Legal
Privacy Policy
This Privacy Policy describes how .shipX collects, uses, discloses, and protects information when you visit our website, apply for an account, or use our B2B portal and services.
Last updated: July 6, 2026
1. Scope
This Privacy Policy applies to information collected through dotshipx.com, admin.dotshipx.com, our APIs, and related channels operated by .shipX ("we," "us," or "our"). It does not apply to third-party websites, marketplaces, or payment processors' own privacy practices.
Our Services are directed to businesses, not consumers. If you interact with us on behalf of a company, you represent that you have authority to provide business and personal information as described here.
2. Information We Collect
Information you provide
- Account application data: company name, business email, phone, website, tax ID/EIN, LLC registration, estimated volume, passwords (stored hashed).
- KYC and compliance documents uploaded during onboarding.
- Order, cart, shipping, and billing information.
- Communications with support (email, phone, contact forms).
- Merchant agreement and e-signature records.
- Payment method details processed by Stripe (we receive tokens, card brand, last four digits — not full card numbers).
Information collected automatically
- Device and browser type, IP address, timestamps, pages viewed, and referral URLs.
- Portal activity logs: logins, checkout events, integration connections, and API usage.
- Fraud-prevention signals: AVS results, 3DS outcomes, velocity patterns, and geolocation approximations derived from IP.
- Audit logs for security, chargeback evidence, and regulatory compliance.
Information from third parties
- Marketplace platforms (Amazon, eBay, Shopify) when you connect integrations — order data, buyer ship-to addresses, and seller identifiers.
- Payment processors (Stripe) — transaction status, dispute notices, and risk scores.
- Carriers (USPS, UPS, FedEx) — tracking and delivery events.
- Identity, fraud, and business verification vendors we may use during KYC.
3. How We Use Information
We use information to:
- Process applications, verify businesses, and manage account approval.
- Provide wholesale ordering, warehousing, fulfillment, and marketplace sync services.
- Process payments, enforce transaction limits, rolling reserves, and wire settlement.
- Detect, prevent, and investigate fraud, chargebacks, and security incidents.
- Communicate about orders, shipments, account status, and policy updates.
- Comply with legal obligations, respond to lawful requests, and enforce our Terms.
- Improve our Services, troubleshoot issues, and generate internal analytics.
We may use de-identified or aggregated data that does not reasonably identify you for benchmarking and service improvement.
6. Security
We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the data we process, including encryption of marketplace OAuth tokens, hashed passwords, TLS in transit, access controls, and audit logging.
No method of transmission or storage is 100% secure. You are responsible for safeguarding your portal credentials and notifying us promptly of suspected unauthorized access.
7. Data Retention
We retain information for as long as needed to provide Services, resolve disputes, enforce agreements, and meet legal, tax, and accounting requirements. Payment, order, and audit records may be retained for extended periods required for chargeback defense and compliance (often seven years or longer for financial records).
When data is no longer needed, we delete or de-identify it in accordance with our retention schedule.
8. Your Privacy Rights (U.S.)
Depending on your state of residence, you may have rights under U.S. state privacy laws, including:
- Right to know what personal information we collect, use, and disclose.
- Right to access and obtain a copy of certain personal information.
- Right to correct inaccurate personal information.
- Right to delete personal information (subject to legal exceptions).
- Right to opt out of certain processing (where applicable).
- Right to non-discrimination for exercising privacy rights.
California residents (CCPA/CPRA): You may submit a verifiable consumer request to know, delete, or correct personal information by contacting us below. We will verify requests using information associated with your business account. Authorized agents may submit requests with proof of authorization.
Other states (e.g., Virginia, Colorado, Connecticut, Utah, Texas): Similar rights may apply. Contact us to exercise applicable rights in your jurisdiction.
To submit a privacy request: email [email protected] with the subject line "Privacy Request" and your company name and account email.
9. Children's Privacy
Our Services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, contact us and we will delete it promptly.
10. International Users
We operate in the United States. If you access the Services from outside the U.S., you understand that information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your country. By using the Services, you consent to such transfer to the extent permitted by law.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will post the revised version with an updated "Last updated" date. Material changes may be communicated via email or portal notice.
12. Contact Us
.shipX — Privacy
Email: [email protected]
Phone: 855-368-7447
Mailing address: Available upon request for verified account holders and legal process service.
