Privacy Notice

This notice covers personal information handled by the company operating Shipify (entity to be confirmed) through the shipify.to website and, at launch, the label service.

It is published in draft, before we have collected anything much, so that you can judge the policy before it has anything of yours to apply to. It sits alongside our terms of service.

• Today we hold one thing: the email address you gave the early-access form, and the shipping volume you optionally picked.
• At launch we will hold what a label needs — sender and recipient addresses, parcel details, and your order history.
• We do not sell personal information, and we do not rent, share or trade your customer addresses with anyone.
• Card numbers never reach us. A payment processor handles those.
• Email support@shipify.to and we will delete your data. No retention offer, no exit interview.

The one-line version We collect what a shipping label needs, and nothing we would be embarrassed to list here.

In early access, the complete list is short enough to print:

Email address

What you typed into the early-access form. Used to email you when we open, and to answer you if you write to us.

Monthly shipping volume

Optional, and a range rather than a number. It tells us what to build first.

The time you signed up

Stored with the entry so we can open the list in order.

Ordinary server logs

Our host records requests to the site — IP address, time, page, browser string — the way every web server does. We use them to keep the site up and to stop abuse.

That is the whole set. We do not ask for your name, your address, your business, or your phone number to join the list, because none of those are needed to send one email.

Once the service is live and you have an account, buying a label will require more:

Account details

Email, password (stored only as a hash), business name if you give one.

Shipment details

The from-address, the to-address, weight, dimensions and service. This is the information printed on the label, so it necessarily goes to the carrier.

Order and billing history

What you bought, when, what it cost, what was refunded, and any carrier adjustment against it.

Payment

Handled by a payment processor. We expect to receive a token, the last four digits and the card brand — never the full card number or the security code.

Support messages

What you write to us and what we write back, kept so the next person to help you has the history.

• To run the service — quote a rate, buy the label, print it, track it, refund it.
• To bill you correctly — including passing on a carrier adjustment with the carrier's own reason attached.
• To support you — answering email, chasing a carrier claim on your behalf.
• To keep the service safe — spotting fraud, label reuse, and abuse of the site.
• To tell you things you need to know — launch, outages, a rate change, a change to these documents.

We do not build behavioral profiles, and we do not use your shipment data to work out what to sell you.

• Sell personal information, or share it for cross-context behavioral advertising.
• Sell, rent or lend your customer addresses. Your buyer list is your business asset, not ours.
• Sign your email up to a third party's marketing list.
• Publish your shipping volumes, individually or as a named case study, without asking you first.

Why this section exists Cheap shipping is a business that could easily be funded by selling the address book instead. We are funding it with one flat markup per label, and this section is the commitment that we will not quietly change our minds.

Only the companies it takes to move a parcel and get paid for it:

• The carrier on your label — it receives the addresses and parcel details, because that is what a label is.
• Our payment processor — it receives your payment details directly, and tells us only whether the payment worked.
• Our hosting and email providers — they store and transmit the data on our behalf, under contract, and may not use it for anything of their own.
• Law enforcement or a regulator — only where we are legally required, and we will tell you unless we are forbidden from doing so.

If Shipify is ever sold or merged, your information could transfer with the business. We would email you before that happened so you could delete your account first.

The early-access site sets no advertising cookies and runs no third-party analytics or tracking scripts. That is why there is no cookie banner to dismiss — there is nothing to consent to.

At launch, a signed-in account will need one functional cookie to keep you logged in. If we ever add analytics, we will update this section and say which product it is before we turn it on, not after.

• Waitlist entries — until we launch and email you, or until you ask us to remove you. If we decide not to launch, we delete the list and tell you we have.
• Account data — while the account is open, then deleted on request.
• Shipment and billing records — kept as long as tax and accounting law requires, because that is not our choice to make.
• Server logs — a short rolling window, then overwritten.

Whatever state you live in, you can ask us to show you what we hold about you, correct it, delete it, or send you a copy. Depending on where you live you may also have the right to opt out of the sale or sharing of personal information — a right that is easy for us to honour, because we do neither.

To use any of these, email support@shipify.to from the address on the account. We will confirm within a few days and we will not charge you, argue with you, or ask you to stay.

Every email we send has an unsubscribe link that works on the first click.

The site is served over HTTPS, the waitlist is stored on managed infrastructure rather than a spreadsheet, and card details never reach our systems. At launch, passwords will be stored hashed and access to production data will be limited to the people who need it.

We are not going to claim a certification we have not been audited for, or promise that a breach is impossible. If one ever happens, we will tell affected people promptly, say what was taken, and say what we did about it.

Shipify is a business tool for adults. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, write to us and we will delete it.

Shipify is a United States service and your information is processed in the United States. If you are writing to us from elsewhere, that is where your email will land. Whether we ever serve shipments outside the US is undecided; if we do, this section gets rewritten first.

This notice will change as the service grows — the whole of section 04 is written in the future tense today. When we change something that matters, we update the version and date at the top of this page and email people on the list before it takes effect. A change that reduces your protection will never be applied quietly.

Privacy questions, deletion requests, and objections to anything above: support@shipify.to. A person reads that inbox, and a deletion request is the easiest kind of email to action.