Privacy Policy

This policy explains what data CourierPing keeps, why, and how it is protected.

1. What we keep

• Your account: your name, email, business name and a locked (hashed) form of your password. Nobody, including us, can read your password.
• Your business data from the accounts you connect: orders, parcels and their status, courier payments, ad spend, product costs and expenses you enter.
• Your customers' details that come with those orders (such as name, phone, city and address) and WhatsApp messages exchanged with them, when you use the WhatsApp features.
• Keys and tokens for your connected accounts. These are stored encrypted and are never shown again.
• Payments you report to us (amount, method and transaction ID).

2. Why we use it

Only to run CourierPing for you: to calculate your reports, send the messages you switched on, keep your account and billing working, help you when you ask for support, and keep the service safe. We do not sell your data or your customers' data, and we do not use it for advertising.

3. Each business is kept apart

Every business has its own separate database. One customer of CourierPing can never see another's data.

4. Services we use

To run CourierPing we use trusted providers: hosting (Vercel), the database (Neon), and the AI provider whose key is used for the assistant. Data is sent to Shopify, Meta/WhatsApp and courier companies only as needed for the features you use. These providers may store data outside Pakistan.

5. Support access

When you ask for help, our admin may open your account in a view-only mode to see the problem. Nothing can be changed or sent in this mode, and every view is recorded.

6. How long we keep it

We keep your data while your account exists. If your plan ends we keep it for at least 90 days so you can come back. If you ask us to delete your account, we delete your business database within 30 days, except records we must keep by law (such as payment records).

7. Security

Connections are encrypted (HTTPS), keys and tokens are encrypted at rest, passwords are hashed, and access to accounts is protected by login.

8. Your choices

• You can disconnect any connected account at any time on the Connections page.
• You can ask us for a copy of your data or to delete your account.

9. Contact

Privacy questions or requests: the details on our Contact page.