ShipMint EasyRate for Shopify — App Privacy Notice

Last updated: October 26, 2026

This App Privacy Notice explains how Shipmint, Inc. (“ShipMint,” “we,” “us,” or “our”) collects, uses, shares and keeps information when a merchant installs and uses the ShipMint EasyRate app for Shopify (the “App”). It applies only to the App. It supplements our general Privacy Notice, which covers our websites and the ShipMint platform, and together they form the Privacy Policy referred to in our Terms of Service.

The App is for merchants that have a ShipMint EasyRate account. It buys UPS shipping labels for the orders a merchant fulfills in Shopify. In this notice, a “merchant” is the business that installs the App, and a “customer” is a person who places an order in the merchant’s store.

1. Information we collect

From the merchant’s Shopify store, through Shopify:

  • Shop details: the store’s Shopify domain, and the access credentials Shopify issues when the App is installed.
  • Shipping options: the names of the store’s shipping options, which the merchant matches to UPS services.
  • Order details needed to ship an order: the order number and the order’s ship-to name and address (name, address lines, city, state or province, postal code and country).

We do not collect payment card details.

From the merchant directly:

  • The connection between the merchant’s store and its ShipMint EasyRate account, made by a signed-in administrator of that account.
  • The merchant’s choices in the App, such as which UPS services each shipping option may use.

Created when the App is used:

  • Label records: carrier, service, tracking number, label cost, order number, ship-to name and postal code, and the label image. The label image shows the full ship-to address, as every shipping label does.
  • Records of orders the App did not ship, with the reason.
  • Records of privacy requests Shopify sends us on the merchant’s behalf: the request type, the store, customer and order identifiers, and the dates received and completed.

From UPS:

  • Invoice data for the labels the App buys: UPS invoices ShipMint for every label. UPS decides what its invoices contain, and they include each shipment’s ship-to name and address.

Cookies and browser storage: the App runs inside Shopify admin and sets no cookies or browser storage. When a merchant connects a store on the ShipMint website, the website keeps a one-time connection code in the merchant’s browser and deletes it once the connection is confirmed, at sign-out, or after 10 minutes. Our general Privacy Notice covers the cookies on our websites.

2. How we collect information

  • Through Shopify, with the permissions the merchant grants when installing the App.
  • From the merchant, when it connects its store and sets up the App.
  • Automatically, as the App processes the orders the merchant fulfills, and from UPS, in the invoices it sends us for the labels the App buys.

We do not buy information about customers from anyone.

3. How we use information

We use this information only to provide the App and to keep our own billing, accounting and tax records:

  • to buy a UPS shipping label when the merchant fulfills an order;
  • to choose the UPS service the merchant selected for the order’s shipping option;
  • to send the tracking number back to the merchant’s Shopify order;
  • to show the merchant its label history, wallet balance and any orders the App did not ship;
  • to support voids, refunds, billing and carrier disputes for labels the App bought, and to check UPS invoices against those labels;
  • to answer privacy requests and to keep the App secure.

We do not use customer information for marketing, advertising or profiling, and we do not make automated decisions about customers that have legal or similarly significant effects. The advertising and analytics practices described in our general Privacy Notice apply to visitors to our websites, not to customer information processed through the App. If we want to use App information for a new purpose, we will update this notice before we do.

4. Our role

For customer information, ShipMint acts on the merchant’s behalf and on its instructions: the merchant decides to fulfill an order, and the App carries that out. Where the GDPR or a U.S. state privacy law applies, the merchant is the controller (a “business” under California law) and ShipMint is its processor (a “service provider”).

Under our Terms of Service, the merchant owns this information and is responsible for any notices and consents its customers need, and we use the information only to provide and maintain the App. For merchants, our Terms of Service and this notice are our privacy and data protection agreement for the App: together they set out the information processed, its purposes, each party’s role, how long it is kept, and where it is processed. Information about the merchant’s own staff, such as the administrator who connects the store, is covered by our general Privacy Notice. The UPS invoice records described in section 7 are different: UPS issues them to ShipMint as the UPS account holder, and we keep them as our own billing, accounting and tax records.

