Privacy Policy
Byelabel Privacy Policy
Version 1.1 — Effective Date: 13 September 2026
This policy replaces all earlier versions of the Byelabel Privacy Policy.
Byelabel LLC ("Byelabel", "we", "us") provides shipping and fulfilment software that connects e-commerce sellers to marketplaces and shipping carriers. This policy explains what personal data we handle, why, for how long, who we share it with, and what rights you have.
If you have a question about anything in this policy, contact us at info@byelabel.com.
1. Two different roles
We handle personal data in two distinct roles, and your rights depend on which one applies.
As a controller — for the account data of our own customers. If you are a seller using Byelabel, we decide how your account information is handled and this policy governs it directly.
As a processor — for the data of your customers. When you connect a marketplace and we retrieve orders, the recipient details in those orders belong to your business. You decide why and how that data is used; we act only on your instructions. If one of your customers wants to exercise their rights, the request goes to you, and we support you in answering it.
2. Data we handle
2.1 Your account data (we are the controller)
| Category | Data |
|---|---|
| Identity | Name, business name |
| Contact | Email address, telephone number, business address |
| Account | Username, password (stored in a form that cannot be reversed), authentication records, session history |
| Billing | Subscription plan, payment records. Card details are handled by our payment processor and do not pass through or rest in our systems |
| Usage | Records of actions taken in the application, API requests, features used |
| Technical | IP address, browser type, operating system, device identifier, referring page, time zone |
| Support | Correspondence with us |
2.2 Your customers' data (we are the processor)
We retrieve data from a marketplace or store platform only after you have authorised the connection, and only the data needed to fulfil your orders. You can disconnect a platform at any time.
When you connect a marketplace or send us shipment data, we handle the information needed to produce a shipping label and complete a delivery:
| Category | Data |
|---|---|
| Identity | Recipient name, company name where supplied |
| Contact | Delivery address, email address, telephone number where the carrier requires it |
| Tax identifiers | Where required for international shipments, such as VAT or EORI numbers |
| Order | Items, quantities, values, marketplace order references |
| Delivery | Package dimensions, weight, service level, tracking number, delivery status |
We do not receive or handle payment card details, bank details, government identification numbers, or any special category data such as health or biometric information.
3. Why we handle it
| Purpose | Basis |
|---|---|
| Providing the service — retrieving orders, comparing rates, generating labels, tracking shipments | Performance of our contract with you |
| Account administration, authentication and support | Performance of our contract with you |
| Billing and collecting payment | Performance of our contract with you |
| Securing the service — detecting abuse, investigating incidents, maintaining records | Our legitimate interest in operating a secure service |
| Service announcements — changes to the service, security notices, billing notices | Performance of our contract with you |
| Meeting legal and tax obligations | Legal obligation |
The only email we send you is about your own account: service changes, security notices and billing. We do not send marketing email. Should that ever change, we would ask for your consent first and include an unsubscribe link in every message.
We do not use personal data for marketing of any kind, for profiling, for analytics unrelated to the service, or for training machine learning models. We do not sell personal data and we do not share it for advertising.
Automated decision-making producing legal or similarly significant effects is not carried out.
4. Who we share it with
| Recipient | What they receive | Why |
|---|---|---|
| Shipping carriers (FedEx, UPS, USPS, DHL and others) | Recipient name, delivery address, and contact details where the carrier requires them for delivery notification | A parcel cannot be delivered without them |
| Marketplaces | Tracking number and shipment confirmation | Updating the order on the marketplace |
| Amazon Web Services | Hosting and storage of all data | Infrastructure provider; acts on our instructions only |
| Payment processor | Your billing details. No customer data | Subscription payments |
| Google Firebase Cloud Messaging | A device token and a notification message. No customer data | Delivering notifications to your own device |
We disclose data to a carrier only to the extent needed to produce the label and complete the delivery. Nothing is shared for any other purpose, and we do not disclose personal data to any party not listed here except where the law requires it.
5. Where it is stored
All data is stored in the United States, in Amazon Web Services infrastructure in the us-east-1 region. We do not store personal data outside this region.
If you are established in the United Kingdom or the European Union, using Byelabel involves transferring data to the United States. Delivery data may also reach a carrier outside the United States where the destination is abroad.
6. How long we keep it
| Data | Retention |
|---|---|
| Personal data within order and shipment records | Irreversibly overwritten 30 days after the order is delivered, automatically |
| Shipping labels and documents | Same period |
| Your account data | For as long as your account is active, and for a limited period afterwards to meet legal and tax obligations |
| Security and audit records | Up to 400 days |
| Automated database backups | 7 days |
Deletion of personal data from order records happens on a nightly schedule without anyone needing to request it. Backups expire on their own cycle, so data removed from the live system stops being recoverable within seven days.
Where the law requires us to keep something longer — for tax records, for example — we keep only what the law requires and delete it when the requirement ends.
7. Your rights
If we hold your personal data as a controller, you have the following rights. To exercise any of them, contact info@byelabel.com. We respond within one month and do not charge for it.
| Right | What it means |
|---|---|
| Access | Obtain a copy of the personal data we hold about you, and information about how it is used |
| Rectification | Have inaccurate data corrected and incomplete data completed |
| Erasure | Have your data deleted where there is no continuing need or legal requirement to keep it |
| Restriction | Require us to stop processing your data while a dispute about its accuracy or our basis for holding it is resolved |
| Objection | Object to processing carried out on the basis of our legitimate interests |
| Portability | Receive the data you provided to us in a structured, commonly used and machine-readable format, or have it sent to another provider |
| Withdraw consent | Where processing relies on consent, withdraw it at any time. This does not affect processing already carried out |
Some of this you can do yourself: your account information can be viewed and corrected at any time in your account settings.
We may need to verify your identity before acting on a request, to ensure we do not disclose your data to someone else.
If you are a customer of a seller who uses Byelabel: your data belongs to that seller, not to us. Please direct your request to them. If you contact us, we will tell you so, and we will help the seller respond.
Residents of California and other US states
Depending on where you live, you may have the right to know what personal information is collected, to have it deleted, to correct it, to receive a copy, and not to be discriminated against for exercising these rights.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
8. How we protect it
Personal data is encrypted both in transit and at rest. Access is restricted to named individuals whose role requires it, and is reviewed regularly. Multi-factor authentication is required for administrative access, and all such access is logged.
Our security controls are assessed annually by an independent penetration testing provider, and continuously by automated vulnerability scanning, configuration monitoring and threat detection.
If a breach occurs that is likely to result in a risk to individuals, we notify the relevant authorities and affected parties as the law requires.
9. Cookies and similar technologies
The Byelabel application uses cookies and browser storage that are necessary for it to function — keeping you signed in, maintaining your session, and remembering your preferences. We do not use advertising or cross-site tracking cookies.
10. Children
Byelabel is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16.
11. Changes to this policy
We may update this policy. Where a change is significant, we will require you to review and accept the revised version before continuing to use the service, and we record which version you accepted and when.
12. Affiliates
Byelabel LLC has no affiliate or subsidiary companies. No personal data is shared with any affiliated entity, because none exists.
13. Contact and complaints
For any privacy question or to exercise a right:
Byelabel LLC Cherry Hill, New Jersey, United States info@byelabel.com
If you are in the United Kingdom or the European Union and believe we have handled your data improperly, you may also complain to your national data protection authority. We would appreciate the chance to address your concern first.