Privacy Policy

Who we are

ShipExtension ("we", "us") provides shipping automation for ShipStation sellers at shipextension.com. This policy explains what we collect, why, and the choices you have. Questions? Email [email protected].

What we collect

• Account information — your name, email address, and a hashed password, or your Google account identity if you sign in with Google.
• ShipStation credentials — the API keys you provide so we can read and update your orders. They are stored encrypted and used only to operate the automations you configure.
• Order and product data — order details, product dimensions, and shipping information synced from your ShipStation account, used to run your automation rules, pick boxes, and generate packing slips.
• Billing information — payments are processed by Stripe; we never see or store your full card number.
• Usage data — pages visited and features used, collected via cookies and analytics to improve the product and measure advertising.

How we use it

We use your data to run the automations you set up, bill your subscription, send transactional email (via Postmark), provide support, and improve the product. We do not sell your data.

Service providers

We share data only with the providers needed to run the service: Stripe (payments), Postmark (email delivery), Google (sign-in, analytics, and ads measurement), ShipStation (the platform we integrate with on your behalf), and our hosting infrastructure provider.

Cookies

We use a session cookie to keep you signed in and analytics cookies to understand how the site is used and to measure advertising campaigns. You can block non-essential cookies in your browser without affecting sign-in.

Retention and deletion

We keep your account and automation configuration while your account is active. Operational data is deleted automatically on a schedule: activity and webhook logs after 30 days, rule debugging traces after 14 days, and automation run history, transactional email records, and generated documents (packing slips, pick lists, and shipping labels) after 90 days.

If you close your account or ask us to, we delete your account data, including stored ShipStation credentials, except where we must retain records for legal or accounting reasons. To request deletion, email [email protected].

Security

Data is encrypted in transit, credentials are stored encrypted, and passwords are hashed. No system is perfectly secure, but we limit access to what the service needs to function.

Browser extension

The ShipExtension Chrome extension runs on ShipStation pages you visit. When you use it:

• It reads order rows on the ShipStation pages you view so it knows which orders you've selected.
• It stores a connection token and your extension preferences locally in Chrome's extension storage on your device.
• It sends the order IDs you select and the automation commands you trigger to shipextension.com over HTTPS. These are processed the same way as actions taken in the web dashboard.

The extension collects nothing beyond what's needed to run the automations you trigger. We do not sell this data or share it with third parties beyond the service providers listed above. You can disconnect the extension at any time from Settings → Chrome Extension (which invalidates its token) or by removing the extension from Chrome.

Changes

If we make material changes to this policy, we will update this page and note the new date above. Continued use of the service after a change means you accept the updated policy.