Privacy Policy

1. Scope

This Privacy Policy explains how ScaleShip collects, uses, stores, shares, and protects personal data when you use app.scaleship.ai, the customer panel, related operational tools, support channels, and integrations. For users in Turkey, this notice also serves as a KVKK clarification text; for users in the EEA/UK, it is intended to provide GDPR/UK GDPR transparency information.

2. Controller

Controller: COURSELF LIMITED

Address: Room 5003, 5/F, Lee Lee Centre, 45 Hoi Yuen Road, Kwun Tong, Hong Kong

Contact: info@scaleship.ai

3. Personal Data We Process

• Account and identity data, such as name, surname, email address, profile image, role, account status, and authentication records.
• Contact and business data, such as WhatsApp/phone number, company or store name, store URL, sales channel, order volume, support messages, and onboarding answers.
• Commerce and logistics data, such as products, SKUs, order details, buyer/shipping information supplied by you, carrier data, shipment status, pricing, payment submissions, invoices, and operational notes.
• Files and content you upload or submit, including product images, receipts, attachments, support messages, and AI assistant prompts or outputs when those features are used.
• Technical, security, and preference data, such as IP address, device/browser data, request logs, locale, timezone, page-size preferences, session cookies, API keys, and audit logs.

4. Purposes and Legal Bases

• To create and secure accounts, authenticate users, manage sessions, provide role-based access, and prevent abuse.
• To provide sourcing, order management, logistics, quotation, payment, support, file upload, API, and related operational services.
• To communicate with you about account activity, support requests, payments, security notices, service updates, and applications.
• To operate integrations with payment, CRM, email, storage, AI, marketplace, and logistics providers where needed for the service.
• To maintain logs, measure service reliability, debug issues, improve product performance, and comply with legal, tax, accounting, and regulatory obligations.
• To send marketing messages only where permitted by law or where you have provided the required consent.

5. Legal Basis Details

Depending on the context, we process personal data to perform a contract or take pre-contractual steps, comply with legal obligations, protect our legitimate interests in operating and securing the service, establish or defend legal claims, and, where required, based on consent. Consent-based processing can be withdrawn at any time, but withdrawal does not affect processing that occurred before withdrawal.

6. Cookies and Similar Technologies

We do not add a cookie consent pop-up because the service is intended to use only strictly necessary, security, authentication, preference, and privacy-friendly measurement technologies unless a separate consent mechanism is implemented. Examples include session cookies, locale/timezone preferences, page-size preferences, security checks, and cookieless or low-impact analytics.

Advertising pixels, behavioral tracking, retargeting, or other non-essential cookies should not be loaded unless a legally valid consent flow is in place.

7. Sharing and Processors

• Hosting, infrastructure, analytics, and security providers, including Vercel and anti-abuse tooling.
• Authentication and OAuth providers, including Better Auth, Google, and Microsoft where you choose those sign-in methods.
• Database, email, storage, and file processing providers, including Neon/Postgres infrastructure, Resend, and UploadThing.
• CRM, support, payment, and accounting providers, including Bitrix and Payoneer where relevant.
• Marketplace, logistics, carrier, and fulfillment integrations, such as Mabang, YunExpress, Yanwen, 4PX, and similar service providers used to process orders and shipments.
• AI or automation providers, including OpenAI, when you use AI-assisted features or when operational automation requires it.
• Public authorities, courts, advisors, auditors, or counterparties where disclosure is required by law or necessary to protect rights.

8. International Transfers

Because the controller is based in Hong Kong and the service uses international infrastructure and logistics providers, personal data may be transferred to countries outside your country of residence, including Turkey, Hong Kong, the United States, the EEA, the United Kingdom, China, and other countries where providers or carriers operate. Where required, we rely on consent, contractual safeguards, adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

9. Retention

We keep personal data only for as long as needed for the purposes described in this Policy, including account operation, order and logistics records, tax/accounting requirements, legal limitation periods, security logs, dispute handling, and backups. Retention periods may vary by data type and legal obligation. Data that is no longer required is deleted, anonymized, or isolated according to operational requirements.

10. Your Rights

Depending on your location and applicable law, you may have the right to request access, correction, deletion, restriction, portability, objection, withdrawal of consent, information about transfers, and information about whether your personal data is processed. Turkish users may exercise KVKK Article 11 rights. EEA/UK users may also lodge a complaint with their local data protection authority.

You can submit requests at info@scaleship.ai. We may need to verify your identity before responding.

11. Security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. No internet-based service can guarantee absolute security, but we work to keep access limited, logged, and appropriate for operational needs.

12. Children

The service is not directed to children. Users should not submit personal data of children unless it is strictly necessary for a lawful shipment or support workflow and they have authority to provide it.

13. Changes and Contact

We may update this Policy from time to time. The current version is published on this page. Questions can be sent to info@scaleship.ai.