Privacy Policy

This Privacy Policy describes how Pentane, Inc., a Wyoming corporation (“Pentane,” “we,” “us,” or “our”), collects, uses, and discloses personal information when you visit pentane.com and other sites that link to this Policy (the “Site”), use the Pentane platform (the “Platform”), communicate with us, or attend our events, webinars, or programs. “Personal information” means information that identifies or reasonably relates to an identified or identifiable individual, as defined under applicable privacy laws.

1. Two Roles: When This Policy Applies and When It Does Not

Pentane as a business (controller). This Policy applies to personal information Pentane collects for its own purposes — from Site visitors, prospective customers, demo requesters, event and masterclass registrants, Platform account holders and their authorized users, and people who communicate with us.

Pentane as a service provider (processor). The Platform connects to a customer’s ecommerce store, marketplaces, advertising accounts, and accounting systems and processes the data in them — including order records, customer names, email addresses, shipping addresses, and purchase history — to calculate profitability, attribution, and guidance for that customer. Pentane processes that data as a service provider/processor on the customer’s behalf under its Terms of Service and Data Processing Addendum, not under this Policy. Section 8 describes how we handle it. If you are a customer of a business that uses Pentane and have questions or requests about data that business collected about you, please contact that business directly; where required by law, Pentane assists its customers in responding to verified consumer requests.

2. Personal Information We Collect as a Business

Contact and business information. Name, business email address, phone number, job title, company name, store URL, and the content of your communications with us — provided when you request a demo, contact us, subscribe to content, or register for an event, webinar, or program.

Account and user information. When your company creates a Platform account: the account details provided at signup, the names, titles, and business email addresses of authorized users, login and activity information, settings, and support requests.

Payment information. Payments are processed by our payment processor (Stripe). Pentane receives limited billing details such as payment status, card brand, and last four digits; Pentane does not receive or store full card numbers or bank account credentials. Stripe’s handling of payment information is governed by Stripe’s own privacy policy.

Device and usage information. IP address, device and browser type, operating system, referring pages, pages viewed, features used, and interactions with the Site and Platform, collected automatically through cookies, tags, and similar technologies as described in Section 5.

Information from third parties. Business contact information from marketing and enrichment providers, and information from platforms you use to interact with us (for example, a scheduling tool, social network, or app marketplace listing).

We do not knowingly collect sensitive personal information (such as government identifiers, precise geolocation, or health information) through the Site or Platform signup, and we ask that you not send it to us.

3. How We Use Personal Information

We use personal information to: provide, operate, secure, and support the Site and Platform; create and administer accounts, billing, and support; respond to inquiries and demo requests; deliver events, webinars, and educational content you register for; market our services, including sending communications you can opt out of at any time; analyze and improve the Site, Platform, and our services, including through aggregated product analytics; detect, prevent, and investigate fraud, security incidents, and prohibited activity; comply with legal obligations and enforce our agreements; and complete corporate transactions. We may create aggregated or de-identified data that no longer identifies any individual or customer and use it for any lawful purpose; we will not attempt to re-identify it except as permitted by law to test de-identification.

4. How We Disclose Personal Information

Service providers. Vendors that host, secure, and operate the Site, Platform, and our business — including cloud hosting and infrastructure, payment processing (Stripe), email and communications tools, customer support and scheduling tools, product analytics, AI model providers used for Platform features (Section 8.4), and professional advisors — bound to use personal information only to provide services to us.

Affiliates. Pentane is affiliated with Plenum Labs LLC (“Plenum”), which sells programmatic media. We share personal information with Plenum to provide services you or your company have purchased, for account administration, and for the purposes described in this Policy, consistent with this Policy.

Advertising. We advertise our own services on third-party platforms. We do not place third-party advertising or cross-context behavioral advertising cookies on the Site, and we do not make Site visitor information available to advertising partners through the Site.

Legal and safety. To comply with law, legal process, or governmental request; to enforce our agreements; or to protect the rights, property, or safety of Pentane, our customers, or others.

Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of the transaction, subject to reasonable confidentiality protections.

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws. The analytics and email providers described in Section 5 act as our service providers and are contractually limited to using personal information only to provide services to us.

5. Cookies and Similar Technologies

The Site and Platform use cookies and similar technologies for three purposes: to operate the Site and Platform, including login sessions; to remember your settings; and to understand how the Site and Platform are used. We do not use advertising or cross-context behavioral advertising cookies on the Site.

