Privacy Policy

Last updated: July 11, 2026

Who we are

ShipExtension ("we", "us") provides shipping automation for ShipStation sellers at shipextension.com. This policy explains what we collect, why, and the choices you have. Questions? Email [email protected].

What we collect

  • Account information — your name, email address, and a hashed password, or your Google account identity if you sign in with Google.
  • ShipStation credentials — the API keys you provide so we can read and update your orders. They are stored encrypted and used only to operate the automations you configure.
  • Order and product data — order details, product dimensions, and shipping information synced from your ShipStation account, used to run your automation rules, pick boxes, and generate packing slips.
  • Billing information — payments are processed by Stripe; we never see or store your full card number.
  • Usage data — pages visited and features used, collected via cookies and analytics to improve the product and measure advertising.

How we use it

We use your data to run the automations you set up, bill your subscription, send transactional email (via Postmark), provide support, and improve the product. We do not sell your data.

Service providers

We share data only with the providers needed to run the service: Stripe (payments), Postmark (email delivery), Google (sign-in, analytics, and ads measurement), ShipStation (the platform we integrate with on your behalf), and our hosting infrastructure provider.

Cookies

We use a session cookie to keep you signed in and analytics cookies to understand how the site is used and to measure advertising campaigns. You can block non-essential cookies in your browser without affecting sign-in.

Retention and deletion

We keep your data while your account is active. If you close your account or ask us to, we delete your account data, including stored ShipStation credentials, except where we must retain records for legal or accounting reasons. To request deletion, email [email protected].

Security

Data is encrypted in transit, credentials are stored encrypted, and passwords are hashed. No system is perfectly secure, but we limit access to what the service needs to function.

Changes

If we make material changes to this policy, we will update this page and note the new date above. Continued use of the service after a change means you accept the updated policy.