Legal
Privacy Policy
1. Who we are
Pentabpo (“we”, “us”, “our”) is a full-service e-commerce management agency. This policy explains what happens to the personal information you provide when you use https://pentabpo.vercel.app or submit one of our forms.
For any privacy question, contact us at pentabpo@gmail.com.
2. What we collect
We only collect what you choose to give us through our contact and audit-request forms:
- Required: your full name and business email address, plus your consent to be contacted.
- Optional: phone number, company or brand name, website or store URL, the marketplaces and services you’re interested in, your current monthly revenue range, and any message you write.
- Automatically: the page you submitted the form from, and your IP address (used solely for spam prevention and rate limiting).
We do not use advertising trackers, sell data to third parties, or collect any special-category personal data.
3. How we use it
- To respond to your enquiry and prepare your audit.
- To send you a confirmation that we received your request.
- To contact you about our services, where you have consented to that.
- To protect the site from spam and abuse (IP-based rate limiting).
We will never use your information for a purpose you have not agreed to.
4. Who processes it
We use a small number of trusted service providers to run this website. Each only processes your data on our instructions:
- Supabase — secure database storage for submitted form entries.
- Resend — delivery of the notification and confirmation emails.
- Vercel — website hosting and serverless infrastructure.
We do not share your information with any other third party except where required by law.
5. How long we keep it
We retain submitted enquiries for as long as needed to respond to you and maintain our business records. If you would like your submission deleted, email us and we will remove it — see your rights below.
6. How we protect it
- All traffic to this site is encrypted in transit (HTTPS).
- Submitted entries are stored in a database with row-level security enabled: the public site key can only create a new entry, never read, change or delete existing ones.
- Administrative access requires a hashed password and a signed, httpOnly session cookie.
- Form submissions are validated and screened for automated abuse.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete the personal information we hold about you, and to withdraw your consent to be contacted at any time. To exercise any of these, email pentabpo@gmail.com and we will respond within 30 days.
8. Cookies
This site does not use advertising or analytics cookies. We set a single essential cookie only when an administrator signs in to the internal dashboard; it is httpOnly, encrypted and never used for tracking visitors.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected in the “last updated” date at the top of this page.