Privacy Policy.

Who we are

PalletRow is operated by Exutory Solutions, a Minnesota business (“Exutory Solutions”, “we”, “us”), based in Minneapolis, Minnesota. This policy explains how we handle information on palletrow.com and in the PalletRow app and API (the “Service”).

PalletRow is used by businesses. For the business records a customer puts into its workspace — including information about its staff, its vendors and its own customers — we act on the customer’s behalf and under its instructions, as its service provider. For account, billing and website information, we decide how it is used, as described here.

What we collect

Information you give us:

• Account details: your name, email address, business name, store names and time zone. Passwords are stored only as a secure one-way hash.
• Business records you and your team enter or import: products, costs, prices, vendors, inventory, purchase orders, sales, schedules, tasks, customer records, uploaded files, and questions asked of the assistant.
• Billing details: your plan, subscription status and billing contact. Payment card details are collected and held by Stripe.
• Messages you send us, such as support requests.

Information collected automatically:

• Technical and security data: IP address, browser and device type, pages requested, timestamps, errors and sign-in events.
• An audit trail of significant actions in a workspace — who changed a price, approved an adjustment or sent an order, and when. This is a feature of the product and is visible to the workspace’s administrators.

Information from services you connect: if you connect a point-of-sale or other system, we receive the sales and catalog data that system sends for your workspace.

Cookies and tracking

The app uses cookies that are strictly necessary to keep you signed in and to protect your account. It remembers a few display preferences, such as light or dark theme, in your own browser.

On palletrow.com and on the app’s sign-up page, we use advertising tags from Google (Google Ads) and Meta (the Meta Pixel) to measure how our ads perform. They set cookies and send Google and Meta information such as the pages you view, your IP address, browser details and whether you went on to open a workspace, and Google and Meta may use it to show our ads to people who have visited the site. Some state privacy laws call this “sharing” personal information for targeted advertising.

These tags are not used anywhere else in the app, and they never receive a workspace’s business records.

How to opt out:

• Choose “Opt out” in the notice on the site, or “Ad choices” in the site footer. We remember the choice in your browser, and the tags stop loading.
• We honor Global Privacy Control. If your browser sends the signal, the tags do not load at all.
• You can also block or clear cookies in your browser settings, and manage your ad settings directly with Google and with Meta.

We do not sell personal information.

How we use information

• To provide the Service: running your workspace, processing your requests, and sending the emails the product sends.
• To bill for the Service and manage subscriptions and trials.
• To keep the Service secure: preventing fraud and abuse, rate-limiting sign-ins, and investigating incidents.
• To support you and to tell you about changes to the Service, these policies, or your account.
• To maintain and improve the Service, including diagnosing errors and understanding which features are used.
• To measure how our advertising performs, as described under “Cookies and tracking”.
• To meet legal obligations and enforce our Terms.

We do not use a customer’s business records for any purpose other than providing and supporting the Service for that customer, and we do not use them to train AI models.

The assistant

When someone in your workspace uses the assistant, their question and the workspace data needed to answer it are sent to our AI provider to generate a response. The assistant can only reach data that the person asking is already allowed to see, and each action it takes is recorded in the workspace’s audit trail.

Who we share it with

We use a small number of service providers to run PalletRow. They process information only on our instructions and only to provide their service:

• DigitalOcean — hosting, database, backups and file storage, in the United States.
• Stripe — subscription billing and payment processing. Card details go to Stripe directly; we never see or store full card numbers.
• Resend — email delivery: account emails such as sign-in confirmations and invitations, purchase orders you send to vendors, and marketing emails a store sends to its own customers.
• Anthropic — the AI model behind the assistant and other AI features. Under its commercial terms, it does not use this data to train its models.
• OpenAI — if enabled for the Service, an alternative AI model for the same features. Under its API terms, it does not use this data to train its models.
• Open Food Facts — barcode product lookup. When a barcode that is not in your catalog is scanned, the barcode number is sent to Open Food Facts to suggest a product, and any product photo is loaded from its servers. No account or workspace details are sent.
• Google and Meta — measuring our advertising on palletrow.com and the sign-up page, as described under “Cookies and tracking”. Neither receives anything from inside the app.
• Sentry — error monitoring, so we learn about a failure when it happens. Error reports include technical details of the failing request and may include the identifiers of the account involved.

We also share information:

• with third-party services you choose to connect, such as your point-of-sale system, as needed to make the connection work;
• with vendors you send purchase orders to, when you send them;
• when required by law or valid legal process, or to protect the rights, safety and security of our customers, the public, or us;
• as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to the information transferred.

We do not sell personal information.

How long we keep it

We keep workspace data for as long as the workspace is active. After a workspace is closed or its subscription ends, we keep its data for 30 days so it can be exported. After that, we delete it within 90 days of the workspace closing, or sooner if the workspace owner asks us in writing at [email protected]. Backup copies are deleted as those backups age out on their normal schedule.

We keep billing records for as long as tax and accounting law requires, and security logs for a limited period needed to protect the Service.

Security

Workspace data is isolated per customer by the database itself, access is controlled by role, significant actions are audited, and all traffic is encrypted in transit. Our Security page describes these safeguards in detail. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you as the law requires.

Your choices and rights

Account holders can view and update their details in the app, and workspace administrators can export and correct their business records at any time.

You can ask us to access, correct, delete or provide a copy of personal information we hold about you by emailing [email protected]. We will verify the request and respond within 45 days. Depending on where you live, you may have additional rights under state privacy laws; we will honor them as they apply, and we will not treat you differently for exercising them.

If your information is in PalletRow because you work for, or shop at, a business that uses it, that business controls those records. Please contact the business first; we will help it respond.

Children

PalletRow is a business service and is not directed to children. We do not knowingly collect personal information from children under 16.

Where information is stored

PalletRow is operated from, and its data is stored in, the United States. If you use it from elsewhere, your information will be transferred to and processed in the United States.

Changes to this policy

We will update this policy when our practices change, and change the effective date above. If a change is material, we will email workspace owners before it takes effect.

Contact us

Questions or requests about privacy: [email protected]. Our Terms of Service are at https://palletrow.com/terms.