Privacy Policy

1. Information We Collect

Ship Something™ collects the following categories of data:

• —Account info — email address, display name, and authentication credentials
• —Project data — PRDs, brand guidelines, content drafts, and workspace configurations you create
• —Voice interaction data — audio streamed to ElevenLabs for real-time speech processing (not stored permanently)
• —Payment info — billing details processed securely by Stripe (we do not store card numbers)
• —Usage analytics — feature usage patterns, session data, and performance metrics

2. How We Use Your Data

• —Provide, maintain, and improve the Ship Something™ platform
• —Train and improve AI agent quality using anonymized interaction patterns
• —Process payments and manage your subscription
• —Send service notifications including morning standup summaries and project updates
• —Detect and prevent abuse, fraud, and security incidents

3. Third-Party Services

We share data with the following service providers, each bound by their own privacy policies:

• —Supabase — database and authentication
• —Stripe — payment processing
• —ElevenLabs — voice synthesis and speech recognition
• —Vercel — application hosting and edge delivery

We do not sell your personal information to any third party.

4. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level security on all database tables, and regular security audits. No system is 100% secure, but we take reasonable precautions to protect your data.

5. Your Rights

You may at any time:

• —Access all data associated with your account
• —Export your projects, PRDs, and brand assets
• —Request deletion of your account and all associated data
• —Opt out of non-essential communications

To exercise any of these rights, contact privacy@shipsomething.com.

6. Cookies

Ship Something™ uses essential cookies only — for authentication and session management. We do not use third-party tracking cookies, advertising pixels, or behavioral profiling. No cookie banner is required because we do not track you.

7. Data Retention

While your account is active, we retain your data to provide the service. If you delete your account, we begin a 30-day grace period during which you can reverse the deletion. After 30 days, all account data is permanently purged from our systems and backups.

8. Changes to This Policy

We may update this policy as our practices evolve. Material changes will be communicated via email or in-app notification at least 30 days before taking effect.