Privacy policy

Last updated: August 17, 2026

This Privacy Policy describes how NeutraNarc Inc. ("NeutraNarc," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit `neutranarc.com`, use the NeutraNarc ordering portal at `portal.neutranarc.eparic.com`, make a purchase, or otherwise communicate with us (collectively, the "Services").

For purposes of this Privacy Policy, "you" and "your" mean the individual using the Services, including a customer, customer representative, portal user, website visitor, or other person whose information we process in connection with the Services.

Please read this Privacy Policy carefully. By using the Services, you acknowledge the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised Privacy Policy, update the "Last updated" date, and take any other steps required by applicable law.

How We Collect and Use Personal Information

The information we collect and use depends on how you interact with the Services. We may use personal information to provide and improve the Services, communicate with you, fulfill orders, process transactions, maintain business and accounting records, protect the Services, comply with legal obligations, and enforce our agreements.

Information You Provide Directly

Information you submit through the Services may include:

  • Contact details, including name, organization, job title, mailing address, telephone number, and email address.
  • Account information, including username, password or password hash, security settings, roles, permissions, and other information used to administer and secure an account.
  • Order Transaction Information, including products ordered, quantities, order dates, prices, billing and shipping addresses, purchase-order information, invoice information, payment status, returns, and fulfillment status.
  • Payment-related information, including payment method type, payment confirmation, transaction identifiers, and limited account details such as the last four digits of a card or bank account, where provided by the payment processor. When electronic payments are offered, card numbers, bank account numbers, and routing numbers are collected and processed directly by our payment processor and are not stored by NeutraNarc.
  • Customer support information, including information you include in communications, requests, or support tickets.

You may decline to provide certain information, but doing so may prevent you from using some features of the Services.

Information Collected Automatically

We may automatically collect information about your interaction with the Services ("Usage Data") through cookies, pixels, logs, and similar technologies. Usage Data may include device and browser information, IP address, network information, authentication events, pages or features accessed, dates and times of use, referring URLs, and error or diagnostic information.

Information Obtained from Third Parties and Integrated Services

We may receive information from vendors, service providers, and integrated platforms, including:

  • Shopify, which supports portions of our public website and commerce experience.
  • Intuit QuickBooks Online, which we use to support accounting workflows such as customer records, invoices, sales transactions, payment status, and related business records. Depending on the workflow, information may flow from the portal to QuickBooks, from QuickBooks to the portal, or both.
  • ShipStation, which we use for shipping, fulfillment, tracking, and related order workflows.
  • Payment processors, which may collect and process payment credentials and return payment confirmations, transaction identifiers, limited payment-method details, fraud signals, and payment status. A payment processor's hosted tools may also facilitate bank-account verification and required ACH authorizations.
  • Cloud and technology providers, including Amazon Web Services (AWS), which provides hosting, serverless computing, logging, secure credential storage, and related infrastructure for portions of the ordering portal and its integrations.
  • Analytics, communications, security, advertising, and customer-support providers that provide services on our behalf.

We treat information obtained from third parties in accordance with this Privacy Policy and any additional restrictions imposed by the applicable provider.

QuickBooks Online and Intuit Data

Authorized NeutraNarc administrators may connect the ordering portal to NeutraNarc's QuickBooks Online company through Intuit's authorization process. In connection with that integration, the Services may access, create, update, or synchronize information such as:

- Customer and business contact information;
- Products, services, and related identifiers;
- Orders, invoices, sales transactions, payment status, and transaction references;
- Billing and shipping information;
- Tax, discount, amount, and accounting-related information associated with supported transactions; and
- QuickBooks company identifiers, connection status, and technical metadata required to operate and troubleshoot the integration.

We use QuickBooks information to create and maintain accounting records, generate and track invoices, reconcile portal activity with QuickBooks, provide authorized internal reporting, support customers, troubleshoot synchronization errors, and comply with financial, tax, audit, and legal obligations.

The integration uses OAuth authorization. We may securely store access and refresh tokens and related connection metadata needed to maintain the authorized connection. These credentials are restricted to authorized systems and personnel and are not used for advertising.

QuickBooks information is not sold and is not used for targeted advertising. We disclose it only as necessary to provide and secure the Services, operate authorized integrations, comply with law, or follow the direction of the authorized QuickBooks company. Information obtained from Intuit is handled subject to applicable Intuit requirements in addition to this Privacy Policy.

