Privacy Policy

Last updated: July 23, 2026

This Privacy Policy explains how StampScan ("we", "us", or "our") collects, uses, and shares information when you use the Service.

Roles: for information about your own account, StampScan is the controller. For information about your customers (mail recipients) that you provide, you are the controller and StampScan acts as a processor, handling that information on your instructions to provide the Service.

1. Information we collect

Account information: your name, email address, a hashed password, business or return name and address, support email, logo, and brand settings.
Billing information: your subscription status and credit balance. Card payments are handled by Stripe. We receive limited billing metadata but not your full card number.
Store connections: when you connect Shopify, Etsy, or eBay, we store access tokens so we can import your orders and mark them shipped. You can disconnect at any time.
Order and recipient information: buyer names, shipping addresses, order numbers, item descriptions, and, where a marketplace provides it, buyer email addresses. This may be imported from your connected stores, uploaded by CSV, or entered by you.
Tracking information: the Intelligent Mail barcode data we generate and the USPS scan events we retrieve for your mailpieces.
Usage and device information: log data, IP address, and a session cookie used to keep you signed in and to operate the Service.

2. How we use information

We use information to create labels and barcodes, retrieve and display tracking, send tracking notifications to your customers on your behalf, provide your dashboard, analytics, and shipment map, process subscriptions and credits, secure and improve the Service, and comply with law.

3. Emails to your customers

When you print a label or a mailpiece changes status, we may send a tracking email to your customer from service@stampscan.net, shown under your store name with your support email as the reply-to. These are transactional messages about the customer's order.

4. How we share information

We share information with service providers (sub-processors) that help us run the Service, only as needed:

Vercel (hosting), Supabase (database and file storage), Stripe (payments), Resend (sending email), USPS Informed Visibility (mail scan data), and Shopify, Etsy, and eBay (order import and the fulfillment updates you initiate).
Geocoding providers (OpenStreetMap Nominatim and Zippopotam) receive postal codes or city and country text to place points on your shipment map. We do not send them customer names.
Meta (Facebook) receives advertising measurement data from our marketing and account pages, as described in Cookies and advertising below. It never receives your customers' names, addresses, orders, or tracking data.

We do not sell your personal information or your customers' personal information. We may disclose information if required by law or to protect rights and safety.

5. Cookies and advertising

We use a session cookie to keep you signed in. It is required for the Service to function.

We also use the Meta (Facebook) pixel on our marketing and account pages to measure our advertising. It sets cookies and reports to Meta when you view a page, create an account, or buy credits, so we can see which ads bring sellers to StampScan. Meta may use this to show you ads. You can opt out through your Meta ad settings or by blocking third-party cookies in your browser, and the Service works normally either way.

The pixel does not run on public tracking pages. When one of your customers opens a tracking link, no advertising cookie is set and nothing about that visit or that shipment is sent to Meta.

6. Data retention

We keep account and order or tracking data while your account is active and as needed to provide the Service, resolve disputes, and meet legal obligations. You can delete labels and disconnect stores in the app. Contact us to close your account and request deletion.

7. Security

We use industry-standard measures, including encrypted transport (HTTPS), hashed passwords, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Requests about your customers' data should generally be directed to the seller (the controller), and we will assist sellers in responding. To exercise your rights, contact service@stampscan.net.

9. International users

The Service is operated in the United States. If you use it from elsewhere, your information is processed in the United States.

10. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect their information.

11. Changes

We may update this Policy and will post the new version with an updated date.

12. Contact

Privacy questions: service@stampscan.net.