Privacy Policy
Last updated September 4, 2026
This policy covers the Parcelcraft website at parcelcraft.com and the Parcelcraft app available through the Stripe Apps Marketplace.
What personal data we collect and why we collect it
Account data
When you create an account we collect your email address and, if you sign in with Google, the basic profile information Google returns. We use it to authenticate you, to contact you about your account, and to provide support.
Stripe data
When you connect Parcelcraft to Stripe, we access your Stripe account and order information — including your customers’ names, addresses, email addresses and order contents — so we can create shipments. See Who we share your data with for how that data is handled.
Shipment data
We store the shipments you create: addresses, package details, carrier, service, cost and tracking number. This is what powers your shipment history inside the app.
Error logs
When a request to EasyPost fails, we log the full body of that request and the error EasyPost returns. Because the request contains everything needed to build the shipment, the log can include personally identifying information about your customer — their name, address, phone number and email — along with the package details and shipping options you chose. We keep these logs so we can see exactly what went wrong, fix the bug and improve how Parcelcraft handles that scenario next time. We use them for no other purpose and we never share them with a third party.
Cookies
When you sign in we set an authentication cookie named AuthToken. It is signed, HTTP-only, and lasts up to 90 days or until you sign out, whichever comes first. It is what keeps you signed in between visits.
Our sign-in and registration pages load Google reCAPTCHA to block automated abuse. reCAPTCHA sets its own cookies and is governed by Google’s privacy policy.
We do not use advertising or cross-site tracking cookies.
Who we share your data with
Use of Stripe app and customer data
Our application integrates with Stripe and has access to certain private information, including data about your customers. We treat this information as protected and confidential. Here’s how we use this data:
- Shipment creation. We use the data accessed through our Stripe app solely to create shipments based on your order information.
- Shipment history. We retain and use the resulting shipment information to provide a comprehensive shipment history within our application.
- Customer communications. We email your customers on your behalf in the following circumstances only:
- To provide tracking information when a shipment is sent. This is on by default.
- To notify them of shipment cancellations.
- To deliver return labels when necessary.
- Data protection. We do not share this protected information with any third parties beyond EasyPost, the carrier you select for shipment, and SendGrid, which delivers the customer emails described above. We do not share your customer list with any other provider. All data, including the error logs described above, is used exclusively for the purposes stated in this policy and to improve our service to you.
- Data retention. We retain this information only for as long as necessary to provide our services and maintain your shipment history, or as required by applicable laws and regulations.
By using our application, you acknowledge and agree to our use of this data as described above. You are responsible for ensuring that your use of our application, including the customer communications we send on your behalf, complies with your own privacy policies and applicable laws and regulations.
Service providers
We rely on the following providers to run Parcelcraft. Each receives only the data needed for its role:
- Stripe — the source of your order data, and our payment processor.
- EasyPost — purchases labels from the carriers on your behalf.
- Carriers (USPS, UPS, FedEx, DHL, Canada Post and others you select) — receive the sender and recipient details printed on the label.
- Google Firebase — authentication and reCAPTCHA.
- Supabase — our application database.
- SendGrid — delivers notification email to your customers, unless you connect your own SendGrid account. It is the only provider that receives your customer list.
We do not sell your data or your customers’ data.
How long we retain your data
If you create a shipment, its metadata are retained indefinitely. This allows us to provide you with a comprehensive detail of your shipment history within the app. We consider this data private and confidential.
What rights you have over your data
If you have an account on this site, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. Email support@parcelcraft.com to make a request.
Where we send your data
Your customers’ shipment data will be shared with our shipping label partner, EasyPost, and the carrier you select. Your carrier will have information about your customers’ shipments in order to inform them about pending shipment arrivals. We only email your customers with your permission, as detailed in your notification settings within the app — to give them a tracking number, to tell them a shipment was canceled, or to send them a return shipping label. The carrier you select receives all the information you provide so it can deliver a better level of service in anticipation of your customers’ shipment arrival. Error logs from failed EasyPost requests stay with us and are never sent to anyone else.