Your account: business name, work email, phone number, ship-from address, and a password. The password is hashed the moment it reaches us; we cannot read it and we never store it in plain text.

Your shipments: sender and recipient names and addresses, parcel details, and tracking events. This is the information a parcel needs to move; without it there is no label.

Your session and your visit: a signed cookie keeps you logged in, and our analytics and advertising partners set their own cookies — including click-id cookies when you arrive from an ad on X or Reddit — to measure how you found us. The “Analytics and advertising” section below names every one.

We create labels, hand parcels to Canada Post for delivery, and show you tracking. We email you about your account and your shipments — tracking notifications, shipment issues, and changes to the service. That is the complete list of uses.

Recipient addresses are shared with Canada Post because they deliver the parcel. We do not share, sell, or rent your information to anyone else.

We measure our own marketing. Google Analytics and Google Ads count visits and signups. The X and Reddit pixels tell those platforms when one of our ads led to a signup or a purchase — in your browser and through their server APIs. The Whop pixel does the same, and receives your email, phone number, and business name when you sign up.

This measurement is about you, the merchant, finding Woosh. It never touches your customers or their addresses. Your browser’s tracking protections apply to all of it, and blocking these tools changes nothing about how Woosh works.

No selling data. No marketing lists you did not ask for. Your customers’ addresses are used to deliver their parcels and for nothing else.

Data is stored with our hosting providers (Vercel and Upstash) and protected in transit with HTTPS. Access is limited to the people who run the service.

Shipment records are kept as long as your account is open, because you may need them for claims, returns, and taxes. Close your account and we delete your data within 30 days, except what the law requires us to keep.

This is your information. Ask us and we will show you what we hold, correct it, or delete it. We follow PIPEDA, Canada’s federal privacy law. Write to privacy@woosh.ca and a person answers.

If this policy changes in a way that matters, we email you before the change takes effect.