Packiyo Privacy Policy

Packiyo Holdings Inc (“Packiyo”, “we”, “us”, or “our”) is committed to protecting the privacy and security of the information we collect in connection with our warehouse management and shipping software platform (the “Service”). This Privacy Policy explains what information we collect, how we use and protect it, with whom we share it, and the rights available to you regarding your personal data. 

This Privacy Policy applies to: (a) visitors to our website at www.packiyo.com; (b) clients who subscribe to and use the Service; (c) authorized Users on clients’ accounts; and (d) individuals whose personal data is submitted to the Service by our clients. It does not apply to third party websites or services that may link to or integrate with the Service.  

By accessing our website or using the Service, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you are using the Service on behalf of an organization, you represent that you have the authority to bind that organization to this Privacy Policy. 

1. Scope and Who This Policy Covers

This Privacy Policy explains how Packiyo collects, uses, shares, and protects information when you:

  • Visit our website at www.packiyo.com;
  • Subscribe to or use the Packiyo platform as a 3PL operator or Brand; or
  • Access the platform as an authorized user under a Client’s account

This policy covers our website and SaaS platform. It does not govern data practices of third-party carriers, integrations, or applications you choose to connect to Packiyo. If you are a 3PL Client, your end-customers’ data is processed on your behalf subject to your own privacy obligations and our Terms of Service

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly when you:

  • Enter into an agreement (name, company name, email address, phone number, billing address);
  • Subscribe to the platform (payment information processed via Stripe or similar provider)
  • Contact us for support or sales inquiries, or 
  • Complete forms on our website

2.2 Platform and Transaction Data

When you use the Packiyo platform, we collect data generated through your use of the service, including:

  • Shipment records, order details, and inventory data you enter or import;
  • User account activity and access logs;
  • Carrier selections, tracking events, and fulfillment records; and
  • Configuration settings and integration data.

This data is referred to as “Client Data” in our Terms of Service and belongs to you. 

2.3 Automatically Collected Data

When you visit our website or access the platform, we automatically collect:

  • IP address, browser type, and device identifiers;
  • Pages visited, referring URLs, and session duration;
  • Error logs and performance diagnostics; and 

2.4 Data We Do Not Collect

Packiyo’s platform is not designed to collect sensitive personal information as defined under applicable law, including government-issued identification numbers, financial account credentials, precise geolocation, racial or ethnic origin, health, or medical data, or biometric information. If you believe sensitive information has been inadvertently submitted to the platform, please contact us at support@packiyo.com

3. How We Use Your Information

We use the information we collect for the following purposes:

PurposeDetails
Service DeliveryProvisioning your account, processing shipments, managing billing, and providing technical support
Platform ImprovementAnalyzing usage patterns, diagnosing errors, and developing new features
CommunicationsSending transactional emails (invoices, support responses, service alerts) and, with your consent, product updates or marketing communications
Security & ComplianceDetecting fraud, unauthorized access, and policy violations; complying with legal obligations
Aggregated Analytics Generating analytics insights for benchmarking and product development. 

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

4.1 Service Providers

We engage trusted third-party vendors who process data on our behalf to support platform operations. Current categories include:

  • Payment processing
  • Cloud hosting and infrastructure
  • Client support and CRM tools 
  • Email and communications platforms
  • Analytics 

We require our service providers to process your data only on our behalf, for specified business purposes, and in a manner consistent with this Privacy Policy. Where required by applicable law, we enter into written agreements with service providers that restrict their use and disclosure of personal information. 

4.2 Carrier and Integration Partners

When you use the platform to generate shipping labels or connect carrier accounts, relevant shipment data is transmitted to your selected carriers and integrated services. Those parties process data under their own privacy policies.

4.3 Legal Requirements

We may disclose personal information when required by applicable law, regulation, court order, or government authority, or when necessary to protect Packiyo’s rights, prevent fraud, or respond to a confirmed security incident.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will provide notice by email or in-platform notification  if your information becomes subject to a materially different privacy policy, and you may have the right to close your account prior to the effective date of change. 

4.5 Non-Solicitation of 3PL Client Data

Consistent with our Terms of Service, Packiyo will not use Client data – including pricing, volume information, or contact details of your end customers – to directly solicit the business of your clients. This restriction does not limit Packiyo’s general marketing activities or engagement with parties who contact Packiyo independently. 

5. Data Roles: Controllers and Processors 

Packiyo operates in different data roles depending on context:

  • Website visitors and account registration: Packiyo is the data controller for information collected through our website and during account setup.
  • Platform Client Data: When Packiyo processes data that Clients upload or generate on the platform (including data about their own customers), Packiyo acts as the data processor and the Client acts as the data controller. Clients are responsible for the lawful collection and processing of their end customers’ personal data.