Technology	Purpose	Provider
Essential cookies	Operate the Site and Platform, including login sessions and security	Pentane
Google Analytics 4	Understand how the Site and Platform are used, in aggregate. Google Signals and advertising personalization are disabled, and Google acts as our service provider	Google
Klaviyo onsite tracking	Recognize returning visitors and associate Site activity with people who have given us their email address, so we can send content and updates they asked for	Klaviyo
Embedded YouTube video	Plays an example customer ad on the homepage, using YouTube’s privacy-enhanced mode. The player loads only when that part of the page is on screen, and YouTube may set its own cookies or similar storage once it plays	Google (YouTube)

You can control cookies through your browser settings, which every major browser provides. Disabling certain cookies may affect functionality. Google’s (including YouTube’s) and Klaviyo’s own collection is also governed by their respective privacy policies.

6. Your Choices

Marketing emails. Use the unsubscribe link in any marketing email or contact us at support@pentane.com. We may still send transactional, account, and service messages.

Sale, sharing and targeted advertising. As described in Sections 4 and 5, we do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of. If that changes, we will update this Policy and provide the opt-out mechanisms required by applicable law before the change takes effect.

Analytics. To opt out of Google Analytics across all sites, install Google’s browser add-on at tools.google.com/dlpage/gaoptout. To stop Klaviyo onsite tracking, clear or block cookies for this Site in your browser.

Connected accounts. You can disconnect a connected platform by revoking Pentane’s access in that platform’s settings (for Google, at myaccount.google.com/permissions). To request deletion of data Pentane has already retrieved, email support@pentane.com.

Other requests. For anything else, including the rights described in Section 7, email support@pentane.com.

7. Your Privacy Rights (U.S. State Laws)

Depending on your state of residence (including under the laws of California, Colorado, Connecticut, Montana, Oregon, Texas, Virginia, Utah, and other states with comprehensive privacy laws), you may have the right to: know/access the personal information we have collected about you, including the categories collected, the sources, the purposes, and the categories of third parties to whom it was disclosed; correct inaccurate personal information; delete personal information, subject to legal exceptions; portability — receive a copy in a usable format; opt out of sale, sharing, targeted advertising, and certain profiling; limit the use of sensitive personal information; and non-discrimination for exercising your rights.

To exercise these rights, email support@pentane.com with your name, state of residence, and the right you wish to exercise. We will verify your request using the information you provide and respond within the time required by law. You may use an authorized agent, in which case we may require proof of the agent’s authority. If we deny your request, you may appeal by replying to our response with the word “Appeal”; if your appeal is denied, you may contact your state Attorney General.

California notice. The categories of personal information we have collected in the preceding 12 months, the sources, purposes, and categories of recipients are as described in Sections 2 through 4. Under California Civil Code §1798.83, California residents may request information about disclosures for third parties’ direct marketing purposes at support@pentane.com.

8. Platform Data We Process for Customers

8.1 What we process and where it comes from.

With a customer’s authorization, the Platform retrieves data from the customer’s connected accounts — such as Shopify, Amazon, Meta, Google (Google Analytics and Google Ads), and accounting systems — through those platforms’ APIs. This data may include order and refund records, customer names, email addresses, phone numbers, shipping and billing addresses, product and cost data, advertising spend and performance data, and financial records. Pentane processes it only on the customer’s documented instructions to provide the Platform and, where purchased, Ad Management Services. Data from Google is subject to the additional commitments in Section 8.6.

8.2 How it is used.

To calculate profit, margins, breakeven targets, attribution, and guidance for the customer; to reconcile advertising results to real orders; to generate reports and alerts; and, where the customer has purchased Ad Management Services, to plan, manage, and measure the customer’s advertising, including providing hashed customer identifiers and conversion signals to Plenum or to advertising platforms for audience matching, suppression, and measurement at the customer’s direction. This sharing never includes data received from Google APIs (Google Analytics or Google Ads); see Section 8.6. Pentane does not combine one customer’s data with another customer’s, does not use customer data to build audiences or profiles for any other customer, and does not sell it. Aggregated, de-identified benchmarks that do not identify any customer or individual may be produced from Platform data.

8.3 Platform requirements.

Pentane processes data from connected platforms in accordance with those platforms’ data-protection and API requirements, including Shopify’s customer data-request and erasure webhooks and Amazon’s data-protection requirements for seller data, and applies retention limits those platforms require.

8.4 AI-assisted features.

Some Platform features generate analysis using AI models operated by third-party providers under agreements that prohibit the provider from using customer data to train its models. Pentane limits the data sent to such providers to what the feature requires.

