Privacy Policy

Effective July 2, 2026

The short version: your business data is yours. We don't run ads, we don't sell or share your data with advertisers, we don't use analytics trackers, and we don't set cookies. We collect only what the app needs to work, and you can export or delete it at any time.

Who we are

Market Pulse is built by MatGar and operated at farmersmarketpulse.com. For anything privacy-related, email info@farmersmarketpulse.com.

What we collect

Account information — your email address and password when you create an account. Passwords are handled by our authentication provider and stored only in hashed form; we never see or store them in plain text.
Business data you enter — markets, items and prices, sales history, inventory, recipes, expenses, and vendor records (which can include vendor names, email addresses, pay rates, and schedules). You control everything entered here.
Square access token — only if you choose to connect the Square API. The token is stored with your business data and is used solely to fetch your sales from Square. It is never sent anywhere except Square.
Billing information — payments are processed by Stripe. Your card details are entered on Stripe's secure pages and never touch our servers. We store only your subscription status and Stripe customer reference.
Team invitations — the email address and role of teammates you invite, so we can send them their invite code.

Where your data lives

Market Pulse is local-first: your data is stored in your own browser. When cloud sync is on (any signed-in account), it is also stored in our database so it follows you across devices and can be shared with your team. Each business's data is locked at the database level, so only signed-in members of that business can access it — this is enforced by the database itself (a protection called row-level security), not just by the app.

Our access to your content

Like most cloud software, our small operations team technically has administrative access to the database that stores synced data. We commit to not viewing your business content — your recipes, sales, costs, vendor pay, or anything else you enter — except when you ask us to for support, or where required by law. We know things like recipes can be proprietary, and we treat everything you enter as confidential.

Recipe encryption (zero-knowledge)

For recipes and ingredients we go further: you can turn on end-to-end encryption from the Recipes tab. When it's on, your recipes and ingredients are encrypted in your browser with keys derived from a passphrase you choose, and our servers store only the resulting ciphertext. We never receive your passphrase, your recovery code, or your keys, so we cannot read your encrypted recipes — not our operations team, not our support, not anyone at Market Pulse, and not anyone who might compromise our database. The trade-off is real: if you lose both your passphrase and your recovery code, your encrypted recipes cannot be recovered by anyone, including us — the app makes you save a recovery code before encryption turns on for exactly this reason. Your sales, catalog, markets and P&L are not encrypted this way (reports and totals need them) and remain covered by the commitments above.

Cookies and tracking

We do not set cookies, and we do not use analytics, advertising pixels, or any tracking scripts. The app uses your browser's local storage strictly to make the product function (your data, your theme choice, your session). One note for completeness: our pages load fonts from Google Fonts, so Google receives the standard technical data of any web request (such as your IP address) when fonts are fetched. Payments happen on Stripe's own pages, which operate under Stripe's privacy policy.

Emails we send

Only transactional email: team invite codes, the weekly business summary for owners (switch it off any time in Settings → Business → Weekly summary email), and billing receipts from Stripe. We don't send marketing email without your consent.

Service providers

We use a small set of providers to run the service, each receiving only what they need: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Resend (transactional email), Square (only when you connect your own Square account), and Google Fonts (typefaces). We don't sell or rent personal information to anyone.

Retention and deletion

We keep your data while your account is active. You can export your data at any time from Settings → Data & Backups. To delete a business or your entire account and its data, use the in-app options or email info@farmersmarketpulse.com and we'll remove it.

Security

All traffic is encrypted over HTTPS. Passwords are hashed, cloud data is guarded by row-level security, recipes can be end-to-end encrypted so that only your team holds the keys (see above), and backup exports that contain credentials are encrypted with a passphrase you choose. No system is perfect, but we keep the surface small: no trackers, no third-party scripts beyond the providers above.

Your rights

You can request access to, correction of, or deletion of your personal information at any time. California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we honor access and deletion requests — email info@farmersmarketpulse.com.

Children

Market Pulse is a business tool and is not directed at children under 13. We don't knowingly collect information from children.

Changes to this policy

If we make material changes we'll update the date above and notify account owners by email. Continued use of the service after changes take effect means you accept the updated policy.

Questions? info@farmersmarketpulse.com