Privacy Policy

Last updated: May 14, 2026 · Effective: May 14, 2026

This Privacy Policy describes how Liam McDaniel, doing business as Shipclaim ("Shipclaim," "we," "us," or "our"), collects, uses, discloses, and protects personal information of users of the Shipclaim service ("Service").

By using the Service, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

When you create an account or use the Service, you may provide:

• Account information: name (optional), email address, password (stored only as a salted cryptographic hash; the plain-text password is never stored).
• Billing information: payment method details handled directly by Stripe (Shipclaim does not store full payment card numbers); billing email; billing address; tax ID where applicable.
• Communications: messages you send to support, sales, or general inquiries via email or other channels.
• UPS-related information: UPS account number, login credentials (when applicable), OAuth authorization tokens, negotiated contract details, uploaded invoice data, and related shipping records.

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Usage data: pages visited, features used, audit report views, dashboard interactions, click events.
• Device data: browser type, IP address, operating system, device identifiers, timestamps.
• Cookies and similar technologies: see Section 5 below.

1.3 Information from Third Parties

We may receive information about you from:

• Stripe: subscription status, payment status, invoice records, customer ID, partial card details (last 4 digits, expiration, brand).
• United Parcel Service: with your authorization, your UPS invoice data, account information, shipment records, contracted rates, refund and claim records.
• Service providers: hosting providers, email delivery services, authentication and database providers, and other vendors listed in Section 3.

2. How We Use Your Information

We use your information to:

• provide, maintain, and improve the Service;
• audit your UPS invoices and identify recovery opportunities;
• file claims with UPS on your behalf, where authorized;
• process payments and manage your Subscription;
• communicate with you about the Service, including account notifications, billing updates, audit reports, and support responses;
• send transactional emails (account confirmation, password reset, billing receipts, audit summaries);
• send marketing emails about new features or related services (you may opt out at any time);
• comply with legal obligations and respond to lawful requests;
• detect, prevent, and address fraud, security incidents, or technical issues;
• analyze usage patterns to improve the Service (typically using aggregated, de-identified data);
• enforce our Terms of Service.

We do not sell your personal information to third parties.

3. How We Share Your Information

We share information with the following categories of recipients, only as needed to operate the Service:

3.1 Service Providers

We rely on the following third-party processors:

• Stripe (payment processing): Stripe handles payment card data and subscription billing. Stripe's privacy policy applies to that data: https://stripe.com/privacy
• Supabase (authentication and database): stores user account credentials and application data. https://supabase.com/privacy
• Render (cloud hosting): hosts the Shipclaim application and database backups. https://render.com/privacy
• Resend (email delivery): delivers transactional and marketing emails. https://resend.com/legal/privacy-policy
• Anthropic (AI processing): used to process UPS contract documents and audit reasoning. Customer data sent to Anthropic is not used to train Anthropic's models, per Anthropic's commercial terms. https://www.anthropic.com/legal/privacy
• Airtable (operational records): records subscription events and customer status updates. https://www.airtable.com/company/privacy

We require these providers to implement appropriate safeguards for personal information and to use it only for the purposes for which it was disclosed.

3.2 United Parcel Service

To provide the Service, we transmit claim filings, refund requests, and related communications to UPS on Customer's behalf, where authorized. UPS receives Customer-identifying information (account number, name, claim details) as necessary to process those communications. UPS's use of that information is governed by UPS's own privacy practices.

3.3 Legal Compliance and Protection

We may disclose information when required by law, court order, subpoena, or government request, or when we believe in good faith that disclosure is necessary to:

• comply with legal obligations;
• protect the rights, property, or safety of Shipclaim, our customers, or others;
• detect, prevent, or address fraud, security, or technical issues;
• enforce our Terms of Service.

3.4 Business Transfers

If Shipclaim is involved in a merger, acquisition, asset sale, financing, or bankruptcy, your information may be transferred to the acquiring or successor entity, subject to the protections described in this Privacy Policy.

3.5 With Your Consent

We may share information for other purposes with your explicit consent.

