Privacy Policy

1.Who we are and how to contact us

Shipenza is a brand of SonixByte LLC, a Wyoming limited liability company (United States), at 30 N Gould St #59834, Sheridan, WY 82801, USA, which operates the platform available at shipenza.com, on each Courier’s subdomain (for example yourcourier.shipenza.com) and on the custom domains Couriers connect. In this policy, "Shipenza", "we" and "us" mean SonixByte LLC.

For any privacy matter, write to us on WhatsApp at +1 (647) 493-6410 or by post to SonixByte LLC, 30 N Gould St #59834, Sheridan, WY 82801, USA, stating whether you are a site visitor, a Courier’s user or a Courier’s end customer.

2.Our roles

• SonixByte LLC (Shipenza), 30 N Gould St #59834, Sheridan, WY 82801, USA, is the controller of: the data of those who visit shipenza.com or contact us; each Courier’s account, billing and support data and that of the people representing it; and the Platform’s technical and security logs.
• Shipenza is the processor of: the data of the end customers, employees, drivers, agencies and suppliers that each Courier loads or generates on the Platform. We process it only on the Courier’s instructions and under the data processing terms in our Terms of Service. To exercise rights over that data, contact your Courier; we will help through them.

3.Data we process

Depending on how the Platform is used, we may process:

• Courier account and staff: name, email, phone, role, permissions, credentials (passwords are stored hashed, never in clear text), time-clock punch records and, when the Courier uses the payroll module, employee data and salary payments the Courier itself loads.
• The Courier’s end customers: name, email, phone, ID number when the Courier requests it, delivery address, city and branch, language, acceptance of the Courier’s terms and portal credentials. When the Courier allows it, a branch may open a mailbox with the name only, without an email or a phone; that customer receives no notices from the Platform.
• Operations: packages, shipments, consolidations, routes, weights, dimensions, declared contents, package photos and proof of delivery, invoices, balances, reported payments (method, amount, reference, account holder and receipt), messages between the Courier and its customers, and data the Courier imports from its previous system.
• Communications: emails and messages sent from the Platform on behalf of the Courier, with their delivery, bounce or complaint events.
• Technical data: IP address, browser and device, date and time, pages and actions performed, and the audit trail of changes that the service’s security requires.
• Visitors of shipenza.com: the data you send us when contacting us and basic technical data about the visit.

4.Where the data comes from

From you, when you sign up, log in, load information or write to us; from the Courier that registers you or imports its customer base; from the messaging and email services that report whether a message was delivered; and from the Platform itself, which generates technical records as you use it.

5.Why we use the data and on what basis

• Providing the service contracted by the Courier (performance of the contract): operating mailboxes, tracking, billing, reported payments, routes, messaging and the customer portal.
• Sending operational notifications on behalf of the Courier (shipment status, invoices, statements, portal access).
• Security, fraud prevention, auditing and legal compliance (legitimate interest and legal obligation): access logs, abuse detection, isolation between Couriers, responding to authority requests.
• Billing and supporting Couriers and informing them of service changes (performance of the contract and legitimate interest).
• Improving the Platform with aggregated, anonymized data that identifies no one (legitimate interest).
• Sending Shipenza’s commercial information to Couriers and to those who contact us, with the option to opt out at any time (consent or legitimate interest, as applicable).

We do not sell personal data, do not use it for third-party advertising and do not make automated decisions with legal effects on people.

6.Cookies and browser storage

The Platform uses only strictly necessary cookies and local storage: keeping you signed in, remembering your language and display preferences, and protecting the service. We do not use advertising cookies or third-party trackers. If we add usage analytics in the future, it will be aggregated, disclosed in this policy and, where the law requires it, subject to your consent. You can clear these cookies from your browser; you will then need to sign in again.

7.Who we share data with

We share data only with those needed to provide the service, under contracts that oblige them to protect it:

• Your Courier and the people it authorizes (its staff, branches and partner agencies), who see only the data of their own operation.
• Infrastructure sub-processors: hosting and databases in a data center in the United States, encrypted backups in a storage service in the United States, and file storage (photos, labels, receipts).
• Transactional email delivery providers and, when the Courier connects them, messaging providers (for example WhatsApp by Meta) and DNS providers for the Courier’s own domain.
• Payment providers the Courier connects on its own (for example Stripe or PayPal), which handle data under their own policies. Shipenza does not receive or store full card numbers.
• Authorities, courts or legal advisers when the law requires it or to defend our rights, and a possible buyer or successor of our business, which will be bound by this policy.

The current list of sub-processors by category is available to Couriers on request; relevant changes are announced in advance.

8.International transfers

Data is hosted and backed up in the United States and may be accessed by Shipenza’s team and its providers from other countries to provide the service. Couriers and their customers may be in countries with different data protection rules; by using the Platform, the Courier warrants that it has the legal basis for that transfer, and we apply the contractual and technical safeguards described in this policy.

9.How long we keep data

• Courier and customer data: while the Courier’s account is active. When the service ends, the Courier has thirty (30) days to export it; afterwards it is deleted from active systems and, within the following ninety (90) days, from backups.
• Billing records between Shipenza and the Courier, and audit and security logs: as long as the law or the defense of claims requires.
• Addresses that bounced or asked not to receive emails: kept on a suppression list to honor that choice.
• Visitor and commercial contact data: for the duration of the conversation and, if no contract follows, a reasonable period to handle later inquiries.

10.How we protect data

We apply encryption in transit (HTTPS), hashed passwords, role- and branch-based access control, isolation of each Courier’s information, an audit trail of changes, two-factor authentication for Shipenza’s team, encrypted backups off the main server and periodic restore drills. No system is infallible: if we detect a security breach affecting personal data, we will notify the responsible Courier without undue delay so it can inform its customers and the authorities where required.

11.Your rights

Depending on the law that applies to you, you may access your data, correct it, request its deletion or portability, object to or restrict certain processing, withdraw your consent and lodge a complaint with your country’s data protection authority.

• If you are a Courier’s end customer or employee, address your request to your Courier, which is the controller of your data; many corrections you can make yourself from your portal. We will give the Courier the technical support needed.
• If you are a Courier, a user representing one or a site visitor, write to us through the contact channel. We may ask for information to verify your identity and will respond within a reasonable time.

12.Minors

The Platform is directed at businesses and adults. We do not knowingly register data of people under 18; if a Courier detects a minor’s registration without a guardian’s authorization, it must delete it or ask us for help to do so.

13.Changes to this policy

We may update this policy to reflect legal, technical or service changes. We will publish the current version with its date on this page and, if the change is material, notify active Couriers through the Platform or by email with reasonable notice. Couriers are responsible for keeping the notices they give their own customers up to date.

Back to home ←