5. Sharing information

  • UPS: we send the ship-to name and address to UPS to create the shipping label. UPS handles that information under its own privacy notice.
  • Shopify: we send the tracking number back to the merchant’s Shopify store.
  • Service providers: Google Cloud hosts the App and its data.
  • Required by law: we may disclose information if we are required to do so by law or legal process, in response to a request from government officials or law enforcement authorities, or as necessary or appropriate in connection with an investigation of illegal activity. Where the law allows, we notify the merchant before a compelled disclosure.
  • Certain transactions: we may transfer information to a party that acquires all or part of our business, whether by merger, consolidation, or purchase of all or part of our assets, or in a bankruptcy or reorganization, subject to this notice.

We do not sell customer or merchant information, and we do not share it for advertising.

6. Where information is processed

The App and its data are hosted and processed in the United States, on Google Cloud, and our Terms of Service offer the App for use in the United States. If customer information is subject to the GDPR, the “Transfer of Data Abroad” and “GDPR Privacy Rights” sections of our general Privacy Notice apply, and we act on them through the merchant as described in section 8. This notice is governed by the laws of the State of North Carolina.

7. How long we keep information

  • Label records: for as long as the merchant’s ShipMint EasyRate account is active and the App is installed, to support label history, voids, refunds, carrier disputes and billing.
  • Label images: deleted automatically 90 days after the label is created.
  • Copies prepared for a customer’s data request: deleted 30 days after we prepare them.
  • Records of privacy requests: kept for 24 months, without the customer’s name, address, email or phone.
  • When a merchant leaves: Shopify sends us a deletion request 48 hours after the App is uninstalled, and we delete or anonymize the store’s customer information within 30 days. If the merchant’s ShipMint EasyRate account closes first, we do the same within 30 days of closing.
  • Billing records: we keep each label’s carrier, service, tracking number, cost and order number for billing and accounting, for seven years from the label date, and then delete them.
  • UPS invoice records: UPS issues these invoices to ShipMint as the UPS account holder. UPS decides what they contain, and they include each shipment’s ship-to name and address, which ShipMint cannot remove from the invoices UPS issues. We keep them for seven years from the invoice date and then delete them, to check and pay UPS, handle carrier disputes and claims, and meet our accounting and tax obligations. We use them only for those purposes, we protect them as described in section 9, and a deletion request does not remove them.

8. Privacy requests

Customers: contact the store you bought from. The merchant decides on your request, and Shopify passes it to us. You have the rights described in our general Privacy Notice for where you live, and you exercise them through the merchant. If you write to us directly, we will refer you to the store and let the merchant know we received your request.

  • Access: we prepare the information we hold about your orders for the merchant.
  • Deletion: we delete your label images and remove your name and postal code from our records, except the UPS invoice records described in section 7.

Merchants: after you uninstall the App, Shopify sends us a deletion request for your store. We then delete or anonymize your store’s customer information, delete its connection details and disable its access credentials.

We complete each request within 30 days of receiving it.

9. Security

We employ reasonable security precautions to protect information against loss, misuse and alteration. We encrypt information in transit and at rest, including backups; keep store access credentials in a secure secrets store; keep test and production data separate; limit access to the staff who need it; and log staff access to customer information. No method of transmitting or storing information is completely secure, and we cannot guarantee its security. If a security incident affects customer information, we notify the affected merchants without undue delay. If you believe information is no longer secure, contact us (section 11).

10. Children

The App is for businesses, and our Terms of Service require its users to be 18 or older. The App is not directed at children, and we do not knowingly collect personal information from children under 16.

11. Contact

Questions about this notice or a privacy request:

  • Email: info@goshipmint.com
  • Mail: Shipmint, Inc., 421 North Harrington Street, Suite 350, Raleigh, NC 27603

12. Changes to this notice

We will post changes on this page and update the “Last updated” date. If a change is likely to adversely affect merchants’ or customers’ rights, we will notify merchants that use the App in advance, by email to the administrator of their ShipMint EasyRate account. A merchant’s continued use of the App after a change takes effect means it accepts the updated notice.