1. Who we are
Packtrail ("Packtrail", "we", "us") is operated by Owen Halpin. Packtrail helps sellers on Whatnot record proof that they packed and shipped each order, and put that proof together when a buyer files a claim. Packtrail is an independent tool and isn't affiliated with or endorsed by Whatnot.
Questions or requests about this policy: packtrailsupport@gmail.com.
2. Sellers and buyers
Our customers are sellers ("you"). To do its job, Packtrail also handles some information about the people who bought from you on Whatnot ("buyers"). For buyer information, we act on your behalf: you decide to bring it into Packtrail, and we use it only to provide the service to you. If you're a buyer with a question about your information, you can contact the seller or us at packtrailsupport@gmail.com, and we'll help.
3. What we collect
From you, the seller
- Account details: your email address (used to sign in with a one-time link) and the display handle you choose.
- Settings: your high-value threshold and plan.
- Whatnot connection: if you connect Whatnot, your access token (stored encrypted and never shown back to your browser) and your Whatnot user name and id.
- Billing: if you upgrade, Stripe processes your payment. We receive and store your Stripe customer and subscription ids, plan status and renewal dates. We never see or store your full card number.
Order and buyer information
- From Whatnot (through the API or a CSV report you upload): order numbers, buyer usernames, item titles, quantities and prices, show titles, sale dates, carrier, tracking numbers and shipping status.
- Claims you log: the claim type, when it arrived, its status and any notes you write.
Proof media
- Photos and packing videos you take in Pack Mode. These can show anything in frame, including the shipping label, which usually shows the buyer's name and address. Only capture what's needed to show the order was packed.
- For each capture: a SHA-256 fingerprint, the time our server received it, your device's time, file type and size.
- Photos are stamped on your device with the order number, your handle and the date and time before upload.
Technical information
- Sign-in cookies that keep you logged in. We don't use advertising or analytics cookies.
- Standard server logs kept by our hosting providers (such as IP address, browser type and request time), used for security and troubleshooting. Our own logs record error codes, not tokens, emails or the content of your requests.
4. How we use it
- To run Packtrail: sign you in, sync and show your orders, record and fingerprint proof, and build Claim Kits.
- To bill you for Pro and apply your plan's limits and retention.
- To keep the service secure, prevent abuse and fix problems.
- To send service messages, such as sign-in links. We don't send marketing email without your permission.
We don't sell personal information, share it for cross-context behavioral advertising, or use your photos or buyer information to train AI models.
6. How long we keep it
- Photos and videos: deleted automatically 120 days after capture on the free plan, or 365 days on Pro. Media on an order with an open or submitted claim is kept until the claim is resolved. After deletion, the fingerprint and timestamps stay, so a Claim Kit can still show what was recorded and when.
- Orders, claims and settings: kept while your account is open.
- Whatnot token: deleted when you disconnect Whatnot or close your account.
- Billing records: kept as long as needed for tax and accounting.
- When you close your account, we delete your account data within 30 days, except where we must keep something by law. Backups are overwritten on a rolling schedule.
7. Security
Data is sent over encrypted connections. Each seller can only reach their own data (database row-level security). Proof media is stored in a private bucket and shown through short-lived links. Whatnot tokens are encrypted with AES-256-GCM and only decrypted on our servers. No system is perfectly secure, so please keep your email account safe, since it's how you sign in.
8. Your choices and rights
You can update your handle and settings in the app, disconnect Whatnot at any time, and cancel Pro from Manage billing. You can also ask us to:
- give you a copy of your information,
- correct it,
- delete it or close your account.
Email packtrailsupport@gmail.com from the address on your account. We'll respond within 30 days, or sooner if the law where you live requires it. Depending on where you live (for example California, other US states, the UK or the EU), you may have additional rights, including the right to appeal a decision or to complain to a data protection authority. We won't treat you differently for using these rights.
9. Children
Packtrail is for sellers 18 and older. We don't knowingly collect information from children. If you think a child has given us information, contact us and we'll delete it.
10. Where data is processed
We and our providers may process information in the United States and other countries, which may have different data protection laws from where you live.
11. Changes
If we make a material change, we'll update the date at the top and tell you by email or in the app before it takes effect.