Privacy Policy

Account data: email address, password (stored hashed by our authentication provider), optional display name, Terms acceptance date.

Upload history: for each upload batch — tracking numbers, the file names you referenced, shipment dates, timestamps, carrier response status codes and error messages, and a per-batch success/failure count.

Billing data: your Stripe customer and subscription identifiers, plan, subscription status and renewal date. Card numbers are collected and stored by Stripe only.

Technical data: standard server logs (IP address, browser type, request time) kept by our hosting provider for security and debugging.

Carrier API credentials. Your carrier API credentials (for FedEx Express, the Client ID and Client Secret of your Developer Portal project) live only in your browser's session storage. They are sent to our server once per upload run to obtain a short-lived carrier access token and are not written to any database or log.

Documents. Files are read in your browser and streamed through our server directly to the carrier's API. We do not store their contents.

• to operate the Service: sign you in, transmit your documents, show your history;
• to enforce plan limits and bill your subscription;
• to send transactional email (confirmation, password changes, billing notices, support replies);
• to keep the Service secure and to diagnose problems;
• to comply with legal obligations.

We share data only with the processors needed to run the Service, each bound by their own privacy terms:

• Your carrier — currently FedEx (Federal Express Corporation) — receives the documents, tracking numbers and shipment dates you upload;
• Stripe — payment processing and subscription management;
• Supabase — authentication and database hosting (EU region);
• Resend — transactional email delivery;
• Vercel — application hosting and server logs.

We do not sell personal data and do not use it for advertising.

Account data and upload history are kept while your account exists, so you can review past batches at any time.

When you delete your account (Profile → Delete Account), your account record, upload history and authentication data are deleted immediately and any active subscription is cancelled. Stripe retains billing records for the period required by financial regulations. Server logs are rotated by our hosting provider on a short cycle.

All traffic is encrypted in transit (TLS). Database access is restricted to our server-side code; the browser never queries the database directly. Passwords are hashed by the authentication provider. Access to production systems is limited to the operators of the Service.

You can view and update your account details on the Profile page and delete your account there at any time. To request a copy of your data, a correction, or to object to processing, email support@etdport.com. Depending on where you live (for example the EU/EEA, UK or California) you may have additional statutory rights, which we will honor.

We use only strictly necessary cookies: the authentication session cookie that keeps you signed in. No advertising or cross-site tracking cookies are set.

The Service is for businesses and is not directed at children under 16. We do not knowingly collect their data.

We may update this policy; the date at the top changes when we do, and material changes are announced by email or in the app.

Sempirica LLC, 101 Plaza Center 246, Secaucus, NJ 07094, USA. Email: support@etdport.com.