Easy Shipping Hub

Privacy Policy

Last updated: 2026-09-08

This policy explains what personal data EasyShippingHub collects when you use our website and seller platform, why we collect it, who we share it with, and what rights you have. It describes what our systems actually do. If you have a question this page does not answer, write to [email protected].

EasyShippingHub operates an order fulfillment service for online marketplace sellers. We receive inventory in bulk at our warehouse in New York, United States, store it, and ship individual customer orders using US domestic carriers. For the purposes of GDPR and the Turkish Personal Data Protection Law (KVKK), EasyShippingHub is the data controller for the personal data described below.

We collect the following, and nothing beyond what our platform needs to operate:

  • Account details you give us: your email address, full name, an optional phone number, your preferred language, and a password (which we store only as a cryptographic hash, never in readable form).
  • Security and session data: the IP address and browser user-agent recorded when you sign in, the number of failed sign-in attempts, and any temporary lockout. We use these to protect your account and to detect attacks.
  • Billing data: the amount, currency and status of each deposit; the payment proof document you upload; the checksum, type and size of that file; your wallet ledger; and, where a deposit is declined, the reason recorded by an administrator.
  • Marketplace data: when you connect a shop, we store the access credentials for it in encrypted form, along with the shop identifier and name, and the listing and inventory data we sync in order to fulfill your orders.
  • Support data: whatever you choose to tell us by live chat or email.

We use your data to create and secure your account, verify your email address, connect the marketplace shops you choose to link, receive and fulfill your orders, calculate and take payment for our services, detect and prevent fraud and abuse of our sign-in system, answer your support requests, and meet our legal, tax and customs obligations.

Where GDPR or KVKK applies, we rely on: performance of our contract with you (operating your account and fulfilling your orders); our legitimate interests (securing the platform, preventing credential attacks and fraud, and improving the service); your consent (optional analytics, and marketing email if you opt in); and compliance with legal obligations (accounting, tax and customs records). You may withdraw consent at any time without affecting processing already carried out.

We do not sell your personal data. We share it only with service providers who process it on our behalf, and only as needed:

  • Cloudflare — content delivery, security filtering, bot protection on our sign-in forms, and encrypted object storage for the payment proof documents you upload.
  • Amazon Web Services — hosting for our application servers and databases.
  • Resend — delivery of transactional email such as address verification and account notices.
  • Tawk.to — the live chat widget on our website, where you choose to use it.
  • Google Analytics — aggregate website usage statistics, only where analytics is enabled for the site you are visiting.
  • The marketplaces you connect, such as Etsy — we exchange data with them only for the shop you have explicitly authorised, and only to sync listings and fulfill orders.
  • Professional advisers, customs brokers and carriers where this is necessary to ship your goods or to meet a legal obligation.

Our servers and databases are hosted in the United States, and our processors are largely US-based. If you are in Türkiye or the European Economic Area, using EasyShippingHub means your personal data is transferred to and processed in the United States, which may not offer the same level of protection as your home jurisdiction. We rely on your explicit consent and on contractual safeguards with our processors for these transfers. If you are not comfortable with this transfer, please do not create an account.

We set three strictly necessary cookies, without which you cannot stay signed in: esh_access (your short-lived session), esh_refresh (renews that session), and esh_refresh_csrf (protects against cross-site request forgery). These are essential and cannot be turned off while you use an account. Where analytics or live chat are enabled, those providers set their own cookies; you can block them in your browser without losing access to your account.

We keep account data for as long as your account is open. When an account is deleted it is marked deleted and retained for a limited period so it can be restored if the deletion was a mistake and so we can meet legal and accounting obligations, after which it is removed. Payment records, deposit documents and administrative audit logs are kept for the period required by tax and accounting law. Session records expire automatically.

Depending on where you live, you have the right to: ask what personal data we hold about you and get a copy; correct data that is wrong or incomplete; ask us to delete your data; object to or restrict certain processing; withdraw consent; and receive your data in a portable format. You can exercise most of these directly in your account settings, or by writing to [email protected]. If you are in Türkiye you may complain to the Kişisel Verileri Koruma Kurumu; in the EEA, to your national data protection authority.

Passwords are stored only as salted hashes and are never recoverable. Marketplace access tokens are encrypted before they are written to our database. All traffic is served over HTTPS with HSTS. We rate-limit sign-in attempts, lock accounts after repeated failures, and monitor for patterns typical of credential attacks. Administrative actions on seller accounts are recorded in an audit log with the reason and the administrator responsible. No system is perfectly secure, and we do not claim otherwise.

EasyShippingHub is a business service and is not directed at children. You must be at least 18 years old to hold an account. We do not knowingly collect data from children; if we learn that we have, we delete it.

We may update this policy as the service changes. The date at the top always reflects the current version. If we make a change that materially affects your rights, we will tell you by email or in the application before it takes effect.

For any privacy question, or to exercise any right described above, write to [email protected]. Our support page lists every way to reach a person.