Privacy Policy

Data we collect

We process the following data:

• Account data: your email address and password (stored by our authentication provider in hashed form; we never see it).
• Profile data you choose to enter: name, company name, phone number and carrier account numbers (UPS, FedEx, USPS). We use them only to fill in your dispute letters.
• Files you upload: carrier invoices and, optionally, order exports. They may contain tracking numbers, shipment weights and dimensions, delivery addresses or address types, order IDs and charges.
• Audit results we generate from those files: discrepancies, amounts, deadlines and the claim status you set.
• Billing data: your plan and subscription status. Card details are handled by our payment provider (Dodo Payments) and never reach our servers.
• Technical data: server logs (IP address, request time, error details) kept for security and troubleshooting, and error reports without personal data.

How we use it

To provide the service: run audits, show results, generate dispute packages and letters, enforce plan limits and process subscriptions.

To keep the service secure and working: prevent abuse, investigate errors and support you when you contact us.

To send service emails such as sign-up confirmation and password reset. We do not send marketing emails without your consent.

We do not sell your data, do not use your invoices to advertise to you, and do not share your shipping data with carriers or other customers.

Service providers

We rely on these providers to run ParcelAudit. Each processes data only on our behalf:

• Supabase — database, authentication and file storage.
• Vercel — website hosting.
• Render — application server hosting (United States).
• Dodo Payments — payments and subscriptions as merchant of record; it handles taxes and card data under its own privacy policy.
• Sentry — error monitoring, configured not to collect personal data.
• Vercel Web Analytics — anonymous, cookieless page-view statistics (pages visited, referrer, country, device type); no personal profile is built.
• OpenAI — optional; when enabled, only surcharge names from invoices (for example "Residential Surcharge") are sent for categorization, never addresses or account data.

Cookies

We use only cookies needed for the service to work: your sign-in session and your language choice. We do not use advertising or third-party tracking cookies.

Storage and retention

Your data is stored with the providers above, which may process it in the United States and other countries. Data in transit is encrypted (HTTPS), and access to your audits is limited to your account.

We keep your account data, files and audit results while your account is active. You can delete your account at any time on the Account page: this cancels any active subscription and immediately deletes your login, profile, uploaded files and audit results. If you ask us by email instead, we do it within 30 days. Records we must keep by law (for example payment records held by Dodo Payments) are kept as required. Server logs are kept for a limited time for security.

Your rights

You can access and update your profile in your account. You can also ask us for a copy of your data, its correction or deletion, or object to its processing, by writing to hello@getparcelaudit.com. We reply within 30 days. Depending on where you live (for example the EU, UK or California), you may have additional rights under local law, including the right to complain to a data protection authority.

Children

ParcelAudit is a business service and is not intended for people under 18.

Changes

If we change this policy, we will update the date below and, for material changes, notify you by email or in the app before they take effect.

Contact

Questions about privacy: hello@getparcelaudit.com.