Privacy Notice

Introduction

This Privacy Notice (the “Notice”) describes how shiponline.app (“shiponline.app,” “we,” “us,” or “our”) collects, uses, shares, and protects the personal information of individuals who use the shiponline.app website, dashboard, or related services (collectively, the “Service”). It also describes the choices and rights you have with respect to your personal information.

By using or accessing the Service, you acknowledge this Notice and any other policies that may be applicable, including our Terms of Use. This Notice is incorporated by reference into those Terms. We may update this Notice from time to time and will post any changes on this page along with an updated effective date at the top.

Our roles: controller and processor

We act as a data controller for personal information about our account holders and guest customers (people who register for an account, sign in, or buy a label as a guest without an account) - for example, when we decide how long to retain account records or how to secure them.

We act as a data processor for personal information about the senders and recipients of the shipments you create through the Service. That information is provided to us by you (the account holder) as the controller, and we process it on your behalf to translate your input into a valid shipping label the Carrier will accept, to relay tracking events back to your dashboard, and to enable the associated support, refund, and shipping-protection workflows.

Information we collect

Information you provide to us

• Account information - your email address, name (if provided), a bcrypt-hashed representation of your password (we never store the plain-text form of your password), business name if you provide one, and contact preferences.
• Federated sign-in information - if you sign in with Google (Sign In With Google), we receive your name, email address, and a stable Google-provided identifier.
• Shipping information - sender and recipient addresses (street, city, state, postal code, country, contact name, company, email, and phone), parcel dimensions and weights, service level, saved item catalogs, saved package presets, customs declarations, HS tariff codes, and the label PDFs and tracking numbers generated from that information.
• Payment information - when you purchase a label (by card, Apple Pay, or Google Pay), Stripe (our payment processor) collects your card details and stores them on its systems. shiponline.app receives only the last four digits, card brand, and an internal Stripe token used to charge you on subsequent purchases.
• Communications - when you contact support we retain the message content and any attachments so we can assist you and improve the Service.

Information automatically collected

• Usage information - pages viewed, features used, and buttons clicked, along with diagnostic information such as browser type and version, OS, screen size, IP address, and general geolocation derived from the IP address.
• Device information - a session identifier set by our authentication layer so you remain signed in across page loads.
• Cookies and similar technologies - as described in the Cookie Policy. The marketing website uses cookieless Plausible Analytics and, with your consent, Google Ads for advertising and conversion measurement; the dashboard uses first-party cookies for sign-in state and brief first-party cookies from Vercel to correlate page views with performance samples.

Information from third parties

• Carrier feedback - Carriers return tracking events, delivery scans, adjustment invoices (for weight or dimension mismatches), and - where applicable - data about insurance claims. We store this against your shipment record to display it in your dashboard and to charge you for Carrier-imposed adjustments.

How we use information

We use the information described above to:

• Operate the Service - including verifying your account, purchasing Carrier labels on your behalf, generating customs documentation, requesting optional shipping protection, delivering tracking notifications to recipients, and processing payments and refunds;
• Support you when you contact us and diagnose problems you report;
• Improve the Service - for example by aggregating usage telemetry to understand which features to prioritize next and by de-identifying data so it can no longer be reasonably linked to an individual;
• Send you transactional messages related to your account, your shipments, and your purchases;
• Send you occasional product-update messages (which you can opt out of at any time via the unsubscribe link in the message or in your notification preferences);
• Prevent fraud, chargebacks, and abuse; investigate suspected violations of our Terms of Use or a Carrier’s rules; and enforce our agreements;
• Comply with applicable law, including tax, export-control, and postal-service reporting obligations, and respond to lawful requests from government authorities.

How we share information

We share personal information with:

• Carriers - to purchase labels on your behalf, receive tracking events, and process refunds. The Carrier becomes the controller of the address and parcel data it receives for the purpose of delivering the shipment.
• Payment processors and financial institutions - Stripe for card processing; banks and card networks for settlement; chargeback and fraud-prevention providers to protect the Service.
• Subprocessors we retain to host, secure, and operate the Service - see the named list in the next section.
• Advisors - professional advisors such as lawyers, accountants, and auditors, bound by duties of confidentiality, when necessary for the operation or defense of the business.
• Successors in a business transfer - in the course of business we may enter into a merger, acquisition, investment, corporate reorganization, or bankruptcy proceeding; personal information may be transferred to the acquiring or successor entity as part of that transaction.
• Authorities and law-enforcement - where we believe in good faith that disclosure is necessary to comply with a lawful request, court order, or subpoena; to enforce our Terms of Use; to protect the rights, property, or safety of shiponline.app, our users, a Carrier, or a recipient; or to investigate suspected criminal activity.
• Aggregated or de-identified data - we may share aggregated or de-identified data in a form that cannot reasonably identify an individual.

