Out of the Box Logo

605 N. Dudney Road • Magnolia, Arkansas

Privacy Policy

Last updated: June 11, 2026

This Privacy Policy describes how Out of the Box ("we," "us," or "our," operated by PenickCo LLC) collects, uses, and protects information when you use our mobile application ("Out of the Box!" app), our Posty business platform, and our website at shop.outofthebox.page.

Information We Collect

When you create an account or use our app, we collect the following information:

  • Name — used to identify your account and personalize your experience
  • Email address — used for account login, password recovery, and order communications
  • Phone number — used for account verification and order pickup coordination
  • ZIP code — used to verify you are within our service area
  • Order and purchase history — used to manage your orders and provide order status updates
  • Device token — used to send you push notifications you have opted into

How We Use Your Information

We use the information we collect solely to operate the Out of the Box app and provide our services to you, including:

  • Creating and managing your account
  • Processing and fulfilling your orders
  • Sending order confirmations and pickup reminders
  • Sending push notifications for new arrivals and store alerts (only if you opt in)
  • Verifying that you are a local customer within our service area
  • Responding to your questions or support requests

How We Do Not Use Your Information

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes. We do not use your information for tracking across other apps or websites. We do not combine your data with data from other companies.

Facebook Page Data (Posty Business Platform)

Posty is our business platform that helps stores manage their Facebook Page activity. When a business owner connects their Facebook Page to Posty, they grant us access through Facebook Login for Business. With their permission, we access and process the following on their behalf:

  • Page posts and comments (pages_read_user_content) — used to detect customer comments such as "want" or "next" on inventory posts so the business can fulfill claims and manage waitlists.
  • Comment and engagement management (pages_manage_engagement) — used to reply to, like, hide, or remove comments on the business's own Page in order to confirm claims, send pickup reminders, and keep listings organized.
  • Page access tokens — stored securely and used only to perform the actions above on the connected Page.

We access this data only to operate features the business owner has enabled. We do not sell it, use it for advertising, or share it with unrelated third parties. A connected business can revoke our access at any time through their Facebook Business Integrations settings, and may request deletion of stored data via our Data Deletion Instructions.

Payment Information

Payments made through the app are processed by Square. We do not store your credit card number or payment details. All payment data is handled directly by Square in accordance with their privacy policy and PCI DSS standards.

Push Notifications

If you grant permission, we may send you push notifications about new inventory, store announcements, and order updates. You can disable notifications at any time through your device settings or within the app under Notification Settings.

Data Storage and Security

Your data is stored securely using Supabase, a cloud database platform with industry-standard encryption and access controls. We limit access to your personal information to only what is necessary to operate the app.

Data Retention

We retain your account information for as long as your account is active. You may request deletion of your account and associated data at any time by following our Data Deletion Instructions or by contacting us at the email below.

Children's Privacy

Our app is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us: