Privacy Policy

1. What this covers

This policy explains what Partout — operated by Locker Corp (“Partout”, “we”, “us”) — collects when you use partout.ai, why we collect it, who processes it on our behalf, and what your choices are. It covers sellers using the product and buyers interacting with seller invoices.

2. What we collect

Account information: your name, email, password (stored hashed — we can't read it), phone, and profile photo. If you sign in with Google, we get your name, email, and profile picture from Google.

Business content: the photos you upload, listings, inventory, purchase entries, orders, private sales, and team member details you add.

Buyer information on invoices: when a seller creates an invoice, the buyer's name, contact details, and shipping address live with that sale so the invoice works.

Payment and identity information: handled by Stripe, not us. Your SSN and bank login entered during payments setup are tokenized in your browser and go directly to Stripe — Partout's servers never receive, see, or store them. We store only Stripe's identifiers (account ID, status) and your bank's name and last four digits for display.

Usage data: standard server logs (IP address, browser, pages requested) for security and debugging.

3. What we do with it

Run the product: store your photos, draft listings with AI, sync with marketplaces you connect, generate invoices, collect payments, buy shipping labels, and show you your own analytics.

AI processing: your photos and listing text are processed by Anthropic's Claude models to draft listings. Anthropic processes this data as our service provider; we don't use your content to train models.

Communicate: transactional email (invoices, welcome emails, receipts) via Resend. We don't send marketing email without asking first.

We do not sell your personal information, and we don't share it with anyone except the processors below doing work for us.

4. Who processes data for us

Vercel — hosting and file storage. Stripe — payments, identity verification, payouts. Anthropic — AI listing drafting. Google — sign-in (if you use it), the Firestore database, and cloud analytics infrastructure. Resend — transactional email. Twilio — the text messages described in section 6. MX Locker, QuickBooks, Shippo — only if you connect them, and only the data the integration visibly syncs.

Each processor gets the minimum it needs to do its job and is bound by its own data processing terms.

5. Marketplace integrations

When you connect MX Locker, your Partout account links to your MX Locker seller account and your browser talks to MX Locker's systems directly to read your listings and orders. What MX Locker does with data on their side is covered by their privacy policy. The same pattern applies to other integrations you choose to connect — connecting is always your action, never automatic.

6. Text messages

A seller can ask us to text you about your own order. It only happens if the seller records your agreement on the invoice — there is a consent checkbox on that form, and we store the moment it was ticked. No consent recorded, no text sent, however complete the rest of the sale is.

There are two messages, both transactional: the invoice link when the seller issues it, and a tracking number when the order ships. Each names the seller you bought from. Message frequency depends on your own orders — most buyers get one or two per purchase. We never send marketing or promotional texts.

Message and data rates may apply. Reply STOP to any message to stop them, or HELP for assistance.

We do not sell, rent, or share mobile numbers with third parties for marketing purposes, and mobile numbers are not shared with anyone for their own use. A number goes only to Twilio, the carrier that delivers the message on our behalf, and to the seller whose order it concerns.

7. Retention

We keep your data while your account is active. Close your account and we delete your content within 30 days, except records we need to keep — invoices and payment records tied to real transactions have legal retention requirements, and Stripe retains what its own compliance obligations require.

8. Security

All traffic is encrypted in transit (HTTPS). Stored files live in access-controlled private storage. Passwords are hashed. The most sensitive data — SSN and bank credentials — never touches our servers by design; it goes browser-to-Stripe.

No system is perfectly secure. If a breach affects your data, we'll tell you promptly and plainly.

9. Your choices

You can see and edit your account information in the dashboard. You can export your business data by asking us. You can disconnect integrations at any time. You can close your account and have your data deleted by emailing info@partout.ai.

10. State privacy rights

If you live in California, Virginia, Colorado, Connecticut, Utah, or another state with a comprehensive privacy law, you have the right to: know what personal information we process and access it, correct inaccurate information, delete your personal information, obtain a portable copy, and opt out of sales, sharing, or targeted advertising. Partout doesn't sell personal information or use it for targeted advertising, so there's nothing to opt out of — the rest we'll honor on request.

To exercise any of these rights, email info@partout.ai with the subject “Privacy Request.” We won't discriminate against you for exercising them, and we'll respond within the timeframe your state's law requires.

11. Cookies

Partout uses cookies for one thing: keeping you signed in. No advertising cookies, no cross-site trackers.

12. Children

Partout is not for anyone under 18, and we don't knowingly collect data from minors.

13. Changes

If this policy changes materially, we'll notify you by email or in the product before the change takes effect, and this page always shows the current effective date.

14. Contact

Privacy questions or requests: info@partout.ai.