Privacy Policy

1. Introduction

ShipReady ("we", "our", or "us") operates shipready.app (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

Information you provide

• Account information (email address, password) when you create an account.
• Payment information processed by Stripe. We do not store your card details.
• URLs and website data you submit for scanning.
• Communications you send to our support team.

Information collected automatically

• Usage data (pages visited, scan history, feature usage) via Google Analytics.
• Log data (IP address, browser type, referring URLs) from our servers.
• Cookies and similar tracking technologies.

3. How We Use Your Information

• To provide, operate, and maintain the Service.
• To process payments and manage subscriptions via Stripe.
• To send transactional emails (scan results, weekly reports) via Resend.
• To generate AI-powered scan summaries and fix prompts using Google Gemini.
• To analyze usage patterns and improve the Service.
• To respond to customer support requests.
• To send product updates (you may opt out at any time).

4. Third-Party Services

We share data with the following third parties to operate the Service. Each has its own privacy policy.

5. Cookies

We use cookies and similar technologies to maintain your session, remember preferences, and gather analytics data. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Service.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Scan results are retained for 90 days for free users and 12 months for paid subscribers. You may request deletion of your account and associated data at any time by contacting us.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage via Supabase, and row-level security on all database tables. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. GDPR Rights (EEA Residents)

If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your personal data ("right to be forgotten").
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at support@shipready.app. We will respond within 30 days. Our legal basis for processing your data is contractual necessity (to provide the Service) and legitimate interests (analytics and product improvement).

9. CCPA Rights (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

• Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete — request deletion of personal information we have collected, subject to certain exceptions.
• Right to opt out — opt out of the sale of your personal information. We do not sell personal information.
• Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at support@shipready.app. We do not sell personal information to third parties.

10. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date above. Your continued use of the Service after changes constitutes your acceptance of the revised policy.

12. Contact Us

For privacy-related questions or to exercise your rights, contact us at: