Privacy Policy

1. Introduction

Routeharvest, Inc. ("the Company," "we," "us," or "our") operates the website routeharvest.com (the "Service"). Routeharvest provides demand forecasting software for mid-market manufacturers and distributors, enabling supply chain planners to forecast demand at the SKU-location level and identify stockout and overstock risks weeks before they materialize. This Privacy Policy explains what information we collect through the Service and through direct communications with you, how we use it, and the choices you have.

We are based at 220 North Green Street, Suite 300, Chicago, IL 60607 and can be reached at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly, including:

• Contact details (name, work email address, phone number) when you fill out a demo request form, contact us, or sign up for early access;
• Company information you choose to share (employer, role, company size, industry, supply chain system context) to help us understand your planning environment;
• Account credentials (email and password) when you register for a Routeharvest account;
• The content of any messages, inquiries, or support requests you send us.

2.2 Information Collected Automatically

When you visit routeharvest.com, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page;
• Cookie and similar identifiers (see Section 5 and our Cookie Policy).

2.3 Supply Chain Data Processed on Behalf of Customers

If you are a paying customer using the Routeharvest demand forecasting platform, you may submit or authorize access to ERP transaction data, WMS location records, and inventory data from your company's systems. This data is processed solely to generate demand forecasts, stockout alerts, and planning outputs for your organization. It is not used for any other purpose, shared with other customers, or used to train shared models without your explicit written consent. Customer supply chain data is governed by the terms of your service agreement, which controls in any conflict with this Policy.

2.4 We Do Not Knowingly Collect Children's Data

routeharvest.com is a business-to-business service not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

We use the information we collect to:

• Respond to demo requests, inquiries, and early-access applications;
• Operate, maintain, and improve the Routeharvest forecasting platform and website;
• Manage customer accounts and deliver the demand forecasting service you have contracted for;
• Send service updates, product release notes, and (with your consent where required) marketing communications about supply chain planning topics;
• Detect, investigate, and prevent fraud, abuse, or unauthorized access;
• Comply with applicable legal obligations.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (for example, cloud hosting, email delivery, and analytics providers) under contractual confidentiality terms that restrict use to services provided to us;
• Authorities, when required by law or to protect rights, safety, or property;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, maintain session state, and measure aggregate usage. We do not use advertising or cross-site tracking technologies. For details and choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described, to comply with legal or accounting obligations, and to resolve disputes. Contact form submissions and early-access inquiries are retained for 24 months. Inactive marketing-list contacts are purged after 24 months of no engagement. Server access logs are retained 90 days, then aggregated. Customer supply chain data is retained in accordance with the applicable service agreement.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, restricted-access cloud infrastructure, and least-privilege access controls. No system is perfectly secure; we cannot guarantee absolute security. If you suspect unauthorized access to your account, contact [email protected] immediately.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law.

9. Illinois Residents

Illinois does not currently have a comprehensive consumer privacy statute. As a matter of policy, the Company extends the following baseline rights to all U.S. residents regardless of state of residence.

9.1 Baseline Rights

• Right to Know: request the categories of personal information we have collected about you.
• Right to Delete: request deletion of personal information you have provided.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Marketing: unsubscribe from marketing emails or opt out via the link in each marketing message.

9.2 How to Exercise

Email [email protected] with a description of your request and enough detail for us to verify your identity. We respond within 45 days.

9.3 Sector-Specific Rights

If you are protected by federal sector laws (for example, GLBA or other financial services laws), those laws may give you additional rights with respect to data covered by them.

9A. California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. The Company does not sell personal information and does not "share" personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints can be sent to: