Privacy policy

1. Who we are

Peregrow Inc. (“Peregrow”) runs peregrow.com and the Peregrow app. We are based in Ontario, Canada. Our Privacy Officer is [name], reachable at privacy@peregrow.com.

This policy explains how we handle personal information. For data our business customers send us about their customers (for example, Amazon or Shopify order details), we act on our customer’s behalf as a service provider or processor, and their privacy policy also applies.

2. What we collect

• Account details: name, business name, email, phone, role, login and security information.
• Billing details: billing address and tax numbers. Card details are handled by our payment processor, Stripe. We never see or store full card numbers.
• Connected-account data: advertising, sales, listing, catalogue, order and store data from Amazon, Meta, Shopify and other platforms you connect. Order data can include end-customer names and shipping addresses. We request only the access each feature needs.
• Usage data: pages visited, features used, device, browser and IP address, and app logs.
• Communications: support requests, feedback, and survey or call notes.
• Free-audit and website forms: the details you enter and the account data you connect for the audit.

3. How we use it

• To provide Peregrow: run analyses, show findings, apply the changes you approve or allow through Autopilot, and send alerts.
• To bill you, prevent fraud and keep Peregrow secure.
• To support you and tell you about service changes.
• To improve Peregrow, using aggregated, de-identified statistics wherever possible.
• To send product news, only with your consent as required by Canada’s Anti-Spam Legislation (CASL). Every message has an unsubscribe link.
• To meet legal, tax and platform-policy obligations.

We do not sell personal information, we do not use it for third-party advertising, and we do not allow AI providers to train their models on it.

4. AI processing

Peregrow sends the relevant parts of your account data to third-party AI model providers to produce analyses and drafts. We use their business API services, under terms that do not allow them to use your data to train their models. We keep end-customer personal information out of AI requests unless a feature needs it.

5. Who we share it with

• Service providers that host, process or support Peregrow for us (hosting, payments, email, AI models, error monitoring), under contracts that require them to protect it. A current list is on our Subprocessors page.
• The platforms you connect, when Peregrow carries out an action you asked for.
• Professional advisers and authorities, where the law requires it or to protect our rights.
• A buyer or successor, if Peregrow is reorganized or sold, under the same protections.

6. Where it is stored

Peregrow is hosted in [Canada / the United States]. Some service providers process data in the United States or elsewhere, where it may be accessible to local authorities under local law. We protect transfers by contract.

7. How long we keep it

We keep account data while your account is open. After closure we delete it within 90 days, except what we must keep for tax and legal reasons (usually 7 years for billing records). Platform data is kept only as long as each platform’s policies allow, for example within Amazon’s retention limits. Security logs are kept for at least 12 months.

8. Security

We use encryption in transit (TLS 1.2 or higher) and at rest, access limited to staff who need it, multi-factor authentication, logging and monitoring, regular patching and backups. If a breach creates a real risk of significant harm, we will notify you and the regulators as the law requires.

9. Your choices and rights

You can ask to access, correct or delete your personal information, withdraw consent, or ask how it was used, by writing to privacy@peregrow.com. We reply within 30 days. Depending on where you live, you may have additional rights, for example under Quebec’s Law 25 or US state privacy laws. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or your local regulator.

10. Cookies

We use essential cookies to run the app and, with your consent where required, analytics cookies to understand how the website is used. See our Cookie Notice for details and choices.

11. Children

Peregrow is for businesses and is not directed to anyone under 18.

12. Changes

We will post updates here and, for material changes, notify account holders by email or in the app before they take effect.