Privacy Policy

Last updated: 2026-02-09

1. Introduction

WhereParcel ("we", "us", "our") operates the WhereParcel API service and website (whereparcel.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Account Information

When you create an account, we collect your email address, display name, and authentication credentials. If you sign up via Google, we receive your Google profile information (name, email, profile picture).

Payment Information

Payment processing is handled by Paddle, our Merchant of Record. We do not directly collect or store credit card numbers. Paddle may share with us your name, email, billing address, and transaction details. Paddle's privacy policy governs how they handle your payment data.

API Usage Data

We collect data about your API usage, including request counts, timestamps, API keys used, and rate limit information. This data is used for billing, analytics, and service improvement.

Tracking Queries

When you use the API to track parcels, we process the carrier code and tracking number you provide. We may cache tracking results temporarily to improve response times. We do not permanently store tracking numbers or associate them with personal identities.

Technical Data

We automatically collect certain technical information, including IP addresses, browser type, device information, and pages visited. This is used for security, analytics, and improving the Service.

3. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Process payments and manage subscriptions
  • Monitor API usage and enforce rate limits
  • Send service-related communications (account alerts, billing notices)
  • Detect, prevent, and address security issues and abuse
  • Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

4. Data Sharing

We may share your information with:

  • Paddle — our payment processor and Merchant of Record, for payment processing
  • Firebase (Google Cloud) — for authentication, database, and hosting infrastructure
  • Law enforcement — when required by law, court order, or legal process

5. Data Retention

We retain your account information for as long as your account is active. API usage logs are retained for up to 90 days. Tracking data cache is retained for a short period (typically less than 24 hours). Payment records are retained as required by tax and accounting regulations.

Upon account deletion, we will delete your personal information within 30 days, except where retention is required by law.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (TLS/HTTPS)
  • Encryption of data at rest
  • Secure API key generation and hashing
  • Access controls and authentication
  • Regular security reviews

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Object to or restrict certain processing

To exercise these rights, contact us at help@whereparcel.com.

9. International Data Transfers

Our servers are located in multiple regions (Asia, US, Europe) to provide low-latency API access. Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy, contact us at help@whereparcel.com.