Privacy policy
What we hold, and what we never touch
PalletMath helps you assess liquidation pallets and track resale results. It uses the manifests, assumptions and records you provide. This page explains what we store, how optional imports work, and your choices.
The short version
- We collect your email address, the manifests and cost settings you enter, and the purchases, receiving records and sales you record. We import your own completed sales from eBay or forwarded marketplace receipts only if you choose those connections.
- We do not add your buyers' names, addresses, emails or payment details to your sales records. The eBay import discards buyer fields before writing records. Failed receipt messages may be retained for debugging, including whatever buyer details they contain, under the limits explained below.
- We do not sell your data, and we do not run advertising or analytics trackers.
- Any community benchmarks are published only as aggregates across at least three different sellers. Your individual prices are never shown to anyone else. Current category and condition defaults are provisional, with zero completed user-sales observations behind them.
- Email hello@palletmath.com to see, correct, or delete everything we hold about you.
Who we are
PalletMath D&D LLC, a Pennsylvania limited liability company, operates PalletMath at palletmath.com and app.palletmath.com. We are the controller of the personal information described here. Reach us at hello@palletmath.com, or by post at 502 W 7th St Ste 100, Erie, PA 16502.
What we collect
Your account
An email address and a password. The password is never stored — only a scrypt hash of it, with a per-account salt. We ask for no name and no postal address. If you buy a plan or research lines, your card is entered on Stripe's own payment page and never reaches our server; we keep a customer reference and the invoice records Stripe sends us, not the card.
What you put into the tool
The working data of a pallet buyer: manifests you upload or scan, your freight and fee assumptions, the marketplaces you buy from, what you paid, what arrived when you checked the pallet in, what you eventually sold items for, and the notes and tags you write on a pallet. It supports your assessments, inventory and reports. It belongs to you.
Your eBay orders, only if you connect them
Connecting eBay is optional and off unless you start it. The grant we request is read-only order data (sell.fulfillment.readonly) and nothing else — we cannot list, sell, message, or change anything in your account.
From each order we store only the commercial facts needed to measure what a pallet actually recovered:
| Stored | Never stored |
|---|---|
| Order and line identifiers, item title, SKU, quantity, gross amount, shipping charged, marketplace fees, sale date | Buyer names, buyer usernames, shipping or billing addresses, buyer email addresses or phone numbers, payment or card details, messages |
This is not a policy we apply on top of the data — the import discards buyer fields before anything is written. eBay granted PalletMath an exemption from its Marketplace Account Deletion notification workflow on exactly this basis: we hold no eBay user data to delete. You can disconnect at any time, which deletes the stored token, and you can revoke the grant independently from your eBay account settings.
Receipt emails you forward
The second way a sale gets verified: forward the sale-confirmation email from Mercari, Poshmark, Whatnot, Depop, OfferUp, Facebook Marketplace, Etsy, Amazon or eBay to your own PalletMath address. That address is <token>@rcpt.palletmath.com — a random token unique to your account, not your email address, created the first time you open your address in Connections & community or Results. It only receives; we never send mail from it. Nothing arrives at it unless you forward something or set up a forwarding rule, and it is off until you do.
What we check is the marketplace's own DKIM signature on the email. It counts only if that signature still verifies and was made by one of those nine marketplaces' domains. A plain inline forward rewrites the message and breaks the signature, so it is recorded as failed with a note telling you to use auto-forwarding or "forward as attachment" instead.
The receipt record stores the following facts. Separate copies of failed messages are retained only as described under “When a receipt fails” below:
| Stored | Never stored |
|---|---|
| Marketplace, the domain that signed the email, the outcome (verified, unparsed, failed, duplicate, or info for a forwarding-confirmation email), the order number (or, if none can be read, a short hash of the signed message), item title, gross amount, sale date, and a one-line note | Buyer names, buyer usernames, shipping or billing addresses, buyer email addresses or phone numbers, payment details, the rest of the message |
The message body is scanned for four things: a price, an order number, the item title, and a PM- listing code if you put one in the listing title. We do not look for buyer fields, and anything about your buyer that happens to be in the email is not read into your account or used for anything. A verified receipt becomes a sale row — quantity one, gross amount, sale date, and marketplace fees estimated at the marketplace's published headline rate and marked as an estimate. The order number is compared across every account so the same receipt cannot be counted twice, by you or by anyone else; a repeat is recorded as a duplicate and earns nothing.
