Privacy Policy

This Privacy Policy explains how Rogue Fabrication, LLC, doing business as ShipClear ("ShipClear", "we", "us") collects, uses, and shares information when you use the ShipClear shipping-rate platform at shipclear.io, the customer portal, and the ShipClear WooCommerce plugin (together, the "Service"). It applies to the merchants who sign up for ShipClear and to the personal data contained in the shipment data merchants send us.

1. Information we collect

Account information. Your email address, authentication credentials (passwords are stored only as salted hashes and are never visible to us), and, if you provide them, your name and company.

Store configuration. Your store name and WooCommerce URL, ship-from address, packaging box sizes, and rate rules. This also includes your carrier API credentials (client IDs, secrets, and account numbers), which are encrypted at rest using AES-256-GCM and are never displayed back to you once saved.

Shipment and quote data. When your store requests a rate, we receive and store a record of the request: destination ZIP/postal code, state, and country, the dimensions and weights of the cart's items, and the rates we computed. We keep these "traces" so you can audit and debug quotes.

Billing information. If you subscribe to a paid plan, our payment processor, Stripe, collects your payment method and billing details. Card numbers go to Stripe directly and are never sent to or stored by ShipClear. We keep your billing email, your plan and subscription status, invoice history, and a record of when you accepted our Terms and which version you accepted.

AI assistant data (optional). If you enable the in-portal AI assistant and a user consents, we process the assistant conversation and the store configuration it references. The assistant is off unless you turn it on, and each user must consent before their messages are logged.

Technical data. IP address, request timestamps, approximate usage counts, and a single essential authentication cookie needed to keep you signed in.

Waitlist. If you enter your email address on our pre-launch page, we store that address, the date, and the page you came from, for the single purpose of emailing you once when ShipClear opens to new customers. We do not add you to a newsletter, we do not use it to advertise anything else, and we do not share it. Ask us at privacy@shipclear.io and we will delete it; you do not need an account to make that request.

2. How we use information

• To provide the Service: authenticate you, store your configuration, and compute shipping rates.
• To obtain rates, we transmit shipment origin, destination, and parcel dimensions to the carriers you connect (FedEx, UPS, USPS, DHL Express, FedEx Freight).
• To operate the AI assistant, when you have enabled it and a user has consented.
• To secure, monitor, debug, and improve the Service (for example, health checks and the quote traces you use to troubleshoot).
• To communicate with you about the Service, including service and security notices.
• To send one launch announcement to a pre-launch waitlist address, if you gave us one.
• To comply with law and enforce our Terms of Service.

3. Legal bases (EEA/UK)

Where the EU or UK GDPR applies, we process personal data to perform our contract with you, to pursue our legitimate interests in operating and securing the Service, and to comply with legal obligations. Where we act as a processor on your behalf (for shipment personal data), our processing is governed by our Data Processing Addendum.

4. How we share information: sub-processors

We do not sell personal data. We share it only with the service providers that help us run ShipClear:

In addition, the carriers you connect (FedEx, UPS, USPS, DHL Express, FedEx Freight) receive shipment data to return rates and act as independent controllers for their own purposes under their own privacy policies. We may also disclose information if required by law or to protect our rights.

5. International transfers

Our providers are located in the United States. Where personal data is transferred out of the EEA or UK, we rely on appropriate safeguards, including the Standard Contractual Clauses where required. See the Data Processing Addendum for details.

6. Data retention

• Quote traces and rate outputs: retained about 365 days, then automatically deleted.
• AI assistant conversations: retained about 90 days; AI usage records about 60 days.
• Account and store configuration: kept for the life of your account and deleted on request after termination, subject to legal retention needs.

7. Security

We protect data in transit with TLS and encrypt carrier credentials at rest with AES-256-GCM. Access is scoped per store, and the Service applies standard security response headers. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you of incidents as required.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent (for example, disabling the AI assistant or clearing its history in the portal). California residents have rights under the CCPA/CPRA, including to know and delete personal information and not to be discriminated against for exercising them; we do not sell or "share" personal information for cross-context behavioral advertising. To exercise any right, contact us at privacy@shipclear.io. If we process data on behalf of a merchant, we will refer end-user requests to that merchant.

9. Cookies

ShipClear uses a single essential cookie to keep you signed in to the portal. We do not use advertising or cross-site tracking cookies. Because the cookie is strictly necessary to provide the Service, it is set without a consent banner.

10. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the effective date; material changes will be communicated through the Service.

12. Contact

Rogue Fabrication, LLC, Sandy, Oregon, United States. Privacy inquiries: privacy@shipclear.io. General support: support@shipclear.io.