Sourship Privacy Policy
Last updated:
1. Who we are
Sourship is operated by sourship LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States. We are the controller of the personal data described in this policy, except where section 3 says otherwise.
Contact: support@sourship.com
2. Data we collect
Account data. Your name, email address, phone or WhatsApp number, country, business name if you have one, and your password in encrypted form.
Application data. The answers you give in the application questionnaire about your business and experience.
Payment data. Subscription payments are made by card through Stripe. We do not receive or store your full card number. Wallet top-ups are made by transfer to our accounts at Mercury, Wise or Payoneer, or in USDT. We receive the sender details, amounts and references from those transfers.
Order and fulfilment data. Products you source, inventory, orders, shipping addresses, tracking numbers and related records.
Your customers’ data. To ship an order, we receive the recipient’s name, delivery address, and, where the carrier requires it, phone number. You may also choose to give us the recipient’s email address, which is optional and used only for delivery-related contact.
Connected store data. If you connect a sales channel such as Etsy, we receive order and product information from it through its API, using the permissions you grant. Section 5A explains this in full.
Top-up documents. When you top up your wallet, you upload a copy of the transfer receipt, which we keep as proof of payment.
Support messages. Messages you send us by email or WhatsApp, and our replies.
Messages sent through our website. When you use the contact form on our website, we receive your name, your email address, your store’s address if you give it, the topic you choose and your message. We use them only to answer you. The message is delivered to our support mailbox by our email provider, which handles it on our behalf. Our server keeps a technical record of each submission for up to 14 days to protect the form from abuse; that record holds a partly hidden email address and a scrambled form of your IP address, never your name or your message.
Technical data. IP address, browser and device information, and logs of actions taken in your account, collected automatically when you use the Service.
3. Roles for your customers’ data
For data about your own customers, you decide what you collect and why, so you are the controller and we act on your instructions to fulfil your orders. If you need a data processing agreement for your own compliance, contact us and we will provide one.
4. Why we use data, and our legal grounds
| Purpose | Ground |
|---|---|
| Creating and running your account, sourcing, storing and shipping orders | Performance of our contract with you |
| Taking payment and managing wallet balances | Performance of our contract |
| Reviewing applications, preventing fraud and abuse, keeping the Service secure | Our legitimate interests |
| Checking sanctions and restricted party lists, keeping tax and accounting records, responding to lawful requests | Legal obligation |
| Sending service messages such as renewal reminders and order updates | Performance of our contract |
| Sending marketing emails, if we start doing so. We do not send them at present | Consent, which you can withdraw at any time |
5. Who we share data with
We do not sell personal data. We share it with:
- Amazon Web Services, which hosts the Service and stores our data in its US East (N. Virginia) region. Backups are held in the same region.
- Payment providers: Stripe for card payments, and Mercury, Wise and Payoneer for transfers.
- Our fulfilment personnel in China, and the company that employs them, who see order and recipient details in order to pick, pack and label shipments.
- Carriers and customs authorities, which receive recipient details and product declarations so shipments can be delivered and cleared.
- Connected sales channels such as Etsy, which receive tracking information for your orders.
- A product data provider, which supplies 1688 and Taobao listing data and processes the searches you run in the Service.
- An image editing provider, which processes product images you choose to edit in the Service.
- Google, whose location and address services we use for country and address selection.
- WhatsApp, when you contact us there.
- Our email provider, which delivers messages sent through our website’s contact form to our support mailbox.
- Professional advisers and authorities, where the law requires it or to protect our legal rights.
5A. Connected stores and marketplaces
If you connect an online store — Shopify, WooCommerce, Etsy or eBay — we receive data from that store through the marketplace’s own interface, with your authorisation:
- your orders: order numbers, items, quantities, prices, and the buyer’s name, delivery address and, where the marketplace provides it, a contact email or phone number;
- your listings: titles, variants, SKUs, images and stock levels;
- your store’s name, address and currency;
- an encrypted access key issued by the marketplace.
We act as your service provider for this data. We use it only to fulfil your orders, keep your stock in step, update your own listings when you ask, and send tracking back to your store. We never use it to research other shops, never sell or share it, never pass it to advertising platforms, never use it to train artificial-intelligence models, and never contact your buyers.
Disconnecting a store revokes our access and erases that store’s buyer details. Raw order messages from a marketplace are erased within 90 days, and you can erase a store’s data yourself at any time from the Connected Stores page.
Full details are in our Store Data Policy.
6. Where data is processed
Our systems are hosted in the United States (AWS US East, N. Virginia), and backups are held there too. Our team accesses data from Morocco, and our fulfilment personnel access delivery data in China. If you are in the EU or UK, this means your data is transferred outside your region. Where required, these transfers rely on the European Commission’s standard contractual clauses or another lawful transfer mechanism.
7. How long we keep data
- Recipient data for orders: 12 months after delivery, then deleted.
- Account, order and payment records: while your account is open, and for 7 years afterwards, to meet US tax and accounting requirements.
- Application questionnaires: 12 months after a decision, unless an account is opened.
- Support messages: 24 months.
- Technical logs: 12 months.
- Contact form records: the technical record of a submission is kept for up to 14 days; the message stays in our support mailbox for as long as we need it to handle your request.
Order data received from a connected store follows the shorter periods set out in our Store Data Policy: raw marketplace messages are erased within 90 days, and a store’s buyer details are erased when the store is disconnected.
We may keep data longer where a legal claim, investigation or legal obligation requires it.
8. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, object to or restrict how we use it, receive a copy in a portable format, and withdraw consent. If you are in the EU or UK, you may complain to your national data protection authority.
To exercise any of these rights, email support@sourship.com. We respond within 30 days. We may ask you to confirm your identity first.
Closing your account and deleting data. Account deletion is handled by our team. Email support@sourship.com and we will delete your account and data within 30 days, keeping only what section 7 requires us to keep. We cannot delete data while you have unsold inventory, unshipped orders or an unresolved balance with us.
You can erase the data imported from a connected store yourself, at any time, from the Connected Stores page in your account.
If you are a buyer, and you bought from a store that uses Sourship, contact that store first. They decide how your data is used. If you contact us directly, we will pass your request to them.
9. Security
Data is transmitted over encrypted connections, passwords are stored hashed, and access to seller and buyer data is limited to accounts that need it for their work. No system is completely secure, but we take reasonable steps to protect your data and will tell you and the relevant authorities about a serious breach where the law requires it.
10. Cookies
We use cookies that are necessary for the Service to work, such as keeping you logged in. See our Cookie Notice for details. We do not currently use advertising or analytics cookies. If that changes, we will ask for your consent where required.
11. Children
Sourship is not intended for anyone under 18, and we do not knowingly collect data from children.
12. Changes
We may update this policy. We will post the new version with a new “last updated” date, and email you if the change is significant.
13. Contact
sourship LLC
30 N Gould St Ste R
Sheridan, WY 82801
United States
Email: support@sourship.com
WhatsApp: +1 (800) 357-0402