Your information.
Your privacy.

1. Who we are

ShipBay is operated by Shipbay. Shipping, Simplified. (“ShipBay”, “we”, “us”). This policy explains how we handle personal information through shipbay.ca, its installed web app, our associated test workspaces and support communications.

For privacy questions or requests, contact the ShipBay privacy contact at mtariq0629@gmail.com. Please use the subject “Privacy request”.

2. Information we handle

• Google sign-in information. If you choose Google sign-in, Google and Firebase provide an account identifier, email address and verification status, and basic profile information such as your name and profile picture when available. We use your identifier to associate saved requests with your account and control access. Sign-in tokens establish your session. We do not receive your Google password or request access to your Gmail messages, Drive files or contacts.
• Test requests and workspace records. Information you enter can include ports, dates, cargo type, equipment, quantities, dimensions, weight, handling requirements, selected sample offers, notes and responses. Submitted requests and their status history may be stored with your account identifier. Do not enter confidential commercial documents or other people’s personal information into test fields.
• Support messages. We receive your email address, message and any information you choose to send us. Please do not email passwords, sign-in codes, full card details or identity documents.
• Technical and security information. Our hosting and authentication services can record IP addresses, browser or device information, request times, URLs, errors, sign-in activity and security or audit events to operate and protect the service.
• Sandbox payment records. In our separate payment test workspace, Stripe handles test checkout information. ShipBay receives transaction identifiers, amounts, currencies, payment or refund status and related event or error information. Test records can be linked to the signed-in account and test order. No real card details should be entered; ShipBay does not store full payment-card numbers.

3. How we use information

We use information to provide sign-in, display and save your test requests, respond to support questions, verify test results, investigate errors, prevent unauthorized access and maintain reliable service. Authorized ShipBay operators may review submitted requests and support or security records for these purposes.

We do not sell personal information. We do not use Google account information for targeted advertising. Google sign-in is optional for browsing; features that save requests to an account require sign-in. We will explain new uses and seek consent where required before using information for a materially different purpose.

4. Browser storage and the installed app

The installed web app uses the same service as the website. Your browser may store authentication session information, sample saved quotes and shipment records, an optional route-and-cargo draft, and your preference to dismiss an installation invitation.

The optional draft is treated as expired after seven days and removed when the app next reads it. An installation dismissal normally suppresses the invitation for seven days. Other saved sample records can remain until removed or until you clear the site’s browser data. Authentication providers may also use their own cookies or storage during sign-in.

You can use browser settings to clear or block site storage; doing so can remove saved device data or affect sign-in. Signing out or uninstalling the app does not delete server records, and uninstalling may leave browser site data behind.

5. Service providers and disclosures

We use Google Firebase and Google Cloud for authentication, hosting, databases and operational services, and Stripe for the separate payment sandbox. Information needed for those functions is processed by the relevant provider. Support correspondence is handled through our email provider. Their own policies also govern their services: Google privacy policy and Stripe privacy policy.

We may disclose information when required by applicable law or when necessary to investigate misuse or protect the service and people using it. The current test workspace does not arrange real shipments with freight suppliers. We will update our disclosures before introducing commercial fulfilment or additional uses of your information.

6. Where information is processed

Information may be stored or processed outside Canada, including in the United States, where our cloud infrastructure and service providers operate. It may therefore be subject to the laws and lawful access requirements of those jurisdictions. We do not promise that information stays exclusively in Canada.

7. Retention and security

We keep information for the purposes described here, including maintaining your account and requests, resolving support issues, testing, security and applicable legal obligations. Server records do not currently have a single automatic deletion period. We assess deletion requests and whether continued retention is needed. Where information is no longer required, it should be deleted or de-identified; backup copies may remain until the relevant backup cycle expires.

We use safeguards including encrypted connections, authentication and access restrictions. No internet service can guarantee absolute security. Do not share your account credentials or use the test workspace to store sensitive documents.

8. Your choices and requests

You may ask us about the information we hold about you, request access or correction, request deletion of your account or associated records, withdraw consent where applicable, or raise a privacy concern. Email our privacy contact above. We may need to verify your identity in a proportionate way before acting on a request.

We will explain any applicable legal or security limits on a request. Withdrawing consent or deleting account data may prevent use of account-dependent features. You can also manage ShipBay’s access through your Google Account settings; revoking Google access does not itself delete information already held by ShipBay.

If a concern is not resolved with us, you can contact the Office of the Privacy Commissioner of Canada or another applicable privacy authority.

9. Children

ShipBay is intended for adults arranging business freight and is not directed at children. If you believe a child has provided personal information, contact us so we can assess and address it.

10. Changes to this policy

We will update this page and its effective date when our practices change. For material changes, we will provide appropriate notice and obtain consent where required. Live payments, real freight fulfilment or new data uses will require updated disclosures before they are introduced.