windows data protection for your Windows account) and the latest clock time it saw (to notice a clock set back; never sent) in its private app-data folder.

What SupraFolio keeps, and where

Your SupraFolio folder — Documents\SupraFolio

The company profile (legal name, CIK, file number, officers, directors, auditor, securities), the reporting lines and the account mapping, as plain files; copies of the trial balances and exhibits you give it, so your originals never change; the worksheets, checks and the audit log of each filing; the Word documents it assembles; the EDGAR packages; the lock records and the audit binders. The folder is yours: uninstalling SupraFolio leaves it in place, and a sync service such as OneDrive copies it like any other document. SupraFolio itself uploads nothing.

SupraFolio's private app-data folder

Removed when you uninstall. It holds the window's private browser profile, the license file and a troubleshooting log of the program's own actions: starting and stopping, the folders it used, errors, the names of files it could not read, and whether a license check succeeded. The log can contain file and folder names, which may include a company's name, but never document contents, amounts, account names, the license key or the computer code.

Network connections

SupraFolio makes no connection of its own besides the license check. Its window is a page served by SupraFolio's own process on your computer (address 127.0.0.1) and refuses requests from any other page or program. Links to this website open in your own browser. The EDGAR package is validated by a copy of the SEC's validation rules shipped inside the app, offline; SupraFolio never connects to EDGAR and never holds EDGAR credentials. Finished documents are opened with your word processor under that application's terms.

Microsoft components

The Microsoft Store delivers the app and its updates; SupraFolio is not bought through the Store, and the Store plays no part in the license check. The window is shown by Microsoft Edge, a Microsoft-maintained component installed with Windows. Windows error reporting may tell Microsoft about a crash; SupraFolio does not turn it off, and Microsoft may make aggregate reports available to us (install counts, crash frequency). These are covered by the Microsoft Privacy Statement.

What SupraFolio does not do

Nothing it sends holds a file, a file or folder name, a company's details, a number from a trial balance or a statement, or any content of a filing, and it keeps no record of how you use it. It sends nothing to an AI service and writes no narrative. It reads only the files you give it and its own folders. It has no connection to EDGAR, to the SEC, to an accounting system or to a filing agent. It collects no location, contacts or other data about your computer; the computer code is the only thing about your computer it sends.

Your choices and requests

We hold no copy of your filings, your company's details or your trial balances. If a document ever reaches us unasked, we do not open it and we delete it. On the license server, a yearly-move time stamp is dropped once it is a year old, and a removed computer's removal record is dropped when the key is accepted on that computer again; everything else is kept until you ask. Write to admin@rabbithole-technologies.com from the address you bought with to have each computer's record on your key, the key's move times and those computers' trial records deleted; a trial-only user sends the computer code shown in the License window. A computer that keeps using SupraFolio is recorded again at its next check. The key's own record (which holds no name or email) is kept because the key cannot work without it. Your purchase record lives in our Stripe account under Stripe's terms.

Children

SupraFolio is a tool for financial reporting professionals and is not directed to children.

Changes

A new version is posted at this address with a new effective date.

Not advice

SupraFolio is a document and data assembly tool for financial reporting professionals. Rabbit Hole Technologies, LLC is a software company, not a CPA firm or a law firm; nothing SupraFolio produces is accounting, auditing, legal, tax or investment advice, and nothing it produces is ready to file until the company's management and its advisers have reviewed it. See also the website privacy notice and the license agreement.