Privacy Policy — ShipLaneOS

Last updated August 7, 2026

1. Information We Collect

The information ShipLaneOS handles depends on which features you use. It may include:

Account dataEmail address, name, company information, password hash, subscription status, onboarding state, and account settings.

Shipping dataShip-from and recipient addresses, package dimensions and weight, selected service, rate information, shipment status, tracking numbers, and label references.

Store and order dataStore identifiers, connection tokens or credentials, imported order IDs, customer/recipient information, items, SKUs, quantities, order status, and related fulfillment information.

Inventory dataWarehouse SKUs, product names, quantities, notes, active-order demand comparisons, and Recovery Agent analysis derived from supported data.

Billing-reference dataStripe customer and subscription identifiers, billing email, subscription plan/status, checkout state, and payment/webhook event information needed to maintain account access.

Support and communicationsInformation you submit through support/contact forms and records needed to respond to account, technical, billing, or service questions.

2. Payment Information

Subscription payment methods are entered through Stripe-hosted Checkout. ShipLaneOS uses Stripe customer, subscription, checkout, invoice, and status information needed to operate billing, but our application is not designed to collect a full payment-card number through a ShipLaneOS form.

Postage purchases are processed through the configured shipping provider and carrier flow. Information necessary to obtain rates and purchase a confirmed label may be sent to the shipping provider and applicable carrier.

3. Store Connection Credentials

When an enabled store integration requires a token, consumer key, secret, refresh token, or similar credential, ShipLaneOS stores connection information needed to maintain that integration. Connection-secret fields are stored in encrypted database fields where the integration uses stored credentials.

You should connect only stores and accounts that you are authorized to access. Disconnecting an integration may stop future syncing, but records already imported into ShipLaneOS may remain subject to the retention practices described below.

4. Website, Device, and Analytics Information

For normal human visits to non-API pages, ShipLaneOS may record a visitor identifier, page path and URL, referrer, browser/user-agent information, IP address, and campaign parameters such as UTM source, medium, campaign, content, and term.

ShipLaneOS may use a persistent shiplane_vid cookie to recognize a visitor across page views. The current server-side visitor cookie can persist for up to one year unless removed earlier. Browser local storage or session storage may also be used for authentication state, visitor attribution, checkout-plan state, and other product functions.

Some pages may also use analytics or advertising-measurement technologies such as Google Analytics or Meta Pixel where enabled. Those providers may process browser or usage information according to their own policies and configuration.

5. How We Use Information

We use information as reasonably necessary to:

create, authenticate, secure, and support accounts;
operate subscription access and billing status;
obtain shipping rates, purchase labels after explicit confirmation, and track shipments;
connect authorized ecommerce stores and import supported order information;
maintain warehouse inventory and compare it with active imported order demand;
produce read-only Recovery Agent analysis and recommendations;
investigate errors, abuse, fraud, security issues, and service reliability;
measure site usage, attribution, and product performance; and
respond to support requests and communicate service-related information where delivery systems are configured.

6. Third-Party Services

ShipLaneOS relies on third parties to provide parts of the service. Depending on the feature you use and what is enabled in the deployment, those may include:

Stripe for subscription checkout, billing, invoices, payment-method management, and the Customer Portal;
EasyPost and shipping carriers for live shipping rates, label purchases, and shipment data;
Shopify, WooCommerce, Amazon, or other ecommerce platforms for store connections and order information you authorize;
hosting and database providers used to run ShipLaneOS and store application data; and
analytics and measurement providers where those technologies are enabled.

Each third party may process information under its own terms and privacy practices. We share information with a provider only as reasonably necessary for the feature, integration, transaction, security function, or legal obligation involved.

7. When We Share Information

We do not sell personal information. We may disclose information:

to service providers and infrastructure vendors that help operate ShipLaneOS;
to payment, shipping, carrier, and ecommerce services needed for actions you request or authorize;
to protect ShipLaneOS, users, third parties, systems, or legal rights;
to investigate fraud, abuse, or security incidents; or
when disclosure is required by applicable law, legal process, or a valid governmental request.

8. Security

We use administrative and technical safeguards intended to protect information, including hashed password storage, authentication controls, access restrictions, transport security, and encrypted fields for supported stored integration credentials. No internet service or storage system can guarantee absolute security.

Important: ShipLaneOS does not ask you to paste production secrets into support messages or public forms. Deployment/API secrets should be stored only in the authorized hosting or integration configuration used for the service.

9. Data Retention

We retain information for as long as reasonably necessary to provide the service, maintain account and transaction history, operate security and fraud controls, resolve disputes, meet legal or accounting obligations, and support legitimate business operations. Different categories of data may be retained for different periods.

Some records may remain after account closure or an integration is disconnected when retention is reasonably necessary for billing, security, fraud prevention, legal obligations, backups, or transaction history.

10. Your Choices and Requests

You may contact us to request help accessing, correcting, or deleting account information. Requests are handled subject to applicable law, verification requirements, and records that ShipLaneOS is permitted or required to retain.

You can also manage certain information directly by updating account/store settings, disconnecting supported integrations, managing billing through the Stripe Customer Portal, or removing browser cookies/local storage through your browser controls.

11. Children

ShipLaneOS is a business shipping service and is not directed to children. We do not knowingly design the service for use by children as the account holder.

12. Changes to This Policy

We may update this Privacy Policy as ShipLaneOS, its integrations, or legal requirements change. The current version and its last-updated date will be posted on this page. Where required by applicable law, additional notice will be provided.

13. Contact

Questions or privacy requests can be submitted through the ShipLaneOS contact page.