Privacy Policy

1) Who We Are (Data Controller)

• Controller: PalletWorth LLC (Tennessee limited liability company)
• Email: hello@palletworth.com

If you are using the Service on behalf of a company/team, see "Workspace & Admin Controls" below.

2) Scope

This Policy applies to information we process when you:

• visit our websites,
• create an account,
• upload or connect manifests/spreadsheets,
• use our analytics, scoring, exports, or API,
• communicate with us (support, sales, feedback).

This Policy does not apply to third-party websites, marketplaces, or integrations you access through the Service (e.g., eBay, Amazon, Google). Their privacy policies govern their practices.

3) Information We Collect

We collect information in three main ways: (a) you provide it, (b) we collect it automatically, and (c) we receive it from integrations you enable.

A. Information you provide

• Account Information: name, email, password or authentication method, profile details.
• Workspace Information: workspace name, members, roles, invitations, settings.
• Customer Content: manifests, spreadsheets, item lists, notes, and related metadata you upload, submit, or connect.
• Payment & Billing (limited): plan, subscription status, billing history, invoices, and limited payment metadata. We do not store full card numbers; payments are processed by our payment processor (e.g., Stripe).
• Communications: messages to support/sales, surveys, or feedback.

B. Information collected automatically

• Usage Data: pages viewed, features used, clicks/actions, time stamps, referring URLs.
• Device & Log Data: IP address, browser type, device identifiers, operating system, crash logs, diagnostic data.
• Approximate Location: derived from IP address.

C. Information from integrations you enable

If you connect third-party services (e.g., Google Sheets), we receive identifiers and tokens/credentials needed to provide the integration, subject to the permissions you grant. We may also receive content/metadata you choose to sync/import/export.

4) How We Use Information

We use information to:

• Provide, operate, maintain, and secure the Service;
• Authenticate users and manage accounts/workspaces;
• Process Customer Content to generate the outputs you request (including enrichment, matching, scoring, pricing signals, and reports);
• Process payments, manage subscriptions, and send billing notices;
• Provide support, respond to requests, and communicate about updates;
• Monitor performance, prevent fraud/abuse, and enforce our terms;
• Improve the Service (analytics, debugging, product development);
• Market the Service (where permitted), including measuring campaign performance.

5) Legal Bases (EEA/UK Users)

If GDPR/UK GDPR applies, we process personal data under these legal bases:

• Contract: to provide the Service you request (account, analysis, exports, support).
• Legitimate Interests: to secure, improve, and market the Service, prevent fraud, and measure performance (balanced against your rights).
• Consent: for non-essential cookies/advertising technologies where required; for optional marketing in certain regions.
• Legal Obligations: to comply with applicable laws (tax, accounting, lawful requests).

6) How We Share Information

We share information only as described below:

A. Service providers (processors)

We use vendors to help run the Service (e.g., hosting, databases, analytics, monitoring, email, payments). They are permitted to process information only on our instructions and as necessary to provide their services.

B. Integrations you choose

When you enable integrations (e.g., Google Sheets), we share information as needed to provide the integration (e.g., exporting results, syncing a spreadsheet).

C. Advertising & measurement partners (if enabled)

If we use advertising cookies/pixels/SDKs, we may share identifiers and event data (e.g., page views, conversions) with advertising partners for attribution, analytics, and retargeting, subject to your choices and applicable law.

D. Legal, safety, and compliance

We may disclose information if we believe in good faith it is necessary to comply with law, respond to lawful requests, enforce our agreements, or protect rights, safety, and security.

E. Business transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction.

F. Workspace sharing

Depending on permissions, members of a workspace may be able to view shared analyses, exports, billing/admin settings, and other workspace data.

7) Cookies, Analytics, and Tracking

We use cookies and similar technologies (pixels, SDKs, local storage) for:

• Strictly necessary functions (login, security, session),
• Preferences (settings),
• Analytics (understanding usage and improving features),
• Advertising/attribution (if enabled).

Your choices:

• Browser/device controls can block or delete cookies.
• Where required, we use consent for non-essential cookies.
• See our Cookie Policy for more details.

8) Your Privacy Choices (U.S. State Laws / Targeted Ads)

Depending on where you live, you may have rights to:

• access/know, correct, delete, and obtain a portable copy of your personal information,
• opt out of targeted advertising,
• opt out of the "sale" or "sharing" of personal information (as defined by applicable law),
• limit certain uses of sensitive personal information (where applicable),
• appeal our decision on a request (in some jurisdictions).

How to exercise rights

Email hello@palletworth.com with subject "Privacy Request" and tell us:

• your name, account email, state/country of residence,
• the request you're making (access, delete, opt out, etc.).

Verification

We may need to verify your identity and/or account before fulfilling requests. Authorized agents may submit requests where permitted; we will require proof of authorization and identity verification.

Global Privacy Control (GPC)

If we detect a legally recognized opt-out preference signal (such as GPC) and the law requires honoring it, we will treat it as an opt-out of applicable "sale/sharing"/targeted advertising for that browser/device.

9) Data Retention

We keep information as long as reasonably necessary to:

• provide the Service,
• maintain business records (billing/tax),
• comply with legal obligations,
• resolve disputes and enforce agreements.

Customer Content retention

• You may be able to delete analyses/content in-product.
• After account deletion, we delete or de-identify Customer Content within a reasonable period, unless we must retain it for legal, security, or billing reasons.
• Enterprise plans may have separate retention terms in an order form or SLA.

10) Security

We use administrative, technical, and organizational safeguards designed to protect information (e.g., access controls, encryption in transit, least-privilege practices). No system is 100% secure, and we cannot guarantee absolute security.

11) International Transfers

We and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards (such as contractual protections) for cross-border transfers.

12) Children

The Service is not intended for children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

13) Changes to This Policy

We may update this Policy from time to time. We will post the updated version and revise the "Last Updated" date. Material changes may be communicated via the Service or email.

14) Contact Us

Privacy questions or requests: hello@palletworth.com