If you are a 3PL or Brand client and your end customers have questions on how their data is handled, those requests should be directed to you as the data controller of that information.

6. Data Security

Packiyo maintains commercially reasonable administrative and technical safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction. These include:

  • Transport-layer encryption (TLS) for data transmitted between users and the platform; and encryption at rest for stored data;
  • Authentication requirements and role-based access controls within the platform;
  • Audit logging of changes in key data records to support investigation and accountability;
  • Restricted production system access limited to authorized engineering personnel; and
  • An incident response process for evaluating and responding to suspected security events. 

In the event of a confirmed security breach affecting your data, Packiyo will notify you without undue delay and in any event within 72 hours of becoming aware of the breach, as described in our Terms of Service.

No method of data transmission or storage is completely secure. You are responsible for maintaining the security of your account credentials and promptly notifying us of any suspected unauthorized access at support@packiyo.com.

7. Cookie and Tracking Technologies 

Our website uses cookies and similar technologies to support site functionality, analyze traffic, and deliver relevant marketing content.  Categories of cookies we use: 

CategoryPurpose
Strictly NecessaryRequired for core website and platform functionality. Cannot be disabled 
AnalyticsHelp us understand how visitors use our site (e.g. Google Analytics). Session data is anonymized where possible 
MarketingUsed to deliver relevant content and measure campaign performance. Requires your consent.
PersonalizationRemember your preferences and settings to improve your experience. 

You can manage cookie preferences through the cookie consent banner on our website or by adjusting your browser settings. Note that disabling certain cookies may affect website functionality. We do not currently respond to browser “Do Not Track” signals. 

8. Data Retention

We retain personal information for as long as necessary to:

  • Maintain your account and deliver your service;
  • Comply with legal, tax, and regulatory obligations;
  • Resolve disputes and enforce our agreements; and 
  • Support legitimate business operations

Upon termination of a client account, Packiyo will retain Client Data for at least thirty (30) days to allow Client to request and complete an export. Thereafter, Packiyo may delete or de-identify Client Data, except where Packiyo is required to retain certain records by law (including for financial, tax, audit, or legal hold purposes) or where retention is reasonably necessary to enforce Packiyo’s rights or resolve disputes. Aggregated or de-identified data derived from platform usage may be retained indefinitely as it cannot identify Client or any individual User. 

9. Your Privacy Rights

9.1 California Resident (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to Know and Data Portability: Request the categories and specific pieces of  personal information, we have collected about you (for data collected on or after January 1, 2022, including sources, business purposes, and third parties to whom it has been disclosed. You may also request a portable copy of your personal information in a readily usable format.
  • Right to Delete: Request deletion of your personal information, subject to applicable legal expectations. 
  • Right to Opt-Out of Sale or Sharing: We do not sell personal information. We do not share personal information for cross-context behavioral advertising. You also have the right to limit the use and disclosure of sensitive personal information to purposes permitted under CPRA.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your California rights, contact us at support@packiyo.com with the subject line “California Privacy Rights Request.” We will verify your identity before processing your request. You may also designate an authorized agent to submit requests on your behalf.

9.2 Other U.S. State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Montana (MCDPA), Oregon (OCPA), Delaware (DPDPA), Iowa (ICDPA), and other states may have enacted comprehensive consumer privacy laws may have similar rights to access, correct, delete, or opt out of certain processing of their personal data. To submit a request, contact support@packiyo.com.

9.3 All Users

Regardless of location, you may:

  • Update or correct your account information by logging in to the platform
  • Opt out of marketing emails using the unsubscribe link in marketing emails or by contacting support@packiyo.com; and
  • Request details about the personal information we hold about you. 

10. Children’s Policy

The Packiyo platform is a business-to-business service not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately at support@packiyo.com.

11. International Data Transfers

We take appropriate steps to ensure that international transfers of personal information are subject to adequate safeguards in accordance with applicable law. Where required, such safeguards may include Standard Contractual Clauses approved by the relevant regulatory authority, participation in applicable data transfer frameworks (such as the EU-U.S. Data Privacy Framework), or other legally recognized transfer mechanisms. Please contact us at support@packiyo.com for further information about the safeguards applicable to your data transfers.

12. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this page. If we make material changes, we will notify subscribers by email or through an in-platform notification at least thirty (30) days before the changes take effect. Continued use of the platform or websites after the effective date constitutes acceptance of the updated policy. 

13. Contact Us

For privacy related questions, requests, or complaints, please contact us: 

CompanyPackiyo Holdings Inc
Privacy Emailsupport@packiyo.com
Websitewww.packiyo.com 
Subject LineInclude “Privacy Request” for routing

We will respond to verified privacy requests within 45 days. If additional time is required, we will notify you and may extend our response period by an additional 45 days where permitted by applicable law.

Packiyo Holdings Inc | support@packiyo.com | www.packiyo.com