Privacy policy

Your account

When you create an account we keep your name and email address. Your password is never stored as typed: we keep only a one-way scrypt hash of it. Signing in sets a session cookie that keeps you signed in; we store only a hash of its token, along with when it was last used and your browser's user agent.

Your jobs and boxes

On plans that save jobs, we store your jobs, pallets, containers, box sizes, and saved box lists in your account so you can open them again. We delete them if your account is deleted. On the Free plan a job lives only in your browser tab and is not sent to us for saving.

Auto-stack

Auto-stack runs on our servers. We send the boxes, pallets, and rules in your job to our stacking service and keep a record of each run (what was asked, which logic ran, how long it took, and how it ended) so we can compare logics and fix problems. Runs are deleted with your account.

Anonymous Auto-stack feedback

To make stacking better over time, PalletPro records what people do with a result:

• which alternative you pick when a run offers choices,
• whether you move or turn boxes the run placed,
• whether you run Auto-stack again with another logic or priority, and
• whether you export a PDF without changing the result.

This feedback is anonymous. It holds no account, workspace, job, or run identifier, so it cannot be traced back to you, and it stays when an account is deleted. Alongside each signal we keep only general traits of the job (such as how many boxes and sizes, the deck size, and the height limit) and the scores of the results shown. We use it only to tune how stacking scores its results. New settings ship only in a reviewed release; nothing changes by itself.

Payments

Payments are handled by Stripe. Your card details go to Stripe and are never stored by PalletPro. We keep your plan, your subscription status, and the Stripe customer and invoice references we need to run billing.

Email

We use Resend to send the emails you ask for: confirming your address and resetting your password.

Protecting sign-up

To keep automated programs from making accounts, the sign-up, resend-confirmation, and forgot-password pages use Cloudflare Turnstile. It runs a short check in your browser and sends the result, with your network address, to Cloudflare to confirm you are a person. We also keep a short-lived count of new accounts and email requests per network address to enforce daily limits, and we refuse addresses at throwaway-mailbox services.

Error reports

When something goes wrong in the app or on our servers, we write an error entry so we can find and fix it. Entries hold technical details such as the error message, the page area, and a request number. They never hold passwords, cookies, or your job contents. Pressing Report on an error card sends that entry to us at once.

Cookies

The app uses only the cookies it needs to keep you signed in and to protect your session. This website does not set cookies; it remembers your light or dark theme choice in your browser's own storage on your device.

Deleting your account

When an account is deleted, its sessions, jobs, saved boxes, and Auto-stack runs are deleted with it, and any paid subscription is canceled. Invoices and error entries are kept without your account attached. The anonymous feedback described above has no account attached and stays. Your customer record stays with Stripe, which keeps its own records.

Open-source software

PalletPro is built with open-source software. Each package is used under its own license, and the notices are on our open-source licenses page.

Contact

Questions about this policy, or a request about your data, can go to hello@isodynamics.io.

Changes to this page

When this policy changes, we update the date at the top of the page.