Privacy notice

Visiting the website

Our Microsoft Azure hosting service processes connection information, such as your IP address and the pages requested, to deliver and operate the website.

This privacy page has no sign-in form, tracking script or analytics controls. Reading it does not enable analytics.

Accounts and email sign-in

We use your email address to deliver verification codes through Microsoft 365, identify your account and manage its approval status. Approved administrators can review account email addresses and approval status. Session and security cookies support sign-in and protect account actions; session cookies are Secure and HTTP-only.

New customer accounts require approval before using planning tools. Operational records include sign-in, approval, security and product-action events used to maintain the service.

If you choose an available Microsoft or LinkedIn sign-in option, that provider processes your sign-in request and supplies an account identifier and available profile/email claims. BetterPallet uses them to link sign-in methods to your account. Where mailbox control is not proved by the provider, we require an email code before linking. Provider sign-in does not bypass account approval.

Planning information

BetterPallet processes carton dimensions, weights and order contents to calculate pallet plans. Saved catalogs, recorded pallets, freight settings, usage and change history are held in Microsoft Azure storage under your account. Browser storage also holds preferences and identifiers used to recover interrupted saves.

Existing LTL Digest customer data and API keys are not imported into BetterPallet. Authorized service operators may access information needed to operate, support and maintain the service.

Analytics and external services

When API access is enabled, you may create limited-scope integration keys for packing and recorded-pallet submissions. Keys access only your account's permitted operations. We store key digests, labels, scopes, expiry and redacted usage records; a newly created or rotated secret is displayed once and is not recoverable. You are responsible for safeguarding keys shared with your own integrations. Revoking a key or closing your account invalidates its access.

When camera measurement is enabled, manual point placement processes photos in your browser. Optional automatic point detection is off until you select it. If selected and available, BetterPallet removes image metadata, resizes the image and sends it to OpenAI's US processing endpoint. BetterPallet does not save the photo or include your account identifier in the model request. Provider retention and abuse-monitoring rules depend on the API project's data controls; disabling response storage does not itself guarantee zero provider retention. See OpenAI's API data controls. A photo alone cannot establish an object's true dimensions: supply a known scale, review points, and verify estimates before freight billing.

Microsoft Clarity and other third-party analytics are disabled for this release, including when this browser previously saved analytics consent. Customer planning and account pages do not load a session recorder. We will update this notice before enabling optional analytics.

Microsoft describes its handling of data in the Microsoft privacy statement.

Questions and data requests

Contact hello@betterpallet.com with privacy questions or requests concerning access, correction, retention or deletion. Include only the information needed to explain your request; do not email passwords, verification codes, API keys or shipment files. Identity verification may be needed before account-specific information can be discussed.

You can request account deletion through account settings or contact us about saved information. Account closure revokes access; service operators handle any remaining storage cleanup. Our operational policy selects 90-day security-event retention and 35-day retention for backup copies, when created. Protected backups cannot be edited during their retention term and expire separately from active account data. Recovery must preserve deletion and revocation decisions rather than reopen access from an older copy.

We retain pseudonymous identity reservations and deletion markers to prevent removed identities from being silently relinked or re-registered. A 24-hour active-data cleanup target is an operational objective, not a guaranteed response time. Changes to the service's data handling will be reflected here.