Skip to content
Palermo
Log inJoin now

Draft. Highlighted items are placeholders and must be filled in before this page is published for review.

Legal

Privacy policy

Palermo helps Amazon FBA sellers see where their inventory money is and what it earned. To do that it reads order emails, Seller Central data and prep center records that you choose to connect. This policy explains exactly what we collect, what we do with it, and how you remove it.

Last updated September 14, 2026

Who we are

Palermo is operated by [COMPANY LEGAL NAME], [REGISTERED BUSINESS ADDRESS] (“Palermo”, “we”, “us”). This policy covers trypalermo.com, app.trypalermo.com and the Palermo service. Questions about privacy go to privacy@trypalermo.com.

Palermo is organized into workspaces. A workspace belongs to a seller business. Data you connect or upload belongs to that workspace and is visible to the people its owners invite.

What we collect

Account information

Your name, email address and, if you sign in with Google, your Google profile name and picture. We also store the workspace name you choose and the email addresses of people you invite.

From Amazon Seller Central, when you authorize Palermo

  • Your selling partner ID and the marketplaces you sell in.
  • Your catalog and listings: SKUs, ASINs, product titles and images.
  • FBA inventory levels and inbound shipments to Amazon, including units sent and received.
  • Orders: order IDs, dates, items, quantities, prices and statuses.
  • Settlements and financial events: sales, Amazon fees, refunds and reimbursements.

We do not request the Amazon roles that give access to buyers’ names, addresses, phone numbers or tax information, and we don’t receive that information.

From your email, when you connect Gmail or forward emails

With Gmail read-only access, Palermo searches your mailbox on our servers for emails from retailers about your purchases: order confirmations, shipping notices, cancellations and refunds, and delivery notices. It retrieves only the messages that match. From those messages we store:

  • The retailer, order number and order date.
  • Items, sizes, product identifiers (such as UPC or SKU where the email shows them), quantities, prices, tax and shipping charges.
  • The ship-to address on the order, which is normally your prep center, so orders can be matched to it.
  • Tracking numbers, carriers, shipped and delivered dates, and cancelled or refunded amounts.
  • The email’s message ID and date, and a PDF copy of the order confirmation for your records.

We do not store emails that aren’t retailer order emails, and we don’t keep a copy of your mailbox. Palermo never sends, deletes or changes your email. If you forward emails to your Palermo forwarding address instead, we process what you forward in the same way and discard messages that aren’t order-related.

From your prep centers and files

Counts of units checked in and sent to Amazon, and shipment records, from the prep center connection you set up: an API key you provide, a Google Sheet you give us access to, or CSV files you upload. We also store spreadsheets you upload to import past purchases, and the column mappings you save.

When you use Palermo

Standard server logs (IP address, browser type, pages requested, timestamps and errors) for security and troubleshooting, and cookies that keep you signed in. We don’t use advertising or cross-site tracking cookies.

How we use it

  • To provide Palermo’s features to your workspace: the money map and its discrepancies, sales and profit, inbound shipments, the SKU cost table and imports.
  • To match emails, prep center records and imported rows to your Amazon catalog.
  • To keep the service secure, prevent abuse and fix problems.
  • To contact you about your account, the service and changes to it.
  • To meet legal obligations.

We don’t sell your data, use it for advertising, or combine one seller’s data with another’s to offer to anyone else.

How we use Google user data

Palermo’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace APIs will adhere to the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.

Specifically, for Gmail data Palermo accesses with your permission:

  • Access. Palermo requests read-only access to Gmail (gmail.readonly). It uses that access only to find and read retailer order, shipping, cancellation and delivery emails.
  • Use. The data is used only to provide and improve the features you see in Palermo, such as your money map, discrepancies and SKU costs.
  • Transfer. We don’t transfer Gmail data to others, except to the service providers listed below that help us run those features, to comply with the law, or as part of a merger or acquisition with notice to you.
  • No advertising, no sale, no model training. We don’t use Gmail data for advertising, don’t sell it, and don’t use it to create, train or improve generalized artificial intelligence or machine learning models.
  • Human access. No one at Palermo reads your emails unless you ask us to for a specific message (for example, in a support request), it’s needed to investigate security or abuse, or it’s required by law.
  • Storage. Only the extracted order facts and order confirmation PDFs listed above are stored. They’re encrypted in transit and at rest, and the access token Google issues to Palermo is encrypted with a key unique to your workspace.
  • Revoking. Disconnect Gmail in Palermo’s connection settings, or remove Palermo at myaccount.google.com/permissions. Either one stops all access. See Retention and deletion for what happens to stored data.

Amazon seller data

  • Palermo uses data from Amazon’s Selling Partner API only to provide Palermo to the seller who authorized it, and follows Amazon’s Acceptable Use Policy and Data Protection Policy.
  • It isn’t shared with other sellers, sold, or used for advertising.
  • It isn’t sent to AI model providers.
  • Palermo doesn’t request restricted roles and doesn’t receive buyer personal information.
  • You can revoke access at any time from Seller Central or by disconnecting Amazon in Palermo.

AI processing

Palermo uses Anthropic’s Claude models to read matched retailer emails and extract order facts, and to suggest which columns are which when you import a spreadsheet. Only matched order emails and the sheet contents needed for the mapping are sent. Anthropic acts as our service provider and may not use this data to train its models. Amazon data and emails that aren’t order-related are never sent to it.

Who we share it with

We share data only with these service providers, to run Palermo, under contracts that protect it:

  • Supabase: database, authentication and file storage (United States).
  • Vercel: hosting for trypalermo.com and the Palermo app (United States).
  • DigitalOcean: background processing that syncs inboxes, Amazon and prep centers (United States).
  • Anthropic: AI reading of matched order emails and import mapping, as described above (United States).

People you invite to your workspace see its data. We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a merger, acquisition or sale of assets, in which case we’ll tell you before your data becomes subject to a different privacy policy.

Retention and deletion

  • While your workspace is active, we keep its data so your history and reports stay complete.
  • Disconnecting Amazon, Gmail or a prep center stops syncing right away and deletes its stored access credentials. Data it already produced stays until you delete it or the workspace.
  • Deleting a workspace deletes its data, including extracted email facts, confirmation PDFs, Amazon data and uploads, within 30 days. Encrypted backups age out on a rolling schedule after that.
  • Amazon data is deleted within 30 days after you revoke Palermo’s access in Seller Central, unless you reconnect.
  • Logs are kept for 12 months for security, then deleted.

To delete your account or a workspace, use the settings in the app or email privacy@trypalermo.com.

Security

Data is encrypted in transit and at rest. Each workspace’s data is isolated at the database level, and access credentials for Amazon, Google and prep centers are encrypted with a key unique to each workspace. The security page has the details.

Your choices and rights

You can see and correct most of your data in Palermo, export it, disconnect any source, and delete your workspace or account. Depending on where you live, you may have rights to access, correct, delete or port your personal information, or to object to certain processing. Email privacy@trypalermo.com and we’ll respond within 30 days. We won’t treat you differently for using these rights.

Children

Palermo is a business service and isn’t meant for anyone under 18. We don’t knowingly collect data from children.

Changes

If we change this policy in a way that matters, we’ll email workspace owners and update the date at the top before the change takes effect. We won’t use data already collected in a materially different way without your consent.

Contact

[COMPANY LEGAL NAME]
[REGISTERED BUSINESS ADDRESS]
privacy@trypalermo.com