Privacy Policy

1. Introduction

ShipToCX ("ShipToCX", "we", "our", or "us") provides a shipment tracking software platform for service businesses. This Privacy Policy explains how we collect, use, store, and protect information when you use our website and application (the "Service").

By using ShipToCX, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name
• Email address
• Organization name
• Authentication credentials (managed via Firebase Authentication)

2.2 Shipment Data

When you use the Service, we may collect and store:

• Tracking numbers
• Carrier names (e.g., FedEx, UPS)
• Shipment statuses and tracking history
• Package contents (when included in emails)
• Reference numbers, PO numbers, and shipment metadata

Note: All shipment data is scoped to your organization and never shared across organizations.

2.3 Email Ingestion Data

If you forward emails to your ShipToCX inbound address:

• We process the email content to extract tracking information
• Emails are hashed and processed idempotently
• We do not resell or reuse email contents for unrelated purposes

2.4 AI-Assisted Processing

ShipToCX may use AI services to assist with:

• Normalizing package contents
• Improving text extraction accuracy

AI is non-authoritative and is never used to create shipments, validate tracking numbers, or override carrier data.

2.5 Usage & Analytics Data

We may collect:

• Usage counts (e.g., shipments per month)
• Feature usage statistics
• Error logs and diagnostic data

This data is used to operate, secure, and improve the Service.

3. How We Use Information

We use collected information to:

• Provide and operate the Service
• Create and track shipments
• Validate tracking numbers with carrier APIs
• Enforce plan limits and billing
• Improve performance, reliability, and user experience
• Provide customer support
• Comply with legal obligations

We do not sell your personal or business data.

4. Data Sharing

We may share data only with:

• Carrier APIs (e.g., FedEx, UPS) for tracking validation and updates
• Infrastructure providers (e.g., cloud hosting, databases)
• AI service providers strictly for extraction assistance
• Legal authorities, if required by law

All vendors are bound by confidentiality and security obligations.

5. Data Security

We implement industry-standard security measures, including:

• Organization-based data isolation
• Server-side enforcement of access controls
• Encrypted data storage and transport
• Role-based permissions
• Secure API authentication

No system is 100% secure, but we take reasonable steps to protect your data.

6. Data Retention

• Shipment records are retained unless deleted by authorized users
• Delivered shipments may be archived automatically
• Processed emails are stored only as hashed records for idempotency
• You may request deletion of your account and associated data

7. Your Rights

Depending on your location, you may have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Object to certain processing
• Export your data

Requests can be made by contacting us at support@shiptocx.com

8. Children's Privacy

ShipToCX is not intended for individuals under the age of 13. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

10. Contact Us

If you have questions about this Privacy Policy, contact us at: