Privacy Policy

The anonymous BoslogShip MCP tool receives only the origin and destination US ZIP codes, package quantities, weights and dimensions, an optional existing shipping price and carrier, and a language preference. It does not require a BoslogShip account and does not purchase labels, process payments or request full street addresses, names or credentials. When you use the tool through ChatGPT, OpenAI receives the returned estimates as part of your conversation.

We use the submitted ZIP codes and package details to obtain public residential estimates through our existing carrier rate providers and ZIP lookup service. Rate results and ZIP codes are cached for up to 10 minutes. Abuse-prevention counters expire within 24 hours and one second; an optional conversation identifier is hashed with a daily prefix and used only for rate limits. The MCP application logs operation status and duration without recording the tool arguments or conversation identifier. Operational logs rotate at configured size limits. Provider diagnostics remain subject to the shipping-service retention practices described below.

You control what you send to the tool and can stop using or uninstall it at any time. Do not send street addresses, contact information, payment details or passwords to the anonymous rate tool. For privacy questions or deletion requests, use the contact below.

BoslogShip collects account information such as company name, contact name, email address, phone number, account role, and login activity.

For self-service registration and onboarding, we may collect registration source, agreement acceptance records, IP address, user agent, onboarding progress, and account configuration records.

When a merchant connects Shopify, BoslogShip receives store, product, order, customer shipping, fulfillment, and tracking information that is necessary to sync orders, compare rates, create shipping labels, and update fulfillment status.

Shipping workflows may include recipient name, recipient company, address, phone number, email address, package details, carrier service, tracking number, label status, and payment ledger records for purchased labels.

Stripe processes online card payments. BoslogShip may store Stripe customer IDs, payment method references, charge status, webhook events, and wallet ledger records, but does not store raw card numbers or CVC codes.

We use merchant and order data to provide the BoslogShip service: account setup, onboarding, Shopify order sync, product mapping, rate comparison, label purchase, label storage, tracking updates, cancellation review, wallet ledger records, operational support, and fraud or abuse prevention.

We use payment and agreement records to process wallet top-ups, saved payment method authorization, automatic top-up attempts, refunds, adjustments, dispute review, and accounting controls.

We do not sell merchant or customer personal information. We do not use Shopify customer data for advertising or unrelated marketing.

Demo labels used for Shopify App Review are marked as demo labels and are not valid for shipping.

BoslogShip shares shipping data with carriers, carrier account providers, hosting providers, storage providers, email providers, and other service providers only as needed to operate the shipping platform.

Carrier and label providers receive the shipping information required to quote rates, create labels, retrieve labels, void labels, and reconcile provider status.

For customer registrations that require address validation, we send the Ship From Address to FedEx to validate it. The address-validation request does not include your contact name, email, phone, password or payment information. Address validation does not verify ownership or guarantee pickup or delivery availability.

Where human verification is enabled on customer registration and business inquiry forms, we use Cloudflare Turnstile to reduce automated abuse. Your browser connects to Cloudflare for verification, and our server validates the resulting token. Turnstile verification is not proof of identity or address ownership.

Stripe receives payment information needed to process top-ups, save payment methods when authorized, handle off-session payment attempts, and report payment status back to BoslogShip.

BoslogShip uses HTTPS, access controls, tenant isolation, audit records, and encrypted storage for sensitive credentials. Shipping labels are stored in object storage and are served through authenticated download routes.

We aim to collect only information needed for account, shipping, payment, support, compliance, fraud prevention, and dispute workflows, and to protect retained information with reasonable administrative, technical, and organizational safeguards.

We retain account, shipment, label, wallet, audit, and fulfillment records for operational, financial, compliance, dispute resolution, and support purposes unless deletion is required by applicable law or platform policy.

BoslogShip supports Shopify privacy compliance webhooks for customer data requests, customer redaction, and shop redaction.

When a merchant uninstalls the Shopify app or requests deletion, BoslogShip will process the request according to Shopify requirements and applicable retention obligations.

For privacy questions or data requests, contact BoslogShip at info@boslogwh.com.