An authorized NeutraNarc administrator may disconnect or reconnect QuickBooks through the portal's integration settings. Disconnecting prevents new synchronization after the disconnection takes effect, but does not automatically delete information previously synchronized or records that we must retain for accounting, tax, audit, security, dispute-resolution, or legal purposes.

Payment Information and ACH Transactions

When we offer electronic payments, we use a third-party payment processor to accept card and ACH payments. Payment credentials are submitted directly to the payment processor through its hosted or tokenized payment interface. NeutraNarc receives only the information needed to associate a payment with an account, invoice, or order, such as payment status, transaction identifier, payment method type, limited account details, and fraud or verification results.

ACH payments may require bank-account verification and your authorization of a debit mandate. The payment processor may collect and retain evidence of that authorization. ACH payments can remain pending and may later fail, be returned, or be disputed. We use resulting status information to administer orders, invoices, fulfillment, refunds, disputes, and account records.

The payment processor's collection and use of payment credentials is also governed by its own privacy notice and terms. NeutraNarc does not store complete card numbers, bank account numbers, routing numbers, security codes, or online-banking credentials in its own systems.

How We Use Personal Information

We may use personal information for the following purposes:

  • Providing products and services, including maintaining accounts, processing and fulfilling orders, arranging shipping, providing tracking, handling returns and refunds, sending transactional communications, and providing customer support.
  • Accounting and business operations, including creating customers and invoices, recording sales and payment status, reconciling transactions, maintaining financial records, and operating the QuickBooks integration.
  • Payment processing, including initiating authorized payment requests through a payment processor, verifying payment status, preventing fraud, and handling refunds, returns, and disputes.
  • Security and fraud prevention, including authenticating users, administering permissions, monitoring the Services, investigating suspected fraud or misuse, and protecting our systems, customers, and business.
  • Service improvement and diagnostics, including analyzing performance, resolving errors, maintaining logs, improving workflows, and developing new features.
  • Communications, including responding to inquiries and sending service, account, order, invoice, payment, shipping, policy, or security notices.
  • Marketing and advertising, including sending promotional communications where permitted and measuring or personalizing advertising. QuickBooks information and payment credentials are not used for these purposes.
  • Legal and compliance purposes, including maintaining records, responding to lawful requests, enforcing agreements, protecting rights, and meeting tax, accounting, regulatory, and other legal obligations.

Cookies and Similar Technologies

Like many websites, we use cookies and similar technologies to operate and improve the Services, remember settings, secure accounts, understand usage, and support analytics and advertising. For information about cookies used in connection with Shopify, see [Shopify's Cookie Policy](https://www.shopify.com/legal/cookies).

Most browsers accept cookies by default. You may adjust browser controls to remove or reject cookies, although doing so may cause some features to function incorrectly. Blocking cookies may not completely prevent disclosures involving advertising partners.

Our public website recognizes the Global Privacy Control (GPC) signal where required. If we can associate a valid signal with your browser, device, or account, we will treat it as an opt-out request for activities considered a "sale," "sharing," or targeted advertising under applicable law. For more information, visit [Global Privacy Control](https://globalprivacycontrol.org/). Other than GPC where applicable, we do not respond to browser "Do Not Track" signals.

How We Disclose Personal Information

We may disclose personal information:

- To vendors and service providers that perform services on our behalf, such as website hosting, cloud infrastructure, payment processing, accounting integration, shipping and fulfillment, security, data analytics, communications, customer support, and data storage;
- To Intuit when an authorized administrator connects or uses QuickBooks Online workflows;
- To shipping and fulfillment providers, including ShipStation and relevant carriers, to fulfill and track orders;
- To payment processors to verify payment methods, process authorized transactions, prevent fraud, and manage refunds or disputes;
- To business and marketing partners for permitted services and advertising, subject to applicable privacy choices; QuickBooks information and payment credentials are excluded from advertising uses;
- When you direct, request, or consent to a disclosure;
- Within our corporate group or to affiliates as reasonably necessary to operate our business;
- In connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets; and
- To comply with law or legal process, enforce agreements, protect the Services, or protect the rights, safety, and property of NeutraNarc, our users, or others.

Service providers may process information only for contracted purposes and subject to applicable agreements and law.