8.5 Consumer requests.

If you are a customer of a business that uses Pentane, requests to access, correct, or delete your data should go to that business, which controls the data. Pentane processes verified requests forwarded by its customers within the time required by law.

8.6 Google user data.

If you connect Google Analytics or Google Ads to Pentane, we use Google’s OAuth authorization to access the accounts you choose. We request only:

• Google Analytics: read-only access to your Google Analytics data. We retrieve the list of your Analytics accounts and properties so you can choose one. For that property, we retrieve daily ecommerce metrics (total revenue, transactions, purchasers, first-time purchasers, purchaser rate, average purchase revenue, refund amount, total users, and ad revenue) and monthly user-cohort retention counts.
• Google Ads: access to your Google Ads reporting. We retrieve your account names, IDs and currency, plus daily campaign-level performance (campaign name and ID, cost, impressions, clicks, conversions, conversion value, click-through rate, and average cost per click, per thousand impressions, and per conversion). Pentane only reads this data; it does not create, change, or pause campaigns.

How we use it. We use this data only to provide the profitability, attribution, and reporting features shown in your Pentane dashboard, including AI-generated analysis you request in the Platform. Aggregated figures derived from it (such as total ad spend) may be processed by the AI providers listed on our Sub-processors page solely to generate that analysis, under agreements that prohibit them from using it to train their models. Pentane does not use Google user data to train AI models, and does not include it in the aggregated benchmarks described in Section 8.2.

What we don’t do. We do not sell Google user data. We do not use it for advertising, including retargeting, personalized or interest-based ads. We do not transfer it to Plenum Labs LLC (including for Ad Management Services), to advertising platforms, to data brokers, or to any other third party, except to the hosting and AI providers listed on our Sub-processors page so they can operate the Platform, as needed for security, or to comply with applicable law. We do not use it to determine creditworthiness or for lending purposes.

Who can see it. Pentane personnel access your Google user data only when you have asked or engaged us to work with you on your account (for example, managed services, onboarding, or a support request), when it is necessary for security purposes, or when it is required by law. We may use it in aggregated, de-identified form for internal operations.

Storage and retention. Google user data is stored in our database, and the access tokens we use to retrieve it are stored encrypted, for as long as your account is active. Both are deleted or de-identified after your account ends as described in Section 11 and our Terms of Service.

Revoking access. You can revoke Pentane’s access at any time at myaccount.google.com/permissions; Pentane immediately loses the ability to retrieve new data. To have the Google data we have already stored deleted, email support@pentane.com.

Pentane’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. Residents of the EEA, UK, and Switzerland

Where the GDPR or UK GDPR applies, Pentane is the controller of personal information described in Sections 2 through 4 and processes it on the following legal bases: performance of a contract (creating and administering accounts and providing requested services); legitimate interests (operating, securing, and improving the Site and Platform and marketing our services, balanced against your rights); consent (where required, for example for non-essential cookies), which you may withdraw at any time; and compliance with legal obligations. You have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority; contact support@pentane.com. For Platform data described in Section 8, the customer is the controller and Pentane is the processor under the Data Processing Addendum, including approved transfer mechanisms such as the EU Standard Contractual Clauses where applicable.

10. International Transfers

The Site and Platform are hosted and operated in the United States. If you access them from outside the U.S., your personal information will be transferred to, stored, and processed in the U.S., where laws may differ from those of your jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

11. Security and Retention

We use administrative, technical, and physical safeguards designed to protect personal information, appropriate to its sensitivity, including encryption in transit, access controls, and logging. No system is completely secure, and we cannot guarantee absolute security. We retain personal information we hold as a business for as long as needed for the purposes described in this Policy, to comply with legal obligations, to resolve disputes, and to enforce agreements. Platform data is retained for the duration of the customer’s account and deleted or de-identified after termination as described in the Terms of Service, subject to backup cycles, legal holds, and platform-specific retention limits.

12. Children

The Site and Platform are intended for business audiences. We do not knowingly collect personal information from anyone under 18 for our own purposes. If you believe a person under 18 has provided personal information to us, contact support@pentane.com and we will delete it.

13. Changes to This Policy

We may update this Policy from time to time. The “Last modified” date at the top reflects the most recent revision, and material changes will be flagged with a notice on the Site or in the Platform. Your continued use after the updated Policy takes effect indicates your acknowledgment of the revised Policy.

14. Contact Us

Pentane, Inc., 30 N. Gould St., Suite N, Sheridan, WY 82801 — support@pentane.com. If you have a disability and need this Policy in an alternative format, contact us at the same address.