Privacy
What HaulCall collects, and why
Last updated September 30, 2026
The short version
HaulCall exists to run the fulfillment side of your Whatnot shows. It collects your own sales data — what sold, to which buyer username, for how much — plus first-party crash diagnostics when the app hits an error, so we can fix bugs. We don't sell data, we don't run ads, and we don't track you around the web.
The Chrome extension
The extension runs only on whatnot.com pages. During your live shows it captures sale events (item, price, buyer username, sale type) and sends them to your HaulCall account over an authenticated connection. It reads nothing outside Whatnot, captures nothing while you aren't on Whatnot, and stores pending events only on your own machine until they're delivered. Signing in uses your HaulCall login; the extension never sees your Whatnot password.
What we store, and for how long
Your shows, sales, bundles, and buyer roster live in your account so the product can work. Free-text buyer notes and order references are automatically purged after 60 days. Payment details go directly to Stripe — HaulCall never sees your card number.
Chat log (optional)
If you turn it on in Settings, HaulCall saves the public chat of shows you host (recorded only from your own broadcast page) to your account so a dispute packet can show what was said around a buyer's purchase. It is off by default. Messages are deleted automatically after 60 days (up to 120 days while a dispute on that show is open), only you can read them, and in a packet anyone other than the buyer and you appears as “Viewer 1”, “Viewer 2”. Messages a viewer deletes on Whatnot are not yet removed from your log. You can turn it off and delete the whole log at any time, and deleting your account deletes it too.
Crash diagnostics
When the mobile app or the web dashboard hits an unexpected error, it sends a crash report to our own servers — the error message, a stack trace, the app version, and the platform/device model. These go only to HaulCall (no third-party crash service), are automatically deleted after 90 days, and don't identify you unless you were signed in when the error happened.
Push notifications
The mobile app can send push notifications. To do that it stores a device notification token (from Firebase Cloud Messaging) with your account. We use the token only to deliver the notifications you turn on, and we delete it when you sign out or after 90 days without the app checking in. The app includes no analytics or advertising SDK.
Who can see it
Your data is scoped to your account. Nobody else's shows, buyers, or sales are visible to you, and yours aren't visible to them. We share data with no third parties beyond the processors that run the service (hosting, payments).
Questions or deletion
You can delete your account and all its data yourself from Settings → Account. Full deletion instructions, and what gets removed.
Email [email protected] to ask anything, or to have us delete the account for you.