Privacy Policy

1. Controller and Contact

i-Garant Onlinetrading UG (haftungsbeschränkt), Cunostraße 15, 14199 Berlin, Germany, represented by Managing Director Igors Kirjanovs, operates Shipnovo.

The data protection contact is Managing Director Igors Kirjanovs. A dedicated Data Protection Officer is currently not appointed. The statutory appointment requirements are governed by Art. 37 GDPR and Section 38 BDSG. This designation of a contact person does not replace any legally required independent data protection function.

For data protection inquiries, you can reach us at [email protected].

For account management, our own billing, support, and the operation of this website, we determine the purposes and means of processing. We process buyer data on behalf of the respective merchant. The merchant remains responsible for orders, shipping, and buyer correspondence. Information on this relationship can be found under Data Processing Agreement.

2. Hosting and Technical Infrastructure

The web application and its PostgreSQL database run on a server at Hostinger. Dokploy is the self-hosted deployment software used on the server to deliver the application, not an independent provider of our hosting service. The server processes in particular connection logs, technical error logs, and the account and business data stored within the service.

The provider of the VPS service according to the hosting invoice is Hostinger International Ltd., 61 Lordou Vironos Street, Larnaca 6023, Cyprus.

The server location is Frankfurt am Main, Germany. Weekly server backups configured with Hostinger are stored in Lithuania. As of October 10, 2026, two backups were available. Hostinger replaces older backups automatically. This review does not prove any additional, fixed retention period or encryption of all backup copies.

Cloudflare provides DNS, email infrastructure with Email Routing, Workers, and D1, as well as Turnstile abuse prevention. In the verified configuration, the shipnovo.app domain uses DNS without Cloudflare HTTP proxy. This does not imply processing exclusively in Germany or the EU.

We process technically necessary connection and security data to provide a secure service pursuant to Art. 6(1)(f) GDPR. Our legitimate interest is protection against abuse and the reliable delivery of the application. For personal data of our contractual partners, Art. 6(1)(b) GDPR applies in the performance of contracts.

3. Account, Subscription, Support and Necessary Storage

Upon registration and use, we process name, email address, password hash, company information, memberships, permissions, and selected plan details. This serves contract performance and account security. For corporate contact persons, we base business communication on Art. 6(1)(f) GDPR. Statutory invoice and retention data is processed under Art. 6(1)(c) GDPR.

Session cookies are necessary for login and access control. The session duration is up to 30 days. For technically necessary storage, Section 25(2) no. 2 TDDDG applies. Taking note of a privacy policy does not constitute blanket consent to additional processing.

For inquiries, we store sender, recipient, subject, message, and any attachments in our own mail-hub. Cloudflare operates its technical infrastructure. The Resend mail transport present in Shipnovo and direct reply dispatch from the operator mailbox are not activated in the verified configuration.

When using the public contact form, we process name, email address, optionally company name, and message content for inquiry handling (Art. 6(1)(b) GDPR) and abuse prevention (Art. 6(1)(f) GDPR). If email delivery fails, inquiry data is stored as a fallback in our protected application database so that platform administrators can view and process it in the support area. Data is manually deleted on a purpose-bound basis by platform administrators after final resolution of the inquiry, unless statutory retention obligations or pending evidentiary interests require longer retention.

4. Connected Services and Recipients

Billing with Stripe

When you conclude and manage a subscription, Stripe processes payment and invoice details as well as customer and subscription identifiers. You enter payment details in the checkout provided by Stripe. We receive the payment and subscription status and links to invoices, not the complete card details. Depending on the purpose, Stripe acts as our processor or as an independent controller, for example to meet its own legal obligations. We rely on Art. 6(1)(b) GDPR for our contractual processing.

eBay and Shipping Carriers

Through your connected account, we import data from the eBay API: buyer and recipient names, usernames, contact details, delivery addresses, order items, shipping data, messages, and related attachments. We send shipping information and messages that you initiate back to eBay.

Depending on the service connected by the merchant, we use DHL Paket, Deutsche Post Internetmarke, DPD, GLS, Hermes, or UPS. For the requested shipping service, we transmit the necessary sender, recipient, address, and shipment data. We transmit telephone numbers, email addresses, and customs details only where the interface used and the requested shipment provide for them. With Internetmarke, we transmit addresses only for a label layout that includes an address zone.

eBay and the commissioned shipping companies are not our processors merely because of the API connection. They also process data for their own marketplace and shipping services. Buyers should first direct privacy inquiries about an order to their merchant. We support the merchant in meeting its obligations under the Data Processing Agreement.

Optional AI Features

If a merchant enables and uses an AI feature, OpenAI processes the text, images, or documents submitted for that task. This may include import documents and content for message or offer drafts. The message feature removes directly identifying details before submission. This does not automatically anonymize free-text or submitted documents. Access credentials are not sent to the AI as part of the task.

OpenAI is the AI provider enabled in the verified configuration. The alternative Anthropic adapter is not enabled. Users must review AI drafts before publishing or sending them. Buyer data is processed under the merchant’s instruction, not on the basis of the merchant’s consent in place of its buyers.

