Privacy Policy

Last updated: June 2, 2026

PandaShip LLC ("PandaShip," "we," "us") cares about your privacy. This policy explains what information we collect, why we collect it, how we use it, and the choices you have. We've tried to write it plainly, not as a legal essay.

If you have questions about this policy or how we handle your data, email us at privacy@pandaship.com.

1. Who this policy applies to

This policy applies if you use the PandaShip website at pandaship.com, create an account with us, buy shipping labels through our service, or contact us. It also applies if you join our waitlist while we're launching.

It does not cover third-party websites or services we link to. If you click through to another site (for example, a shipping carrier's tracking page), that site's privacy practices apply.

2. What we collect

We collect three categories of information.

Information you give us

When you sign up or use the service, you provide:

• Your name, email address, and phone number
• A password (stored hashed — we never see your plain password)
• Shipping addresses you enter when creating a label (sender and recipient)
• Package details (weight, dimensions)
• Payment details, collected via Stripe through our shipping partner EasyPost. We never see or store your full card number — only a brand and last 4 digits for display purposes.

If you join our waitlist before we launch, we just collect your email address.

Information collected automatically

When you use our website, we automatically collect:

• Basic technical data: your IP address, browser type, device type, and pages visited
• Cookies and similar technologies needed to keep you signed in and to run the site

We do not run third-party advertising trackers, Facebook Pixel, Google Ads remarketing, or any other targeted-advertising technology on our site. If that changes in the future, we'll update this policy and notify you.

Information from third parties

When you create a shipping label, our shipping partner EasyPost returns tracking and label data that we associate with your account (tracking numbers, label URLs, carrier confirmations).

3. How we use your information

We use your information to:

• Create and operate your account
• Provide the service — fetching shipping rates, generating labels, tracking shipments
• Process payments — funds added to your wallet, label purchases debited from your wallet
• Send transactional emails (signup confirmations, receipts, etc.)
• Provide customer support when you contact us
• Detect fraud, abuse, and security threats
• Comply with legal obligations
• Improve our service — understand how people use it, what works, what's broken

We do not sell your information. We do not share it with advertisers. We do not use it to build profiles for advertising on other sites.

4. Who we share information with

We only share your information with parties that help us run the service, and only what they need to do their job. Specifically:

• EasyPost — our shipping platform partner. Your name, email, phone, addresses, and payment info pass through EasyPost so we can give you carrier rates and labels. EasyPost's privacy policy applies to that data.
• Stripe — payment processing, via EasyPost. Your payment method is stored with Stripe.
• Carriers (USPS, UPS, FedEx, DHL) — when you buy a label, the carrier receives the shipment information needed to deliver it. Each carrier has its own privacy policy.
• Supabase — our database and authentication provider. Your account data is stored on Supabase infrastructure.
• Vercel — hosts our website and serves it to you.
• Postmark — sends transactional emails (sign-up confirmations, label receipts, etc.).
• Cloudflare — DNS and security infrastructure.

We may also disclose information if we're required to by law (subpoena, court order, etc.), or if it's necessary to protect our rights, our users, or the public from harm or fraud.

If PandaShip is acquired, merged, or sold, your information may transfer as part of that transaction. We'll notify you if that happens.

5. How long we keep your information

We keep your information for as long as your account is active. If you close your account, we may retain certain information for as long as needed to comply with our legal obligations, resolve disputes, prevent fraud, or enforce our agreements.

Shipment records (for tax, regulatory, and dispute purposes) are typically retained for 7 years.

6. Your choices and rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information (subject to retention requirements above)
• Export your information in a portable format
• Object to certain uses of your information

To exercise any of these rights, email privacy@pandaship.com. We'll respond within 30 days. We may ask you to verify your identity before acting on the request.

7. California residents (CCPA)

If you're a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what categories of personal information we collect and why
• The right to access the specific pieces of information we hold
• The right to delete that information
• The right to correct inaccurate information
• The right to opt out of the sale or sharing of personal information
• The right not to be discriminated against for exercising these rights

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We have no "Do Not Sell My Information" workflow because there is no selling to opt out of.

The categories we collect, per CCPA classifications: identifiers (name, email, IP), customer records (name, phone, payment-related info), commercial information (your purchases), internet activity (how you use our site), geolocation (city/state from addresses), and inferences (basic usage patterns).

To exercise any CCPA rights, email privacy@pandaship.com.

8. EU, UK, and Swiss residents (GDPR)

If you're in the European Economic Area, the United Kingdom, or Switzerland, the GDPR gives you rights to access, correct, delete, restrict, and port your data, and to object to processing. You can exercise these by emailing privacy@pandaship.com.

Our legal bases for processing your information are:

• Performance of a contract — to deliver the service you signed up for
• Legitimate interests — to improve the service, detect fraud, and run our business
• Legal obligations — to comply with applicable laws
• Consent — where we've asked for it

You also have the right to lodge a complaint with your local data protection authority.

Your data may be transferred to and processed in the United States, where PandaShip operates. We use standard contractual clauses or other legally recognized mechanisms when transferring data internationally.

9. Security

We take security seriously. We encrypt sensitive credentials at rest, use HTTPS for all web traffic, and follow industry-standard practices for the systems we operate. Payments are processed through Stripe and EasyPost, which are PCI-compliant — we never store full payment card numbers ourselves.

No system is 100% secure, however. We can't guarantee absolute security and we encourage you to use a strong, unique password for your account.

10. Children

PandaShip is not directed to children. We do not knowingly collect information from anyone under 13. If you believe a child has provided information to us, contact privacy@pandaship.com and we'll delete it.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we'll notify you by email or by a notice on the website. The "Last updated" date at the top tells you when changes were last made.

Continued use of the service after a change means you've accepted the updated policy.

12. Contact us

If you have questions about this policy or how we handle your data:

Email: privacy@pandaship.com

Phone: 1-561-855-1656

Mail:
PandaShip LLC
Attn: Privacy Team
5407 N Haverhill Rd, Ste 346
West Palm Beach, FL 33407