Privacy Policy

Account and contact data: names, work email addresses, phone numbers, roles, and authentication data (such as session records and TOTP enrollment status) for the users your organization provisions.

Operational data: the records your organization creates and processes in the platform, including catalog, vendors, purchase orders, inventory movements and balances, orders, shipments, returns, and audit history.

Integration credentials: API keys and tokens for the channels, carriers, and accounting systems your organization connects. These are stored encrypted and used only to operate the integration.

Usage and device data: log data, IP address, browser and device identifiers, and diagnostic events generated when you use the site or the platform.

To provide, secure, and operate the platform, including authentication, tenant isolation, rate-shopped shipping, channel sync, and reporting.

To maintain integrity and prevent abuse, including fraud prevention, audit logging, and enforcing approval workflows for high-risk actions.

To provide support, communicate about service changes, and respond to your requests.

To improve reliability and performance using aggregated and diagnostic data. We do not sell personal information, and we do not use your operational data to train external models.

Where applicable law requires a legal basis, we rely on the performance of our contract with your organization, our legitimate interests in operating and securing the service, your consent where you have given it, and compliance with legal obligations.

We retain operational data for as long as your organization maintains its tenant, and thereafter as needed to comply with legal, tax, and audit obligations. Because the inventory ledger and audit log are append-only by design, corrections are recorded as new entries rather than deletions. On termination we provide an export and then delete or de-identify tenant data within the period stated in the order form, subject to backups that expire on a rolling schedule.

We use a limited set of subprocessors to run the service, including cloud hosting and object storage, transactional email delivery, and the third-party systems your organization chooses to connect (such as Amazon, EasyPost, Shippo, ShipStation, and QuickBooks Online). Subprocessors are bound by contractual confidentiality and security obligations. A current list is available on request, and we provide notice of material changes so your organization can object.

Tenant data is isolated in the data layer, sensitive credentials are encrypted at rest with AES-256-GCM, access is governed by granular role-based permissions, and every mutating action is written to an append-only audit log. Users can enroll multi-factor authentication and administrators can require it. No system is perfectly secure, but security is a default in the design rather than an add-on.

Where data is processed in a country other than the one in which it was collected, we use appropriate safeguards, such as standard contractual clauses, to protect it in accordance with applicable law.

Depending on your location you may have rights to access, correct, export, or delete personal information. Because your organization controls the data in its tenant, please direct such requests to your organization, which we will support as its processor. For personal data we control directly, such as marketing contacts, you can contact us using the details below.

Questions about this policy or our data practices can be sent to privacy@fulfillpath.com. We will respond within a reasonable period and in line with applicable law.