5. Storage Period and Erasure

We retain account and contract data for as long as it is needed for the relevant purpose. Statutory retention duties and the necessary defense of legal claims may prevent immediate erasure. When the purpose ends, we erase the data or restrict its processing where a retention duty still applies.

Buyer and order data that we process on a merchant’s behalf remain stored while the merchant account is active. The merchant is the controller of this data under data protection law and sets the purposes and instructions. Cancelling or closing the merchant account ends the processing only when the contract has effectively ended. The merchant may then export its data or instruct its deletion within 30 days. After this period, we delete personal data processed on the merchant’s behalf unless a statutory retention obligation or a specifically required proof for legal claims prevents this. We generally retain invoices and accounting records for eight years, and books and annual financial statements for ten years. A six-year period applies only to commercial and business letters where the law requires their retention in the individual case; it is not a general period for buyer data. Statutory periods generally start at the end of the year in which the record was created; special statutory obligations may extend them.

We may permanently store anonymized aggregates that can no longer be linked to a person. Backup copies are overwritten or deleted no later than 30 days after their creation and are not used except for a necessary restoration. Cancelling a subscription alone does not close the merchant account. Active subscriptions, open checkouts or unfinished processes may delay the termination from taking effect; the 30-day period starts only when the contract has effectively ended.

Encrypted files and download tokens for uploaded message attachments expire after 24 hours. The cleanup job removes this content, but does not automatically remove all metadata or messages. Tracking-status copies expire 45 days after dispatch for undelivered shipments and 30 days after delivery for delivered shipments. Orders, addresses, and tracking numbers are stored separately.

6. Your Rights

Subject to the statutory requirements, you have rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), and data portability (Art. 20). You may withdraw consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

If we process data based on legitimate interests, you may object under Art. 21 GDPR for reasons arising from your particular situation. You may object to direct marketing at any time without stating such reasons.

You may lodge a complaint with a data protection supervisory authority, in particular where you live or work, or where the alleged infringement took place. The Berlin Commissioner for Data Protection and Freedom of Information is responsible for our registered office. For our own processing, contact [email protected]. For buyer data, we forward the request to the responsible merchant.

7. Security and International Processing

The application checks active memberships and permissions when accessing customer data. Provider credentials and uploaded message attachments and download tokens are stored encrypted with AES-256-GCM. This encryption does not mean that every order field or PDF file is individually encrypted. Technical logs reduce personal free text and access credentials.

Cloudflare, Stripe, and OpenAI may also process data in a third country or make it accessible to authorities there, in particular in the United States. A transfer must meet the requirements of Arts. 44 et seq. GDPR. Depending on the transfer, these providers’ published data processing terms provide for adequacy decisions or standard contractual clauses. You may ask us for details about a specific transfer and the safeguards that apply. We do not claim that all processing takes place exclusively in the EU or that every recipient has a general certification.

When a shipping carrier is selected, recipients and international processing also depend on the merchant’s contracts and the shipment’s destination country. Statutory requirements also apply to these transfers.

8. Live Demo

We do not ask for personal data for the live demo. You receive a temporary guest account with sample data. We delete the guest account and everything you enter in it, including addresses, no later than 24 hours after it starts. To prevent abuse, we store a hash of your IP address for this period and check the start with Cloudflare Turnstile (Cloudflare, Inc.). We process this data based on our legitimate interest in secure operation under Art. 6(1)(f) GDPR.

9. Statistics and Usage Analysis with Your Consent

On our public pages and in the app, we use the following services only if you consent in the cookie banner. You choose separately for statistics and usage analysis. Without your consent, your browser loads none of these services. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Statistics: Google Analytics 4

• Purpose: We count which pages and features are used and where processes stop, such as registration, setup, account connection, or subscription checkout. This helps us improve Shipnovo.
• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
• Data: Page address, device, browser, approximate location, referring page, clicks, scroll depth, downloads, and form use. Before transmission, we replace identifiers in addresses, such as order numbers, with placeholders. We do not send names, email addresses, order numbers, or user identifiers. Google Signals and advertising features are disabled. Google Analytics does not store IP addresses.
• Cookies: _ga and _ga_…, for up to 2 years. Google deletes analytics data after 14 months.
• Transfer to the United States: Google LLC may have access. Google is certified under the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR).

Usage Analysis: Microsoft Clarity

• Purpose: Heatmaps and recordings of how the service is used (mouse movement, clicks, and scrolling). This helps us find where the interface causes difficulty.
• Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
• Data: All text and input fields are masked in recordings. In the app, recordings do not show buyer names or addresses, order values, or messages. Device, browser, screen size, and approximate location are also collected.
• Cookies: _clck (1 year) and _clsk (1 day); Microsoft may set additional cookies on its own domains. Clarity deletes recordings after 30 days and aggregated data after 13 months.
• Transfer to the United States: Microsoft Corporation may have access. Microsoft is certified under the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR).

Your Choices and Withdrawal

We store your choice in your browser for 12 months (localStorage, entry shipnovo-consent). It applies to public pages and the app, including after sign-in or sign-out. You may withdraw consent at any time with effect for the future through “Cookie Settings” in the footer or the button below. When you withdraw consent, we stop the services and delete their cookies in your browser.