Privacy Policy
Effective date: May 8, 2026
1. Who we are
simplship is a shipping-label brokerage operated by Achdus Management LLC ("simplship", "we", "us"). We help US Shopify, Etsy, and eBay merchants access discounted USPS Priority Mail and FedEx Overnight labels by brokering rates from a wholesale shipping provider.
This policy explains what data we collect when you use simplship, why we collect it, and how it's stored and shared.
2. Information we collect
2.1 Account information
When you sign up for a simplship account, we collect:
- Email address — used as your primary account identifier and for sign-in via magic link or Google OAuth.
- Business name — collected during onboarding to populate quotes and invoices.
- Storefront domain (optional) — collected to associate your account with your store and improve quote accuracy.
- Google account profile data — if you sign in with Google, we receive your name, email, profile picture, and Google account ID. We use only the email to identify your account.
2.2 Shipping data you submit
When you request a shipping quote via the intake form, you submit:
- Shipment data — destination zip codes, package weights, and the rates you currently pay per shipment. We use this data exclusively to calculate your savings under simplship rates and to render your quote spreadsheet.
- Order history — once you purchase shipping labels through simplship, we retain a record of each order (shipment count, total spend, status) for billing and dispute-resolution purposes.
2.3 Payment information
When you pay an invoice, payment information (card number, billing address, expiration) is collected and stored by Stripe, our payment processor. simplship does not receive or store full card numbers. We receive only a Stripe customer identifier and metadata about the transaction (amount, status, last 4 digits of the card for receipts).
2.4 Technical data
When you use simplship, we automatically collect:
- IP address, user agent, device and browser metadata — used for security, fraud prevention, and platform diagnostics.
- Authentication cookies — set by Supabase to keep you signed in across page loads. Required for the application to function.
- Product usage events — page views and key actions (quote submitted, batch viewed) are sent to PostHog (when enabled) for product analytics. No event payload includes shipment-level data.
- Error reports — application errors are sent to Sentry (when enabled) for debugging. Error reports may include the URL where the error occurred and a stack trace, but do not include shipment data.
3. How we use your information
- Provide and operate the service — calculate quotes, generate spreadsheets, deliver labels, process payments.
- Communicate with you — send transactional emails (sign-in links, quote-ready notifications, invoices, label PDFs, billing alerts).
- Improve the service — analyze aggregate usage patterns to identify friction and prioritize improvements.
- Maintain security — detect and prevent abuse, unauthorized access, and fraud.
- Comply with legal obligations — respond to valid legal requests, retain records as required by tax law.
We do not sell your personal information. We do not use shipment data for advertising, broker your contact information to third parties, or share your business identity with anyone outside the third parties listed in §4 below.
4. Third-party services we use
simplship is built on a small number of third-party platforms. Each receives only the data it needs to perform its function:
- Supabase (database, authentication, storage) — stores your account record, shipment intake data, batch quotes, and orders. Authenticates your sign-in. Supabase privacy policy.
- Vercel (web hosting and edge network) — receives every HTTP request to the site, including IP and user agent. Vercel privacy policy.
- Stripe (payment processing) — receives full payment details when you pay an invoice. Stripe privacy policy.
- Resend (transactional email) — receives your email address and the contents of emails we send you. Resend privacy policy.
- Google (OAuth sign-in, optional) — if you sign in with Google, Google authenticates you and shares your basic profile (email, name, profile picture) with us. Your interaction with Google is governed by Google's privacy policy.
- NeverBounce (email verification, internal pipeline) — verifies email deliverability before we contact prospective customers. Does not run on customer-submitted email addresses.
- Anthropic, Serper, Apify, Hunter, Apollo (internal pipeline tooling) — used in our prospect-research pipeline to identify potential customers. These services do not process customer data submitted through the intake form.
- PostHog (product analytics, optional) — receives anonymized event data about how the application is used. Disabled by default until explicitly enabled.
- Sentry (error monitoring, optional) — receives application error reports. Disabled by default until explicitly enabled.
5. Cookies and similar technologies
simplship uses authentication cookies set by Supabase to keep you signed in. These cookies are essential for the application to function and cannot be disabled while continuing to use the service.
We do not use advertising cookies, third-party tracking pixels, or cross-site tracking technologies. If PostHog product analytics is enabled, it sets a first-party analytics cookie limited to simplship's domain.
6. Data retention
- Account data — retained for the lifetime of your account, plus up to 7 years after account closure to satisfy tax and accounting record-keeping obligations.
- Shipment intake data and quotes — retained while your account is active. Deleted within 90 days of account closure unless retention is required for an open dispute.
- Order history and invoices — retained for 7 years per tax and accounting record-keeping requirements.
- Authentication logs — retained by Supabase for up to 90 days for security review.
7. Your rights
You have the following rights regarding your data:
- Access — request a copy of the data we hold about you.
- Correction — request correction of inaccurate data.
- Deletion — request deletion of your account and associated data, subject to retention requirements in §6.
- Export — request a copy of your shipment and order history in a machine-readable format.
- Withdraw consent — disconnect your Google OAuth connection or stop using simplship at any time.
To exercise any of these rights, email us at the address in §10. We will respond within 30 days.
8. Children
simplship is intended for businesses and is not directed at individuals under the age of 18. We do not knowingly collect data from anyone under 18. If you believe we have inadvertently collected data from a minor, contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time as the service evolves. Material changes will be communicated via email to your account email address at least 14 days before they take effect. Continued use of simplship after the effective date of an update constitutes acceptance of the updated policy.
10. Contact
For privacy questions, data-rights requests, or any other matter related to this policy, contact us at:
Achdus Management LLC
Attn: simplship Privacy
Email: privacy@simplship.com