EN
Start free

Privacy Policy

Last updated: 23 October 2026

This Privacy Policy explains how JetShipper handles personal data when you visit our website, use the JetShipper app or play Seller’s Nightmare. The company responsibilities for each processing purpose are set out below.

  • SERYA CORPORATION, 4111 Greenbriar Dr Ste B, Stafford, TX 77477, USA, is the contracting company for JetShipper services and the controller for seller-account, contract, billing and related website and support data used to administer those services.
  • JET TEKNOLOJİ ÜRETİM VE TEDARİK LTD. ŞTİ., Bağlar Mh. Osman Paşa Cd. No: 66/11, İstanbul, Türkiye, owns the JetShipper brand in Türkiye and operates the technology, production and support functions as Serya’s contractor. JET processes service data on Serya’s instructions and is the applicant and technology operator for the Shopify and Amazon integrations.
  • Buyer data: you are the controller of the buyer information you send us for your orders. We process that information on your instructions to produce, personalize and fulfill those orders.
  • These responsibilities depend on the processing purpose, not the language you select. This notice does not change the contracting company or the service Terms.
  • Questions and requests: privacy@jetshipper.com.
  • Account and contact data: name, email, phone, company name, address, the users you invite and their roles.
  • Sign-in and security data: password (stored only as a secure hash), second-factor setup, sign-in times, device and IP address.
  • Store connection data: the access granted when you connect Etsy, Shopify or another marketplace, and your listings and orders from it.
  • Order data, including your buyers’ data: buyer name, shipping address, phone or email where the marketplace provides it, and personalization text and files.
  • Production records: what was made, weighed and photographed for each order (photos of the item, not of people).
  • Payment data: top-ups and charges. Card payments are processed by Stripe; we do not receive full card numbers.
  • Support data: your tickets, messages and attachments.
  • Marketing choice: whether you agreed to marketing email, when and where.
  • Website and game: our website does not use tracking or advertising cookies. If you add your name to the Seller’s Nightmare daily table, we store the name, store name and revenue you entered.
  • To provide the Service: accounts, orders, production, shipping, returns, billing, support (performance of our contract with you).
  • To keep the Service secure and prevent fraud and misuse (our legitimate interests; legal obligations).
  • To meet legal duties such as tax, accounting and customs records (legal obligation).
  • To improve the Service using aggregated usage information (legitimate interests).
  • Marketing email: only if you agreed. You can withdraw at any time in your profile or with the link in each email. Service email (security codes, order and funds notices) is not marketing.

To route and draft replies to support tickets faster, ticket content may be processed by an AI service (Anthropic). A member of our team remains responsible for the reply.

We do not sell personal data. We share it only as needed to run the Service, with:

  • SERYA CORPORATION (US) for service contracts, billing and fulfillment, and JET TEKNOLOJİ ÜRETİM VE TEDARİK LTD. ŞTİ. (Türkiye) for technology, production and support;
  • hosting and infrastructure: Hetzner (servers in Germany), Cloudflare (website, images and file storage);
  • payments: Stripe;
  • email and messages: Mailjet (service email), Brevo (marketing email, only with consent), Twilio (text-message sign-in codes);
  • shipping: our label and address-verification providers (including EasyPost and NestShipper) and the carriers you choose (such as USPS, UPS and DHL), which receive what they need to deliver;
  • AI support assistance: Anthropic;
  • the marketplaces you connect, when we send tracking information back to them;
  • authorities, courts or advisers when the law requires it or to protect our rights.

Serya is based in the United States and JET is based in Türkiye. Account data is hosted on servers in Germany. Data may also be processed in the United States, Türkiye and other countries by the providers involved in the service. International transfers are subject to applicable data protection requirements. Where a transfer requires safeguards such as standard contractual clauses, those safeguards must be in place before the transfer. You can contact our privacy team for information about recipients, processing locations and applicable transfer arrangements.

  • Account data: while your account is open. After closure, retention depends on the records needed for outstanding transactions, legal obligations, tax and accounting duties or the establishment, exercise or defence of legal claims. Only the necessary information is retained for those purposes.
  • Buyer details and files: our retention policy calls for buyer details, personalization files and uploaded shipping labels, to be deleted or anonymized on this schedule: for Amazon orders, 30 days after delivery; for orders from all other platforms, 90 days after delivery or when an open return or claim on that order is closed, whichever is later. What is erased: buyer and recipient name, email, phone, street address, city and ZIP code; buyer, gift and order messages; personalization answers and files; order files attached by the seller; shipping labels and printed copies; the name of the person who signed for delivery; return sender details, return labels and return photos; claim and ticket files linked to the order (the claim and ticket text itself is kept); and the same values in change history. What we keep: country and state, order numbers, items, prices, money and ledger records, and production and shipment facts. Backup copies keep this information until those backups expire; if a backup is ever restored, completed deletions are applied again before it is used.
  • Support and security records: retention depends on the time needed to resolve the issue, investigate misuse, maintain security and meet applicable legal requirements. A financial or production record does not by itself justify retaining every personal field or uploaded file.
  • Deletion requests: we assess the data involved, the legal basis for any retention exception described below and the applicable response deadline. Deleting active records does not itself erase existing backup snapshots. Our data request instructions explain how to contact us; our integration privacy notice explains the retention process.

Any exception to deletion must have a specific basis in applicable law: a legal obligation to retain particular records or, where the law permits, the establishment, exercise or defence of a legal claim. Only the information necessary for that purpose may be retained, only for the period justified by that basis, and its use is restricted to that purpose. Stricter platform deletion requirements still apply. A dispute or an open production job does not by itself extend a deletion deadline.

The application uses two-factor sign-in, encrypted connections and access controls based on role and company. Audit records capture supported changes and sensitive actions. These measures do not eliminate every risk and do not constitute a security certification.

Depending on where you live, you can ask to access, correct, delete or receive a copy of your data, object to or restrict its use, and withdraw consent. Write to privacy@jetshipper.com; we will verify your identity first. If you are in the EU or UK you may also complain to your data protection authority. Your buyers should send their requests to you; we will help you answer them.

The Service is for businesses and is not directed at anyone under 18.

See our Cookie Notice. For Shopify and Amazon store connections, also read the integration privacy notice.

We will post any change here and update the date at the top. If a change is significant, we will tell you in the app or by email.