In the preceding 12 months, we may have disclosed the following categories of personal information for business purposes:

Categories of personal information disclosed for business purposes

  • Identifiers: Contact and account information
  • Recipients: Cloud, website, communications, security, customer-support, fulfillment, payment, and accounting-integration providers.
  • Commercial information: Orders, invoices, sales, payment status, and support information
  • Recipients: Payment processors, accounting-integration providers, fulfillment providers, customer-support providers, and other contracted service providers.
  • Internet or electronic network activity: Usage and technical activity
  • Recipients: Cloud, security, analytics, website, and technical service providers.
  • Approximate geolocation: Location derived from an IP address
  • Recipients: Cloud, security, analytics, and website service providers.
  • Professional or business information: Organization and business-contact information
  • Recipients: Customer-support, fulfillment, accounting-integration, and other contracted service providers.

We do not use or disclose sensitive personal information for the purpose of inferring characteristics about an individual.

Where our use of advertising or analytics tools constitutes a "sale" or "sharing" under applicable U.S. state privacy laws, the categories may include identifiers, commercial information, and Usage Data disclosed to business and advertising partners. You may exercise applicable opt-out rights through the methods described in the **Your Rights** section. QuickBooks information, OAuth credentials, and payment credentials are not sold or shared for cross-context behavioral advertising.

Third-Party Websites and Services

The Services may link to or interoperate with third-party websites, platforms, and services. Their collection and use of information is governed by their own privacy notices and terms. We are not responsible for the privacy, security, or content of services that we do not control.

Children's Data

The Services are not directed to children, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe a child has provided personal information to us, contact us to request its deletion. We do not knowingly sell or share the personal information of individuals under 16 for targeted advertising.

Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information. These may include access controls, authentication, encryption in transit, secure credential storage, logging, monitoring, and restrictions based on job responsibilities. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for safeguarding your account credentials and for promptly notifying us if you believe your account has been compromised. Do not send sensitive payment credentials or confidential information through unsecured channels or ordinary email.

Retention and Deletion

We retain personal information for as long as reasonably necessary to provide the Services, maintain accounts, fulfill orders, operate integrations, resolve disputes, enforce agreements, protect the Services, and comply with accounting, tax, audit, regulatory, and legal obligations. Retention periods vary based on the type of information, the purpose for processing it, and applicable requirements.

When information is no longer required, we take reasonable steps to delete, de-identify, or securely dispose of it, subject to backup cycles and legal or operational exceptions. Disconnecting an integration does not automatically delete previously synchronized records. You may request deletion as described below, although some records may be retained where permitted or required by law.

Your Rights

Depending on where you live, you may have some or all of the following rights, subject to applicable exceptions:

  • Access or knowledge: Request access to personal information and information about how we use and disclose it.
  • Deletion: Request deletion of personal information we maintain.
  • Correction: Request correction of inaccurate personal information.
  • Portability: Request a copy of certain personal information in a portable format.
  • Restriction: Request that we stop or restrict certain processing.
  • Withdrawal of consent: Withdraw consent where processing relies on consent.
  • Opt out of sale, sharing, or targeted advertising: Opt out of qualifying disclosures or processing under applicable law.
  • Appeal: Appeal a decision we make concerning a privacy request.
  • Manage communication preferences: Unsubscribe from promotional email using the link provided in the message. We may still send non-promotional communications about accounts, orders, invoices, payments, security, or the Services.

To exercise a right, use the privacy controls provided through the public website or contact us using the information below. We may verify your identity before processing a request. An authorized agent may submit a request where permitted, subject to verification of the agent's authority. We will not discriminate against you for exercising applicable privacy rights.

Complaints

If you have a complaint about our privacy practices, contact us using the information below. Depending on where you live, you may have the right to appeal our response or lodge a complaint with an appropriate data-protection authority.

International Users

We and our service providers may transfer, store, and process personal information outside the country where you live. Where required, we rely on appropriate safeguards for international transfers, such as recognized contractual clauses or adequacy decisions.

Contact

If you have questions about this Privacy Policy, our privacy practices, or a privacy request, contact:

NeutraNarc Inc.  
4357 Ferguson Drive, Suite 280  
Cincinnati, Ohio 45245  
United States  
Email: [support@neutranarc.com](mailto:support@neutranarc.com)