When a receipt fails. If the signature does not verify, or it verifies but we cannot read a price from it, we keep a copy of the raw message (the first 300 KB of it) on the server so we can fix the parser. That copy can include whatever was in the email, buyer details included. We keep only the twenty most recent such copies; each new failure pushes the oldest one out, and there is no separate time limit — a copy stays until twenty newer failures have arrived or we have reviewed and removed it. Ask us and we will delete yours sooner.
Limits: a message larger than 1.5 MB is refused at the door, and each account is accepted up to 100 receipts a day. A forwarding-confirmation email from Gmail or Outlook is recognised as setup mail — its confirmation code is shown to you in Connections & community and it is never treated as a sale.
To stop, turn off the forwarding rule in your mail provider; nothing more arrives. The address itself stays valid for the life of your account, so anything that does reach it is judged the same way. Your receipt records go when your account does, under the deletion terms below.
Product updates and workspace access
If you join the product-updates list we store the email address you gave and which form you used, so we can send the product and launch updates you requested. This is separate from an account: it does not create one or claim a beta place. Ask us to remove your address at any time.
Your account records include the workspace access needed to provide Free, Plus, existing access or an explicitly chosen beta. For the 25-place beta, we retain the enrollment and start and end times so the 90-day period cannot be restarted and a claimed place is not given out again. The period is measured by server UTC time. Existing-account access is recorded separately so the new offer does not remove it. Choosing the beta does not start paid billing or automatically send beta enrollment or expiration email.
Deal alerts
If you ask us to tell you when something matches a search on Everything live, we store the email address you gave, the search you asked about, and when we last wrote to you. Nothing else: no name, no browsing history, no record of what you opened or clicked.
We write to you about matches for that search and nothing else — never a newsletter, an announcement or a promotion. Nothing is sent until you confirm the address by clicking the link in the first message, and an unconfirmed request is deleted within a week. Every message carries a link that stops it in one click and deletes what we hold. It creates no account and needs no password.
We do not tell the reseller who is watching them, not even how many people are. Alert subscribers are separate from the people who buy from you on a marketplace. The limits on buyer data described above also apply here.
What we do not collect
No advertising trackers, no analytics scripts, no third-party cookies, no device fingerprinting, no location data. Signed-in sessions use a bearer token your browser holds, not a tracking cookie. Our server keeps ordinary operational logs of requests and errors.
Web fonts are served with the site or embedded in a standalone preview. Loading them does not send a font request to Google Fonts.
What we do with it
- Assess your pallets with reviewed category and condition assumptions, conditional bid limits, worklists and reports.
- Track actual results and evaluate future estimates. Any personal calibration is opt-in. Current category scenarios use the assumptions you review and do not adjust themselves from your recorded sales.
- Contact you about your account or the beta. We do not sell your address on or use it for anyone else's marketing.
- Keep the service running and secure — backups, debugging, preventing abuse.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Community benchmarks, and the line they hold
Buyers' records may help us evaluate future estimates. There is no completed user-sales dataset validating the current category and condition scenarios. When records are pooled, a seller's realized prices must remain private.
A benchmark figure is published only when the group behind it clears both of two thresholds: at least 20 sales, and those sales from at least 3 different sellers. The second is the one that matters. Twenty sales from one seller is still one seller's book, readable by anyone who can do arithmetic.
Any published benchmark reports an aggregate ratio of proceeds to retail for a category and condition, without identifying a price, item, lot or seller. Groups that have not cleared the thresholds remain pending. These thresholds protect privacy; they do not establish how accurately a scenario predicts a future pallet.
