Privacy Policy

Data Lantern LLC · Ukiah, California · [email protected] Effective: October 10, 2026

Who we are

Data Lantern LLC ("Data Lantern", "we") provides a retail analytics service to businesses that use Epicor Eagle. Each business that subscribes is our customer. The people who sign in are our customer's staff (users).

For our customer's business data, we act as a service provider: we process it only to provide the service to that customer, under our agreement with them. The customer decides who has access and what data is sent to us.

What we collect

• Account details your company's administrator gives us: your name, work email address, role, and which stores you can see.
• Sign-in details:
  • the account ID and email address that Google, Microsoft or our email-code sign-in confirms for you;
  • the times you sign in and out;
  • part of your IP address and your browser type, for security.
• Your company's business data, sent from its point-of-sale system:
  • sales, inventory, items, prices and costs;
  • vendors and purchasing;
  • store traffic, budgets and financial reports;
  • the names and numbers of your company's business customer accounts.
• Payroll totals by store. If your company uploads payroll, we keep only totals by store and pay period. We never store individual employees' pay.
• What you do in the app: plays you're assigned or complete, items you tick, files your company uploads, questions you ask the Ask feature, and settings you change.
• Email records: a record that we sent you a service email (invite, sign-in code, morning summary, alert). We store a scrambled (hashed) form of the address, not the address itself.

We don't collect payment card numbers, government ID numbers or health information.

How we use it

• To provide the service: show your company's numbers, find opportunities, track actions and prove results.
• To keep it secure: verify sign-ins, prevent abuse, investigate problems.
• To send service emails you or your company asked for.
• To support your company and improve the service.

We never sell your data, show ads, or use your data or your company's data to train AI models.

Cookies

We use one essential cookie to keep you signed in. Cloudflare may set essential security cookies, including for its bot check (Turnstile). We use no advertising or third-party tracking cookies.

Who helps us (service providers)

Each one handles data only to provide its part of the service:

We may share information if the law requires it, or to protect the security of the service and its users.

How long we keep it

• Business data: for as long as your company subscribes. When the subscription ends, it's deleted or returned within 90 days, unless the law or our agreement says otherwise.
• Sign-in and security logs: up to 1 year.
• Ask questions: 180 days.
• Sign-in codes: 10 minutes.

Security

• Data is encrypted in transit and at rest.
• Each company's data lives in its own separate database.
• Access within a company is limited by role and store, and enforced inside the database.
• Every change to users and settings is logged.
• Sign-in through Google or Microsoft benefits from their two-step verification.

Your choices and rights

Your company controls your account. For access, correction or deletion requests, contact your company's administrator, or email us at [email protected] and we'll work with your company to respond. California residents have rights under the CCPA/CPRA; as a service provider, we help our customers meet them.

The service is for businesses and isn't directed at children.

Demo site

If you sign in to our demo site, we keep your email address and sign-in times so we can secure the demo and, if you'd like, follow up. The demo contains only made-up data. Email [email protected] to have your demo details removed.

Changes

If we change this policy, we'll update the date at the top and post the new version here. For significant changes, we'll notify your company.

Contact

Data Lantern LLC, Ukiah, California · [email protected]