Privacy Policy

1. Who this applies to

Paamship is a business-to-business tool. Our customers are Etsy sellers who connect their shop to the Service. This policy covers data about our customers and the order data we process on their behalf to provide shipping and fulfilment.

2. Information we process

• Account & connection data: the seller’s name, contact email, shop name, and the encrypted OAuth tokens that authorise access to their Etsy shop.
• Order & fulfilment data: order and receipt details needed to ship — item descriptions, quantities, order totals, and the buyer’s name and shipping address as provided on the order.
• Shipment data: carrier names and tracking numbers assigned to parcels.

We do not collect buyer email addresses, payment or card details, or any listing content. We do not request Etsy’s buyer_email field.

3. How we use information

We use the information solely to:

• capture paid orders and queue them for fulfilment;
• help our customer’s team assign carriers and tracking numbers;
• write shipment tracking back to the originating Etsy order; and
• operate, secure, and support the Service.

We do not sell personal data, and we do not use it for advertising or profiling.

4. Sharing & sub-processors

We share data only as needed to run the Service — for example with hosting and database providers, and with shipping carriers to whom tracking relates. These providers process data on our instructions under appropriate confidentiality and security obligations. We may disclose data where required by law.

5. Retention

Order and fulfilment records are retained for as long as needed to provide the Service and to meet our customers’ record-keeping needs, after which they are deleted or anonymised. Encrypted tokens are deleted when a shop is disconnected.

6. Security

OAuth tokens and signing secrets are encrypted at rest using AES-256-GCM and are never exposed to the browser. Access to private member data is via OAuth only. Inbound webhooks are verified with HMAC signatures. See our Security page for detail.

7. Your rights

Depending on your location, you may have rights to access, correct, or delete personal data, or to object to or restrict its processing. Sellers can revoke Paamship’s access to their Etsy shop at any time from their Etsy account. To exercise any right, contact us at the address below.

8. Etsy integration

The Service integrates with Etsy via the official Etsy Open API under Etsy’s API Terms of Use. Buyer information we process originates from the seller’s own Etsy orders and is used only for fulfilment. The term "Etsy" is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.

9. Changes

We may update this policy from time to time. Material changes will be posted on this page with an updated date.

10. Contact

Questions about this policy or your data? Email support@paamship.com.