Privacy Policy

Margin Department (“Margin Department,” “we,” “us”) operates MarginOS at os.margindepartment.com — an analytics platform that helps e-commerce businesses understand their sales, marketing, and profitability data. Questions about this policy can be sent to data@margindepartment.com.

This policy applies to people who use MarginOS: our clients’ team members, partner agencies, and our own staff. Business data we process on a client’s behalf is governed by our agreement with that client; where that agreement and this policy conflict, the agreement controls.

• Account information. Name, email address, and profile photo, provided directly or through Google sign-in, plus your role and client-access assignments within the platform.
• Usage and log data. Pages viewed and product actions (collected with our own first-party analytics), together with IP address, browser type, and timestamps in server logs used for security and troubleshooting.
• Cookies. We use cookies solely for authentication and session management. We do not use third-party advertising cookies and do not track you across other websites.
• Client business data.On behalf of each client, we process commerce data from integrations that client authorizes — for example order and sales records, advertising performance, product catalogs, and inventory from platforms such as Shopify, Meta Ads, and Google Ads. This data can include personal information about a client’s end customers (such as names, email addresses, and order details). We process it solely to provide the service to that client.

We use the information we collect to:

• provide, maintain, and secure the service;
• generate the analytics, reports, and forecasts the platform exists to deliver;
• send reports and notifications (for example by email or Slack) where configured;
• respond to support requests and improve the product; and
• comply with legal obligations.

Some features use artificial intelligence (for example, automated tagging and analysis). AI processing runs on enterprise services configured so that your data is not used to train the providers’ models.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only with:

• Service providers that host and support the platform: Google Cloud Platform (data warehousing, storage, infrastructure), Supabase (authentication and application database), Vercel (application hosting), Resend (transactional email), Slack (notifications, where a client configures them), and Anthropic and Google (AI processing as described above);
• authorities, when required by law or valid legal process;
• a successor entity, in connection with a merger, acquisition, or sale of assets, subject to this policy; and
• others at your direction or with your consent.

If your personal information appears in MarginOS because you shopped with one of our clients, we process it as a service provider on that merchant’s instructions. Please direct privacy requests to the merchant you purchased from; we assist our clients in honoring such requests.

We protect information with encryption in transit (TLS), encryption at rest provided by our cloud infrastructure, per-client data isolation, role-based access controls, least-privilege credentials, and centralized secret management. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We keep account information for as long as your account is active and as needed for legitimate business or legal purposes. Client business data is retained per our agreement with the client and deleted or returned when the engagement ends, on request. Server logs are kept for a limited period for security purposes.

You may request access to, correction of, or deletion of your personal information by emailing data@margindepartment.com.

Depending on your state of residence (including under the California Consumer Privacy Act), you may have the right to know what personal information we hold about you, to correct or delete it, to obtain a portable copy, and to not receive discriminatory treatment for exercising these rights. We do not sell or “share” personal information as those terms are defined under California law. We will verify requests before acting on them, and you may use an authorized agent to submit a request on your behalf.

MarginOS is a business tool and is not directed to individuals under 16. We do not knowingly collect personal information from children.

MarginOS is operated from the United States, and information is processed and stored in the United States. If you access the service from elsewhere, you understand that your information will be transferred to the United States.

We may update this policy from time to time. We will post the updated version here and revise the effective date above; for material changes we will provide notice through the service or by email.

Margin Department · data@margindepartment.com