Who else touches it
Pallet Pal’s optional voice is AI-generated. Read aloud is off until you choose it. When enabled, the saved answer is sent to OpenAI to create spoken audio. PalletMath keeps audio only in a small private memory cache for up to ten minutes so a replay does not need another generation; no audio recording is stored in the database. We store generation-attempt metadata and illustrative duration estimates separately from your research credit balance. Voice cost remains unknown when the provider does not return usage. The microphone uses your browser’s dictation service; PalletMath does not upload a microphone recording, and your browser may process speech through its own provider.
| Service | What it receives | Why |
|---|---|---|
| Keepa | Product codes (UPC/ASIN) from manifests during optional research. Not your identity, not your lot, not your bid. | Optional item-price research; market history is not a verified resale result for your pallet |
| Anthropic and OpenAI (language models) | Only what a feature needs, only when you use it: the item names, codes, conditions and quantities of manifest lines, for identifying items, writing listings and reading a scanned manifest; the photos you take at check-in and a listing screenshot you upload, to identify what is in them; and, for Pallet Pal, your question, the names of your pallets and lines, how many units are left, when a watched auction ends, and the notes and tags you wrote on a pallet. Pallet Pal is not given your account email, balance or assessment totals automatically. Information you include in questions, notes, documents or images is also sent to the provider used for that feature and may contain prices or personal details. | Reading manifests, identifying items, writing listings, and answering questions and setting up actions in Pallet Pal |
| Stripe | Your email address and what you bought — Plus workspace access, a legacy research subscription or research lines. Your card goes to Stripe's own page and never reaches our server. | Payments, subscriptions and the billing portal |
| eBay | Only your own authorisation, and only if you connect it | Reading your completed orders |
| Your mail provider | Receipt emails: the forwarding rule you create in Gmail, Outlook or another mailbox sends marketplace sale emails to your PalletMath address. We receive them; we send nothing back. | Delivering the receipts you chose to forward |
| Resend | Your email address and the message | Sending account and beta email |
| Fly.io | Hosts the application and its database | Running the service |
Each is a service provider acting on our instructions. None of them is given your data to use for their own purposes.
How it is protected
Traffic is HTTPS only. Passwords are stored as salted scrypt hashes and are not recoverable, by us or anyone else. Access to the production database is limited to the operator of the LLC.
No system is perfectly secure, and we would rather tell you where the soft edge is than imply there isn't one.
How long we keep it
Account and pallet data is kept while your account exists, because its value is the history. Plus or beta access ending does not delete those records: your recorded purchases remain available to finish and export. Delete your account and we delete your account record, manifests, scores, purchases, check-ins and sales within 30 days, and sooner where we can.
Aggregate benchmark figures already computed from pooled data cannot be traced back to a person. Ordinary backups age out on their own schedule. A consumed beta place retains its slot identifier and timestamps after account deletion, with the account link removed and no email retained, so it cannot be given out again. Product-updates list addresses are removed on request.
Your choices and rights
- See it — ask for a copy of everything we hold about you.
- Correct it — most of it you can edit directly; ask us for the rest.
- Delete it — ask us to close your account and remove your data.
- Disconnect eBay — at any moment, from PalletMath or from eBay.
- Stop forwarding receipts — turn off the forwarding rule in your mail provider, and nothing more arrives.
- Opt out of personal calibration — it is off unless you turn it on. Current category scenarios do not use it.
Write to hello@palletmath.com and we will answer within 30 days. We will not charge you for a request, and we will not treat you differently for making one. Depending on where you live you may have additional statutory rights; ask and we will honour them.
Other things worth stating
Not for children. PalletMath is a tool for businesses buying wholesale liquidation. It is not directed at anyone under 18 and we do not knowingly collect their information.
Where data lives. Our servers and service providers are in the United States. If you use PalletMath from elsewhere, your information is processed in the US.
Changes. If we change this policy we will change the effective date above, and we will email account holders before anything material takes effect rather than changing it quietly.
Governing law. This policy is governed by the laws of the Commonwealth of Pennsylvania.
PalletMath D&D LLC · 502 W 7th St Ste 100, Erie, PA 16502 · hello@palletmath.com · Terms · palletmath.com