Subprocessors

We rely on the following subprocessors to operate the Service. Each is bound by a data-processing agreement that limits the subprocessor to processing personal information only on our instructions and requires it to maintain appropriate security and confidentiality measures.

• Neon (United States) - managed Postgres database hosting for account, shipment, and support records.
• Vercel (United States) - hosting of the website and dashboard; edge network for delivery.
• Cloudflare R2 (United States) - object storage for label PDFs, customs forms, and other generated documents.
• Stripe (United States) - payment processing for label purchases (card, Apple Pay, and Google Pay).
• EasyPost (United States) - Carrier aggregation gateway that we use to reach USPS, UPS, FedEx, and DHL and to request optional shipping protection.
• SendGrid (United States) - transactional email delivery (label confirmations, tracking notifications, receipts, password-reset emails, invoices).
• Inngest (United States) - background job scheduling for label processing, tracking-event ingestion, and periodic reconciliations.
• Plausible (European Union) - privacy- respecting, cookieless analytics on the marketing website.
• Google Maps Platform (United States) - address autocomplete on the sender and recipient input fields.
• Google Ads (United States) - conversion measurement and remarketing on the marketing website, set only with your consent.

Carrier privacy statements

Each Carrier is a separate controller for the address and parcel data it receives to deliver a shipment, and its processing of that data is governed by its own privacy notice.

USPS Privacy Act Statement

Your information will be used to facilitate the purchase of postage and to fulfill transactional reporting requirements for United States Postal Service postage systems. Collection is authorized by 39 U.S.C. §§ 401, 403, and 404. Providing the information is voluntary, but if not provided, your transaction may not be processed. The Postal Service does not disclose your information to third parties without your consent, except to facilitate the transaction, to act on your behalf or request, or as legally required. This includes certain limited circumstances: to a congressional office on your behalf; to financial entities regarding financial- transaction issues; to a U.S. Postal Service auditor; to entities (including law enforcement) as required by law or in legal proceedings; and to contractors and other entities aiding delivery of the service. For more information, see www.usps.com/privacypolicy.

UPS, FedEx, and DHL

Your identity, contact information, account information, and shipping information may be exchanged between the Carrier and our aggregation gateway to purchase the label and relay tracking events. Each of those Carriers processes that data under its own privacy notice - see the Carrier’s own website for details.

Advertising and measurement

United States scope

The Service is offered to users in the United States. shiponline.app and its subprocessors operate primarily in the United States and personal information you provide is processed and stored in the United States. We do not currently offer the Service to users in the European Economic Area, the United Kingdom, or Switzerland, and we do not market to those regions. If you are located outside the United States and choose to use the Service anyway, you do so on your own initiative and are responsible for compliance with any local law that applies to you.

Retention and deletion

We retain personal information for as long as necessary to operate the Service and to comply with our legal and financial obligations. Specifically:

• Account records - retained for the life of the active account.
• Shipment and label records - retained for at least seven (7) years after the shipment date to meet U.S. federal and state tax-record obligations.
• Payment records - retained for seven (7) years after the transaction date for tax, chargeback, and dispute-resolution purposes.
• Support communications - retained for three (3) years after the last message, unless a longer period is required by law or a pending dispute.
• Closed accounts - when you delete your account, we remove your saved addresses, recipients, presets, and sign-in credentials. Transaction and shipment records are kept under an anonymized account for the periods above to meet audit, tax, legal, and fraud-prevention obligations.

You may request earlier deletion under the rights described below; where retention is legally required, we will explain which retention obligation applies and delete when the obligation lifts.

How we protect your information

We use commercially reasonable administrative, technical, and organizational measures to protect personal information from unauthorized access, disclosure, alteration, and destruction. These include:

• Encryption in transit - all traffic between your browser, our servers, and our subprocessors uses TLS 1.2 or higher.
• Encryption at rest - our managed database and object-storage subprocessors encrypt data at rest with industry-standard algorithms.
• Password hashing - passwords are stored as bcrypt hashes with a per-account salt; we never store the plain-text form.
• Session controls - sign-in sessions can be invalidated remotely; changing your password invalidates all active sessions.
• Least-privilege access - access to production data is limited to the small number of employees or contractors who need it to operate the Service.
• Rate limits and abuse controls - the sign-in flow and other sensitive endpoints are rate-limited to reduce credential-stuffing and enumeration attacks.

