PublicShipping Global Privacy Policy
Effective Date: October 20, 2025
Controller: PublicShipping, Inc. (Delaware, USA)
This Privacy Policy describes how PublicShipping, Inc. (“PublicShipping,” “we,” “us,” or “our”) collects, uses, discloses, and protects Personal Data when you use our website, mobile applications, and related services (collectively, the “Services”).
By accessing or using the Services, you acknowledge that you have read and understood the terms of this Privacy Policy.
1. Scope and Data Controller
This Policy applies globally to the processing of Personal Data (which means any information relating to an identified or identifiable natural person) collected by us. PublicShipping, Inc. is the data controller responsible for your Personal Data.
2. Categories of Personal Data Collected
We collect information necessary to provide the Services, including:
- A. Identifiers and Contact Information: Name, email address, phone number, physical address (for pickup/drop-off), account credentials, and unique user identifiers.
- B. Identity Verification Data: Images of government-issued IDs (collected via secure third-party processors like Stripe Identity) strictly for compliance, fraud prevention, and security. We do not store this data after verification is complete.
- C. Shipment and Transaction Data: Details regarding the delivery request, item descriptions, package value, pickup and drop-off instructions, timestamps, and delivery confirmations.
- D. Financial Data: Payment method details (processed exclusively by third-party payment processors, such as Stripe). We do not store full credit card numbers. We retain transaction records.
- E. Geolocation Data: Precise or approximate location information collected from your mobile device or browser when you use the Courier app or enable location tracking for real-time shipment visibility.
- F. Technical and Usage Data: IP address, device identifiers, operating system details, browser type, application crashes, access times, and interaction data regarding your use of the Services.
- G. Communications and Support Data: Content of messages between Users and Couriers, and records of communication with our customer support team.
3. Purposes and Legal Bases for Processing
We process your Personal Data based on the following legal grounds:
| Purpose of Processing | Legal Basis (GDPR/EU Standard) |
|---|---|
| Service Provision & Contract Execution (e.g., facilitating shipments, account management) | Necessary for the performance of a contract with you. |
| Security, Fraud Prevention & Identity (e.g., identity verification, risk monitoring) | Our legitimate interests (protecting our business and users from fraud). |
| Payment Processing (e.g., processing fees and payouts) | Necessary for the performance of a contract with you. |
| Legal Compliance (e.g., responding to subpoenas, fulfilling regulatory requirements) | Necessary for compliance with a legal obligation. |
| Marketing Communications (e.g., promotional emails) | Your explicit consent (where required). |
| Service Improvement & Analytics (e.g., monitoring site usage, crash reports) | Our legitimate interests (improving product quality and user experience). |
4. Disclosure and Sharing of Personal Data
We share Personal Data only as necessary to provide the Services, operate our business, or comply with law:
- A. Between Users: To facilitate a delivery, we share necessary information between Senders and Couriers (e.g., names, phone numbers, pickup/drop-off addresses, and live location data during transit).
- B. Service Providers: We engage third-party vendors to perform functions on our behalf (e.g., cloud hosting, payment processing, identity verification, analytics, customer support). These parties are contractually obligated to protect your data.
- C. Compliance and Legal Authorities: When legally required or to protect our rights, property, or safety, we may disclose data to law enforcement, government agencies, or judicial bodies.
- D. Business Transfers: Data may be disclosed or transferred in connection with a merger, acquisition, restructuring, or sale of assets.
We do not sell your Personal Data for monetary compensation or share it for cross-context behavioral advertising.
5. Global Data Subject Rights
Regardless of your location, we aim to uphold the following rights concerning your Personal Data. Users in the EU/EEA, UK, and California have specific statutory rights detailed below:
- Right of Access: Request copies of your Personal Data.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your Personal Data, subject to our legal obligations and exceptions.
- Right to Restriction of Processing: Request limits on how we process your data.
- Right to Object: Object to processing based on our legitimate interests or for direct marketing purposes.
- Right to Data Portability: Request data be transferred to you or a third party in a structured, commonly used, and machine-readable format.
- Right to Withdraw Consent: Withdraw consent at any time, where processing is based on consent.
To exercise these rights, please contact us at [email protected]. We will respond within the legally required timeframe (e.g., 30 days under GDPR).
6. International Data Transfers
PublicShipping is headquartered in the United States. Your Personal Data will be transferred to and processed in the U.S., where data protection laws may differ from those in your jurisdiction.
For transfers of data originating from the European Economic Area (EEA), the UK, and Switzerland, we rely on established legal mechanisms, such as Standard Contractual Clauses (SCCs) adopted by the European Commission, to ensure adequate protection.
7. Data Security and Retention
A. Security
We employ robust technical and organizational measures—including encryption, pseudonymization, access controls, and multi-factor authentication—to protect your Personal Data against unauthorized access, use, disclosure, and accidental loss. However, no internet transmission or storage system is completely secure.
B. Retention
We retain Personal Data only for as long as necessary to fulfill the purposes outlined in this Policy, comply with our legal obligations (e.g., tax, accounting, and anti-fraud), resolve disputes, and enforce our agreements.
8. Cookies and Tracking Technologies
We use cookies, web beacons, and similar tracking technologies for authentication, session management, analytics, and personalization.
- You can set your browser to refuse all or some browser cookies, but doing so may limit the functionality of the Services.
- We do not currently respond to "Do Not Track" signals.
9. Children’s Privacy
Our Services are not intended for and are not directed to individuals under the age of 18. If we learn that we have collected Personal Data from a child under the age of 13 (or 16 in certain EU member states) without parental consent, we will take steps to delete that information promptly.
10. Specific Regional Disclosures (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
- Right to Know: Request categories and specific pieces of Personal Data collected about you.
- Right to Opt-Out of Sale/Sharing: We do not Sell or Share Personal Data for cross-context behavioral advertising.
- Data Collected: In the preceding 12 months, we have collected categories A, C, D, E, F, and G described in Section 2.
- Purpose: The purposes of collection align with Section 3.
11. Policy Updates and Contact Information
A. Updates
We may update this Policy from time to time to reflect changes in our practices or legal requirements. The Effective Date at the top will indicate the latest version. We will notify you of material changes where required by law.
B. Contact Us
For any questions or concerns regarding this Privacy Policy or our data practices, please contact our Privacy Office:
PublicShipping, Inc. Privacy Office
Email: [email protected]
Address: 1209 Orange Street, Wilmington, Delaware, 19801, USA (Registered Agent Address)