Privacy Policy

1. Overview

Shiplox (“we”, “us”) operates the sourcing and fulfillment platform at https://app.staging.shiplox.net. This policy explains what data we collect, how we use it, and your rights.

2. Data We Collect

• Account data: email address, name, business name, role (buyer / supplier / warehouse).
• Public request data: contact details, product or store links, order volume, SKU and inventory details, destinations, requested services, packaging requirements, and other information you submit for a sourcing quote or fulfillment plan.
• Order data: product names, quantities, shipping addresses, tracking numbers imported from connected stores.
• Connected platform data: store or marketplace domain, OAuth tokens, product references, order data, and webhooks where a live integration is enabled.
• Shopify fulfillment data: order identifiers, line items, customer email, recipient name, shipping address, destination country, and fulfillment status when a merchant connects Shopify for order import.
• Billing data: invoices for the cost of the physical goods we source and ship for you (samples, product cost, and shipping; sourcing, quality checks, and handling are included in the product cost). The Shiplox app itself is free; we do not process card payments in-app and never store raw card numbers.
• Usage data: server logs and, when you allow analytics, page views, navigation events, quote-funnel events, device and browser information, and interaction measurements collected through Google Analytics and Microsoft Clarity.
• Privacy preference data: your analytics and marketing choices, stored in your browser so we can respect them on later visits.

3. How We Use Your Data

• To provide sourcing quotes, order management, and fulfillment services.
• To review public sourcing and fulfillment requests, prepare a plan, and reply using the contact information submitted with the request.
• To sync orders from your connected store or marketplace where a live integration is enabled.
• To send transactional emails (quote notifications, shipment updates, invoices).
• To send the limited calculator follow-up sequence you request when unlocking a landed-cost estimate.
• To prepare invoices for goods and fulfillment services you order.
• To improve platform reliability and debug errors.
• When you consent, to understand website usage, improve the quote journey, and measure marketing campaign performance.

4. Connected Platform Data

When you connect Shopify, we request only the access needed for the enabled workflow, such as reading orders and product references.

Shopify order contact and shipping fields are used only to prepare fulfillment, packing, shipping, returns, reships, customer support, and shipment notifications. Shiplox does not use connected store customer data for advertising or resale.

We comply with Shopify’s GDPR requirements. Upon receiving acustomers/redact or shop/redact webhook, we anonymize or delete the relevant records from our database within 30 days.

5. Data Sharing

We do not sell your data. We share data only with:

• Managed infrastructure providers for secure database and authentication hosting.
• Resend for transactional and requested calculator email delivery.
• Vercel for application hosting and serverless functions.
• Google Analytics for optional website and quote-funnel measurement when analytics consent is granted.
• Microsoft Clarity for optional interaction and experience measurement when analytics consent is granted.
• Meta for optional campaign measurement when marketing consent is granted and Meta Pixel is enabled.

6. Data Retention

We retain your account and order data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where retention is required by law (e.g. financial records).

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (right to erasure).
• Export your data in a portable format.
• Withdraw consent at any time by disconnecting your connected platform or closing your account.
• Change optional analytics and marketing consent at any time through Cookie settings in the website footer.
• Unsubscribe from calculator follow-ups using the link included in every message.

To exercise these rights, email us at support@shiplox.net.

8. Cookies

Shiplox separates browser storage into the following categories:

• Essential: required for authentication, OAuth security, secure sessions, and remembering your privacy choice. These cannot be disabled through the consent panel.
• Analytics: optional Google Analytics and Microsoft Clarity technologies used to measure site usage and improve the customer journey.
• Marketing: optional Meta Pixel and Google advertising signals used to measure campaigns when those services are enabled.

Analytics and marketing technologies do not load until you grant the relevant consent. We store the preference record in local storage under shiplox-consent-v1. You can withdraw or change your choice through Cookie settings in the footer; withdrawing consent stops future optional loading and clears accessible first-party measurement cookies.

9. Security

All data is transmitted over HTTPS. Shopify access tokens are stored in restricted server-side records and are not exposed in the browser. Passwords are hashed by our authentication provider. We conduct regular security reviews of our infrastructure.

10. Changes to This Policy

We may update this policy periodically. We’ll notify you by email or an in-app notice for material changes. Continued use of Shiplox after changes constitutes acceptance.