Privacy Policy

1. Information We Collect

We collect information you provide directly to us when using Planogrammer™:

Account Information: Email address and password when you create an account, as well as optional profile information such as your full name and company.

Business Data: Project names, product specifications (including SKU data, dimensions, colors, and product images), shelf configurations, price tag settings, and planogram layouts you create using the platform.

Usage Data: Session activity including login/logout times, pages visited within the application, session duration, and browser type. This data is collected only for authenticated users to understand how the platform is used and improve our services.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process and store your planogram projects and product data
• Send you technical notices, support messages, and account status updates
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve user experience
• Protect against unauthorized access and ensure platform security

3. Data Storage and Security

We implement reasonable administrative, technical, and organizational safeguards consistent with industry standards to protect the security, confidentiality, and integrity of your data:

• All data is encrypted in transit and at rest
• Access controls isolate your data from other users (see Administrative Access disclosure below)
• We use row-level security to isolate user data
• Authentication systems protect account access
• Regular security practices are followed to maintain data integrity

While we take security seriously and implement industry-standard protections, no system is completely immune to security risks. We continuously work to improve our security measures.

4. Administrative Access

Planogrammer administrators may access user projects, accounts, and data for legitimate business purposes including:

• Providing customer service and technical support
• Troubleshooting errors and investigating reported issues
• Platform improvement and quality assurance
• Enforcing our Terms of Service
• Complying with legal obligations

Administrative access is limited to authorized personnel and is logged for accountability. If you have concerns about administrative access to your data, please contact us before agreeing to these terms to discuss your requirements and explore alternative solutions.

5. Security Incidents

In the event of a data incident affecting your personal information, we will:

• Investigate the incident promptly
• Take steps to mitigate any ongoing harm
• Notify affected users in accordance with applicable law, including GDPR where applicable
• Provide information about the nature of the incident and recommended protective actions

We maintain incident response procedures to address potential security issues. Nothing in this section limits your rights under applicable data protection laws.

6. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have the following data protection rights:

• Right to Access: You can request a copy of all your personal data
• Right to Rectification: You can update your information at any time through the Profile Settings page
• Right to Erasure: You can delete your account and all associated data
• Right to Data Portability: You can export your data in a machine-readable format
• Right to Object: You can object to processing of your personal data

To exercise these rights, visit the Profile Settings page or contact us directly. We will respond to your request within the timeframes required by applicable law.

7. Data Controller Responsibilities

For users located in the European Economic Area (EEA), United Kingdom, or Switzerland, Lehmann Group LLC acts as the data controller for personal data collected through Planogrammer.

We process your data based on the following legal bases under GDPR:

• Contract Performance: Processing necessary to provide the Service you requested
• Legitimate Interests: Processing for our legitimate business interests, such as improving our services, where not overridden by your rights
• Consent: Where you have provided specific consent for certain processing activities
• Legal Obligation: Processing necessary to comply with applicable laws

Nothing in our Terms of Service limits or waives your statutory rights under GDPR or other applicable data protection laws.

8. Data Retention

We retain your personal data only for as long as necessary to provide you with our services and as described in this Privacy Policy. When you delete your account, all associated data is permanently removed from our systems.

9. Browser Storage

Planogrammer uses browser storage technologies (localStorage and sessionStorage) strictly for functional purposes essential to the operation of the application:

• Theme Preferences: Storing your light/dark mode preferences
• Session Management: Maintaining authentication state for logged-in users
• User Preferences: Remembering your application settings across sessions

This storage is classified as "strictly necessary" under GDPR and ePrivacy Directive, as it is essential for the application to function properly. Planogrammer does not deploy tracking cookies or advertising cookies. For information about infrastructure-level analytics collected by our hosting provider, see Section 10 below.

10. Hosting Platform Analytics

Planogrammer is hosted on a third-party platform that may collect basic visitor analytics at the infrastructure level. This may include:

• Page Views: Aggregate counts of pages visited
• Geographic Region: Country-level location derived from IP address
• Device Type: Whether you are using desktop or mobile
• Session Metrics: Bounce rate and session duration

This data is collected by our hosting provider, Lovable (lovable.dev), for security monitoring, performance optimization, and service improvement. We do not have direct control over this infrastructure-level data collection.

In selecting Lovable as our hosting provider, we evaluated their data practices and, as of the date of this policy, they do not use infrastructure analytics data for advertising or cross-site tracking purposes. However, third-party provider policies are subject to change without notice to us, and we cannot guarantee their future practices. We encourage you to review Lovable's privacy policy directly at lovable.dev/privacy for the most current information.

If you have concerns about this data collection, you may use browser privacy tools or contact us to discuss your options.

11. Third-Party Links

Planogrammer may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

12. Third-Party Services

We may use third-party services that collect, monitor, and analyze data:

• Authentication and database services for secure data storage
• Email services for account notifications and status updates
• Hosting infrastructure services for application delivery (see Section 10)
• Cloud storage services for product images and project assets

These services have their own privacy policies governing the use of your information.

13. Children's Privacy

Planogrammer is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of Planogrammer after any changes constitutes your acceptance of the updated Privacy Policy.

15. Third-Party Brands and Nominative Fair Use

Planogrammer may display 3D representations or visual approximations of real-world consumer products — including packaging, labels, colors, shapes, and other brand-associated imagery — for the limited purpose of planogram design, shelf visualization, and merchandising decision-support. These depictions are provided in good faith as nominative fair use.

All third-party trademarks, trade dress, product names, and brand imagery remain the exclusive property of their respective owners. Their appearance within the Service does not indicate any sponsorship, endorsement, affiliation, partnership, or approval by those brands, and does not reflect any claim of ownership or proprietary interest by Lehmann Group LLC, Goods Intelligence, Planogrammer, or its users. Full terms governing this use are set out in Section 5 of our Terms of Service.

Brand owners with concerns about a specific depiction may contact us and we will review and, where appropriate, remove or modify the content in good faith.

16. Contact Us

Planogrammer™ is wholly owned and operated by Lehmann Group LLC, doing business as Goods Intelligence, a New Jersey Limited Liability Company. All intellectual property rights in Planogrammer are exclusively owned by Lehmann Group LLC.

Mailing Address:

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at the email address associated with your account administration.

For information about the terms governing your use of Planogrammer, please review our Terms of Service.