This Privacy Policy describes how PeakGen Consulting LLC, doing business as RetailGenie ("RetailGenie", "we", "us"), collects, uses, and shares information when you use our retail operations platform at app.retailgenie.io, our website at retailgenie.io, and related services (together, the "Services").
1. Who this policy is for
RetailGenie has two kinds of users:
- Retailer customers — businesses that license RetailGenie to run their stores, and their staff. We are a service provider to these businesses. The data they bring into RetailGenie (their customer lists, invoices, inventory) belongs to them.
- End consumers of those retailers — people who shop at a store that uses RetailGenie. When you interact with a retailer (receive a receipt, get a text about your delivery, open a delivery tracking link), data about you may pass through RetailGenie on behalf of that retailer. We process that data only on the retailer's behalf and only to provide the Services to them. The retailer is the data controller for that data; see their own privacy policy for how they use it.
This policy describes our practices for both groups, with separate sections where the practices differ.
2. Information we collect
From retailer customers (account holders and their staff)
- Account information — name, business name, email, phone number, billing address.
- Staff information — names, work emails and phone numbers, roles, schedules, and sales activity entered by the retailer. For delivery drivers, this includes GPS location while the driver has chosen to go online during an active delivery shift (used for route display and customer-facing delivery tracking).
- Payment information — handled by our payment processor. Card details are entered with and stored by the processor; we do not store full card numbers.
- Usage data — pages visited, features used, error logs, IP address, and browser type, used to operate, secure, and improve the Services.
From end consumers (handled on the retailer's behalf)
- Identifiers — name, address, phone number, email, delivery instructions.
- Commercial information — items purchased, quotes, returns, service requests, financing applications submitted through the retailer, and the history of communications with the retailer.
- Delivery tracking — when you open a delivery tracking link, you can see the driver's live location while your delivery is in progress. We do not collect your location from the tracking page.
- Communications — the SMS and email messages sent to you on the retailer's behalf (order confirmations, delivery updates, appointment reminders, follow-ups, review requests) and your replies.
3. Text messaging (SMS) and mobile information
Retailers use RetailGenie to send text messages to their customers — for example order confirmations, delivery scheduling and tracking links, appointment reminders, and follow-ups. RetailGenie may also send text messages to its own retailer customers and prospects who opt in.
- Consent. Messages are sent only to recipients who have provided their phone number and consented to receive texts (for end consumers, consent is collected by the retailer — for example at the point of sale or on a web form). Consent is not a condition of any purchase.
- Opting out. Reply STOP at any time to cancel and stop receiving messages. Reply HELP for help. After you send STOP, one final message may confirm your opt-out.
- Frequency and rates. Message frequency varies based on your interactions (for example, a delivery generates a small number of updates). Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.
- No sharing of mobile information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, except with our SMS delivery provider as strictly necessary to send the messages you have requested, or as required by law.
4. How we use information
- Provide and operate the Services.
- Process retailer-initiated transactions (invoices, payments, deliveries, returns, service orders).
- Send transactional messages (order confirmations, delivery updates, review requests) on the retailer's behalf, subject to the recipient's opt-out preferences.
- Detect fraud, abuse, or security incidents and protect the Services.
- Improve the Services through aggregated, de-identified analytics.
- Comply with legal obligations.
We do not sell personal information to third parties, and we do not use the data retailers hold about their customers for advertising.
5. AI features
Some features use artificial intelligence to turn plain-language input into structured records (for example, dictating a sale to create an invoice) and to summarize business activity. Before any content is sent to our AI provider, personal identifiers such as customer phone numbers, emails, street addresses, and free-text notes are redacted by our systems. Under our agreement with our AI provider, the content of these requests is not used to train their models.
6. How we share information
- With our subprocessors, who help us deliver the Services under contracts that limit their use of the data to providing their service to us. See the current list in our Data Processing Agreement. Subprocessors include Supabase (database, authentication, and file storage), Vercel (application hosting), Resend (email delivery), Twilio (SMS and voice delivery), Anthropic (AI features), Helcim (payment processing), Mapbox (delivery maps), and Sentry (error monitoring).
- With the retailer whose store you (an end consumer) interact with. The retailer is the data controller of its customer data.
- To comply with law, court orders, or to protect the rights, property, or safety of RetailGenie, our users, or others.
- In a business transaction, such as a merger or asset sale, in which case the recipient remains bound by this policy.
7. Cookies and local storage
The Services use browser storage for essential purposes only — keeping you signed in, remembering interface preferences, and supporting offline use of the point of sale. We do not use third-party advertising cookies or cross-site trackers in the application.
8. Data retention
We retain data for as long as the retailer's account is active, plus a reasonable period for backups and legal compliance. Delivery proof photos and SMS/email logs are typically retained for 12 months. Retailer accounts that have been inactive for more than 18 months may be archived and eventually deleted on notice. When an account is terminated, the retailer can export its data for at least 30 days before deletion.
9. Security
We use industry-standard safeguards including TLS encryption in transit, encryption at rest for integration credentials, row-level security policies in the database that isolate each retailer's data, role-based access control, rate limiting, and immutable audit logs for sensitive actions. No system is perfectly secure; we encourage strong passwords and prompt notification of any suspected compromise.
10. Children
RetailGenie is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided information, contact us at austin@retailgenie.io.
11. Your California privacy rights (CCPA / CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"):
- Right to know — what categories of personal information we have collected about you, the sources, purposes, and parties we share with.
- Right to delete — request that we delete personal information we have collected from you, subject to limited exceptions.
- Right to correct — request that we correct inaccurate personal information.
- Right to portability — receive a copy of your data in a portable format.
- Right to opt out of "sale" or "sharing" — RetailGenie does not sell personal information for monetary value, and we do not share personal information for cross-context behavioral advertising. You have nothing to opt out of from us; if you nonetheless wish to confirm this in writing, email austin@retailgenie.io.
- Right to limit use of sensitive personal information — we do not use sensitive personal information for purposes beyond what is reasonably necessary to provide the Services.
- Right against retaliation — we will not deny goods or services, charge different prices, or provide a different quality of service because you exercised any of these rights.
To exercise a California right, email austin@retailgenie.io with the subject "CCPA Request" and identify which right you'd like to exercise. We will verify your request and respond within 45 days.
Note for end consumers: If your personal information was collected by a retailer using RetailGenie, your CCPA request should be directed to that retailer, who is the controller of the information. We will assist the retailer with the technical fulfillment of your request.
12. International users
RetailGenie is operated from the United States. By using the Services from outside the US, you consent to the transfer of your information to the US, which may have different data protection rules than your country.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy with a new "Last updated" date and notify active retailer accounts of material changes.
14. Contact us
Questions about this policy or to exercise any of your rights:
- Email: austin@retailgenie.io
- Mail: PeakGen Consulting LLC · 500 Southland Drive, STE 235, Hoover, AL 35226