4. Data Retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements:

• Account information: retained for the duration of your Subscription and for up to 90 days after termination, after which it is deleted or anonymized.
• Billing records: retained for at least 7 years to comply with tax and accounting requirements.
• UPS invoice data: retained during your active Subscription and for 90 days after termination, after which it is deleted unless retention is required by law or pending claims.
• Communications: retained for as long as needed to support the conversation and for legitimate business purposes, typically 2-3 years.
• Aggregated, de-identified data: may be retained indefinitely.

You may request earlier deletion of your personal information at any time. See Section 6.

5. Cookies and Tracking

Shipclaim uses cookies to operate the Service:

• Authentication cookies: HTTP-only, secure cookies used to maintain your login session. These include the PKCE verifier cookie (used during email confirmation flows), the access token cookie (used to authenticate API requests), and the refresh token cookie (used to maintain long-lived sessions). These cookies are essential for the Service to function.
• Functional cookies: used to remember your preferences and settings.

We do NOT currently use:

• third-party advertising cookies;
• marketing tracking pixels;
• cross-site behavioral advertising;
• session replay or full-session recording tools.

Your browser may allow you to block or delete cookies. Blocking essential authentication cookies will prevent you from using the Service.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request that we delete your personal information, subject to legal retention requirements.
• Portability: request your information in a portable, machine-readable format.
• Objection or restriction: object to or restrict certain processing.
• Opt-out of marketing communications: unsubscribe from marketing emails via the unsubscribe link in each message or by emailing support@shipclaim.co. Transactional emails (billing, account, security) cannot be opted out without canceling your Subscription.

To exercise these rights, contact us at support@shipclaim.co. We will respond within 30 days. We may need to verify your identity before fulfilling certain requests.

6.1 California Residents (CCPA / CPRA)

California residents have the right to:

• know what categories of personal information we collect, use, share, or sell (we do not sell personal information);
• request deletion of personal information;
• request correction of inaccurate personal information;
• opt out of the sale or sharing of personal information for cross-context behavioral advertising (not applicable to Shipclaim, as we do not engage in either);
• limit the use of sensitive personal information;
• non-discrimination for exercising privacy rights.

Submit requests to support@shipclaim.co. You may also designate an authorized agent to make a request on your behalf.

6.2 EEA, UK, and Other International Users

Shipclaim is based in the United States. If you access the Service from outside the United States, your information will be processed in the United States. By using the Service, you consent to this transfer.

If you are in the EEA or UK, you have rights under the General Data Protection Regulation (GDPR), including access, correction, deletion, portability, and objection rights.

Shipclaim's legal basis for processing personal information may include:

• Performance of a contract (providing the Service you've subscribed to);
• Legitimate interest (operating, securing, and improving the Service);
• Consent (where you've explicitly opted in);
• Legal obligation (compliance with applicable laws).

For privacy complaints in the EEA or UK, you may contact your local Data Protection Authority.

7. Security

We use reasonable administrative, physical, and technical safeguards to protect your information, including:

• TLS encryption for data in transit;
• encryption at rest for sensitive fields, including credentials and authentication tokens;
• role-based access controls and audit logging;
• principle-of-least-privilege access for employees and contractors;
• regular security reviews and updates;
• multi-factor authentication on administrative accounts;
• third-party processor due diligence.

No system is fully secure. We cannot guarantee absolute security of your information.

If we become aware of a data breach that affects your personal information, we will notify you and applicable authorities as required by law.

8. Children's Privacy

The Service is for business use by individuals 18 years of age or older. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us immediately at support@shipclaim.co and we will delete it.

9. Third-Party Links and Services

The Service may contain links to third-party sites and services. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing them with personal information.

10. Do Not Track

Some browsers transmit "Do Not Track" signals. Because there is no industry-standard interpretation of these signals, the Service does not currently respond differently to them. We do not engage in cross-site tracking that the "Do Not Track" signal would address.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. Material changes will be communicated via email or prominent notice within the Service at least 30 days before they take effect.

Continued use of the Service after changes take effect constitutes acceptance of the revised Privacy Policy. If you do not agree to the changes, your sole remedy is to cancel your Subscription before the changes take effect.

12. Contact Us

Questions about this Privacy Policy or our privacy practices:

Email: support@shipclaim.co

Mailing address: Available upon request.

For California-specific requests, see Section 6.1. For EEA/UK requests, see Section 6.2.

By using the Shipclaim Service, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy.