Legal record
Privacy Policy
Last updated September 7, 2026
Shipkitt SAS (“Shipkitt”, “we”, “us”), is the data controller for the personal data described here. For any privacy question, or to exercise the rights in section 5, use the contact page or email contact@shipkitt.com.
This page describes what the service actually stores — not what a service like this could theoretically store.
1. What we collect, and why
When you create an account
| Data | Why |
|---|---|
| Name, email address | Identify you, deliver purchases, send account email |
| Password hash, or the linked Google account id | Sign you in. We never store your password itself, and never receive your Google password |
| Email-verification status | Sign-in requires a verified address |
| Session records — including IP address and browser user-agent | Keep you signed in, and let you review and revoke your own active sessions under Settings → Security |
When you buy something
Which product you bought, the amount, the currency, the status, and the Stripe identifiers for the checkout and payment. Card details never reach our servers — Stripe handles them, and we only receive the result.
When you use the app
| Data | Why |
|---|---|
| Organisations you create or join, and your role in each | Run shared workspaces |
| Files you upload — avatar, organisation logo, organisation documents | Provide the feature. Stored in object storage, served through short-lived signed links |
| In-app notifications and your notification preferences | Tell you about things that happened; respect your choice about email |
| API keys and webhook endpoints you create | Operate the public API and deliver your webhooks |
| An audit log of sensitive actions — including the IP address they came from | Security and accountability: who changed a role, who was banned, who downloaded a release |
| Rate-limit counters keyed to an IP address | Prevent abuse of sign-in, signup, and other endpoints |
When you contact us or subscribe
The name, email, and message you submit through the contact form; your email address if you join the newsletter or a waitlist. Newsletter consent is withdrawable at any time via the unsubscribe link.
Analytics and cookies
We use strictly necessary cookies for sign-in and for remembering your cookie choice — these can't be switched off without breaking the service. Privacy-friendly analytics (page views and referrers, no cross-site tracking, no advertising profile) load only if you accept in the cookie banner, and only if analytics is configured for this deployment.
2. Legal bases
Where the GDPR applies, we rely on:
- Performance of a contract — running your account, delivering purchases, providing downloads and support.
- Legitimate interests — keeping the service secure and abuse-free (rate limiting, the audit log), and understanding aggregate usage. We've weighed these against your interests; you can object using the contact details above.
- Consent — analytics cookies and the newsletter. Withdrawable at any time, without affecting what happened before.
- Legal obligation — keeping transaction and tax records.
3. Who we share it with
We don't sell your personal data, and we don't share it for advertising. We use these processors to run the service:
| Processor | What it handles |
|---|---|
| Stripe | Payments, invoices, card data |
| Resend | Transactional email, and the newsletter if you subscribe |
| Cloudflare | Object storage for uploads; bot protection on signup and the contact form |
| Ionos | Application hosting and the database |
| Anthropic | Only if you use an AI-assisted feature — the text you submit to it is sent for processing, and is not used to train models |
Error tracking runs on our own infrastructure rather than a third-party service. We may also disclose data where the law requires it, or to establish or defend legal claims.
Some processors operate outside your country. Where data leaves the EEA or UK, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
4. How long we keep it
- Account data — until you delete your account.
- Sessions — until they expire or you revoke them.
- Purchase and invoice records — kept after account deletion where tax and accounting law requires it, typically several years.
- Audit log and rate-limit records — a limited period for security purposes, then removed.
- Contact messages, newsletter and waitlist entries — until handled, or until you unsubscribe or ask us to delete them.
5. Your rights
If the GDPR or UK GDPR applies to you, you can ask for access, correction, deletion, restriction, portability, and you can object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time.
Two of these you can exercise yourself, immediately:
- Delete your account — Settings → Security. This removes your personal data from our primary database, subject to the retention above.
- Withdraw analytics consent — clear it from the cookie banner.
For anything else, contact us; we'll respond within one month. You also have the right to complain to your local data protection authority.
6. Security
Passwords are hashed, never stored in readable form. Access to production data is limited to people who need it. Sensitive actions are recorded in the audit log, admin rights can't be granted through the app itself, and uploads are served through expiring signed links rather than public URLs. No system is perfectly secure, but we take this seriously — if you find a problem, please tell us.
7. Children
Shipkitt isn't directed at children, and we don't knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we'll delete it.
8. Changes
We may update this policy. The date at the top reflects the last change, and we'll notify account holders by email about material ones.