# Oomph Labs — Legal & Business Launch Checklist

This document tracks all confirmed operational parameters, open legal decisions, and statutory disclosures required prior to commercial transaction activation.

**Audit Status:** Pre-Launch Review  
**Date:** October 25, 2026  
**Support Email:** `support@oomphalabs.com`  
**Production Domain:** `https://oomphlabs.tech`

---

## 1. Status Legend

- `[CONFIRMED & IMPLEMENTED]` — Verified against actual code and operational reality.
- `[PENDING BUSINESS APPROVAL]` — Unresolved corporate or executive decision; must be finalized before enabling live payments.
- `[REQUIRES STATUTORY FILING]` — Depends on government registration or formal incorporation.

---

## 2. Checklist Matrix

| Area | Item | Verified Reality / Proposed Policy | Status |
| :--- | :--- | :--- | :--- |
| **Entity** | Public Trading Name | "Oomph Labs" used across all brand materials and pages. | `[CONFIRMED & IMPLEMENTED]` |
| **Entity** | Registered Legal Entity Name | Not yet supplied. Must be updated in Terms and Privacy once company incorporation is complete. | `[REQUIRES STATUTORY FILING]` |
| **Entity** | Registered Business Address | Physical street address omitted until commercial registration is complete. | `[REQUIRES STATUTORY FILING]` |
| **Entity** | Governing Jurisdiction | Standard boilerplate governing law avoided; pending formal company registration jurisdiction. | `[REQUIRES STATUTORY FILING]` |
| **Support** | Official Support Email | `support@oomphalabs.com` prominent across all pages, footers, and mailto links. | `[CONFIRMED & IMPLEMENTED]` |
| **Support** | Support SLA / Response Times | Plain-language estimate (1–2 business days); no deceptive 24/7 or instant response claims made. | `[CONFIRMED & IMPLEMENTED]` |
| **Support** | Security Disclosures | Clear warning instructing users never to submit passwords, cards, or secrets via email. | `[CONFIRMED & IMPLEMENTED]` |
| **Product** | CleanSheet Status | Available and functional; client-side CSV processing with PapaParse and TypeScript schema validation. | `[CONFIRMED & IMPLEMENTED]` |
| **Product** | CleanSheet Local Quota | 200 free rows/day stored locally in browser `localStorage`. | `[CONFIRMED & IMPLEMENTED]` |
| **Product** | CleanSheet Webhooks | Direct client-to-endpoint HTTP POST; files not proxied through Oomph Labs servers. | `[CONFIRMED & IMPLEMENTED]` |
| **Product** | SchemaCraft Status | Proposed / In Development; visual schema designer & mock data generator. Explicitly labelled. | `[CONFIRMED & IMPLEMENTED]` |
| **Product** | DocuMask Status | Proposed / Planned; client-side PDF redaction architecture. No fake upload widget. | `[CONFIRMED & IMPLEMENTED]` |
| **Product** | PricePulse Status | Proposed / Planned; price-tracking concept. Explicitly notes robots.txt and site rate limits. | `[CONFIRMED & IMPLEMENTED]` |
| **Billing** | Payment Gateway | Stripe Payment Links integration in CleanSheet (currently configured with test link). | `[CONFIRMED & IMPLEMENTED]` |
| **Billing** | Pricing Structure | CleanSheet Unlimited tier price point requires final approval before live checkout activation. | `[PENDING BUSINESS APPROVAL]` |
| **Billing** | Billing Frequency | One-time license vs monthly recurring subscription needs final executive sign-off. | `[PENDING BUSINESS APPROVAL]` |
| **Billing** | Definite Refund Window | Refund policy handles technical failure and duplicate charges; fixed cooling-off window (14 vs 30 days) requires confirmation. | `[PENDING BUSINESS APPROVAL]` |
| **Billing** | Cancellation Method | Managed via Stripe customer receipt link or direct email request to `support@oomphalabs.com`. | `[CONFIRMED & IMPLEMENTED]` |
| **Privacy** | Cookie & Tracking Policy | Static site uses zero tracking cookies, zero marketing pixels, and zero third-party analytics scripts. | `[CONFIRMED & IMPLEMENTED]` |
| **Privacy** | Server Access Logs | Handled by hosting infrastructure (GitHub Pages) for routing and DDoS mitigation. | `[CONFIRMED & IMPLEMENTED]` |
| **Privacy** | Statutory Rights | Access, rectification, and erasure request mechanisms documented under GDPR/CCPA. | `[CONFIRMED & IMPLEMENTED]` |

---

## 3. Pre-Launch Action Items Before Commercial Payment Activation

1. **Incorporate / Finalize Entity Details:**
   - Add registered entity name, registered address, and dispute jurisdiction to `privacy.html` and `terms.html`.
2. **Finalize Pricing & Subscription Mechanics:**
   - Determine exact pricing (e.g., $19/month or $49 one-time).
   - Generate production Stripe Payment Link and replace `STRIPE_PAYMENT_LINK` in `csv-importer/app/src/App.tsx`.
3. **Configure Stripe Webhooks & Customer Portal:**
   - Enable the Stripe Customer Portal for self-service subscription cancellation.
   - Configure Stripe automated receipts and tax collection settings (Stripe Tax).
4. **Approve Definitive Refund Period:**
   - Formally select refund duration (e.g. 14 days or 30 days) and update `refund-cancellation.html`.