No system of information transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a security incident that materially affects the confidentiality, integrity, or availability of your personal information, we will notify you and any applicable regulator as required by law.

Automated decision-making

We do not use personal information to make decisions that produce legal or similarly significant effects about you based solely on automated processing. Address verification, fraud scoring, and Carrier-side sanction screening may involve automated steps, but decisions materially affecting your account (such as suspension for a suspected policy violation) are reviewed by a human before they take effect.

Your rights and choices

Depending on where you live, you may have the following rights with respect to your personal information:

• Access - request a copy of the personal information we hold about you in a structured, commonly used, machine-readable format;
• Correction - request that we correct inaccurate or incomplete information;
• Deletion - request that we delete personal information about you, subject to any retention obligation that legally requires us to keep it;
• Portability - receive a copy in a portable format for transmission to another controller;
• Restriction and objection - restrict or object to certain processing, including processing based on our legitimate interests;
• Withdrawal of consent - withdraw consent where processing is based on consent, without affecting the lawfulness of processing before the withdrawal;
• Non-discrimination - we will not deny you the Service, charge you a different price, or provide a different level of quality because you exercised any of the rights above.

To exercise any of these rights, email us at support@shiponline.app from the address on file for your account. We may ask you to verify your identity before we act on a request, and we will respond within the time period required by applicable law.

If we deny your request in whole or in part, you may have the right to appeal the decision; we will explain the appeals process at the time.

California privacy notice

This section supplements the Notice above for individuals who reside in California and are covered by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”).

Categories of personal information we collect

In the last twelve months we have collected the following CCPA categories of personal information, all as described in more detail earlier in this Notice: identifiers (name, email, IP address, cookie ID); customer records (billing address, payment details tokenized by Stripe); commercial information (shipments purchased and their contents); internet or other electronic network activity (usage and diagnostic data); geolocation (general, IP-derived); professional or employment-related information (business name, if provided); and inferences (aggregate usage patterns).

Categories disclosed for a business purpose

We disclose each of the above categories only for operational business purposes, and only to our subprocessors and Carriers described in this Notice, and never for money. The one exception is advertising: on the marketing website, with your consent, we share limited online identifiers with Google Ads for cross-context conversion measurement and remarketing, which you can opt out of (see the Cookie Policy).

Sensitive personal information

We do not use or disclose sensitive personal information for any purpose other than those permitted by CCPA section 1798.121(a) - i.e. to provide the Service you requested, to detect and prevent fraud, to ensure the security and integrity of the Service, and for other similarly narrow purposes.

California rights

California residents have the right to know, delete, and correct personal information; to opt out of “sale” (which we do not do) and “sharing” (which may occur via Google Ads when you accept advertising cookies - opt out by declining on the cookie banner or sending a GPC signal); to limit our use of sensitive personal information; and to be free from discrimination for exercising any of the above. To exercise these rights, email support@shiponline.app. You may also designate an authorized agent to make a request on your behalf; we will require verification of the agent’s authority.

Colorado, Connecticut, Virginia, Texas

Residents of Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), and Texas (TDPSA) have privacy rights that overlap substantially with the California rights described above, including the right to access, correct, delete, port, and opt out of “sale” and “targeted advertising.” We do not “sell” personal information for money. “Targeted advertising” may occur via Google Ads when you accept advertising cookies; opt out by declining on the cookie banner or sending a GPC signal. Requests may be sent to support@shiponline.app.

Marketing communications

We may send you occasional product-update emails about features we have shipped or are about to ship. You can opt out of marketing emails at any time by clicking the unsubscribe link at the bottom of any such email, by updating your notification preferences in the settings page, or by emailing support@shiponline.app. Even if you opt out, we will still send you transactional messages essential to your use of the Service - for example, label confirmations, tracking notifications, invoices, and security notices.

Cookies and similar technologies

Our use of cookies and similar technologies is described in the Cookie Policy. In summary, the marketing website uses cookieless Plausible Analytics and, with your consent, Google Ads advertising cookies; the dashboard sets first-party cookies for sign-in state and short-lived first-party cookies from Vercel to correlate page views with performance samples.

Children

The Service is not directed to children under the age of 13 (or under a higher applicable age of consent in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact support@shiponline.app and we will delete it.

Changes to this Notice

We may update this Notice from time to time. When we do we will update the effective date at the top of this page and, for material changes, notify you by email or through an in- dashboard notice at least fifteen (15) days before the changes take effect. Your continued use of the Service after the effective date of an update constitutes acceptance of the updated Notice.

Contact us

Questions, requests, or concerns about this Notice or our data-privacy practices can be sent to support@shiponline.app. We aim to reply within one business day.