Privacy Policy

Shiptavio provides this publishing platform. In this policy, "we", "us", and "our" refer to Shiptavio.

We provide the publishing platform. We do not own or operate the apps that customers publish through Shiptavio.

The information we receive depends on how you use Shiptavio.

• Account and profile details: your name, email address, profile image, password (stored as a hash) or Google account identifier, and email verification status. If you sign in with Google, we receive the account details Google returns for sign-in, such as your name, email address, and profile image.
• App and release details: app name, package identifier, framework, store listing text, screenshots and graphics, support email, privacy and age-rating answers, demo credentials, reviewer notes, version details, source code or a link to a private repository, build commands, environment variables, release notes, and transfer account details.
• Billing details: subscription and credit records, plan price, payment status, provider reference, and payment dates. Card or bank details are handled by the payment provider. We do not store your full card number or online banking password.
• Support details: ticket subject and messages, attachments, and any app or account information you include in a support request.
• Acknowledgement details: your answers to the submission checklist, the checklist version, and the time of acceptance. We also record the IP address and browser user agent submitted with that acknowledgement.

When you visit the public site, sign in, or use the dashboard, we collect:

• Public site visits: the page path, the referring site's hostname, and a salted, irreversible hash derived from your IP address and browser user agent. We use this to count page views and unique visitors. We do not store the raw IP address for this purpose, set an analytics cookie, or use the data for advertising.
• Session information, IP address, browser and device user agent, and timestamps.
• Audit and security events, such as account changes, app and release updates, admin actions, and payment status changes.
• Cookies and browser storage needed to keep you signed in, protect your session, and remember your theme choice. We do not use advertising or cross-site tracking cookies.

We receive limited information from services you connect to Shiptavio:

• Google, when you choose Google sign-in. We receive the account details described above.
• GitHub, when you give us access to a private repository. We receive the repository content and related metadata needed to build your app.
• Payment providers, which send us payment status and a provider reference. They handle your payment credentials.
• Apple and Google, which provide store identifiers and review status for submissions we manage on your behalf.

We may combine this information with the information you give us.

We use personal data to:

• Create, verify, and secure your account and let you sign in.
• Review your app and build, sign, submit, and manage releases.
• Track subscriptions, release credits, payments, and renewals.
• Send service messages such as verification codes, payment updates, release updates, and support replies.
• Respond to support requests and investigate problems.
• Enforce our Terms of Service and Prohibited Apps policy, protect the service, and prevent fraud or abuse.
• Keep audit records and meet legal, tax, accounting, and app store requirements.
• Measure traffic to the public site and see which pages people read.
• Process an app transfer when you request one.

We share personal data only as needed to run Shiptavio, with:

• Infrastructure, database, and storage providers, including Cloudflare R2 when object storage is enabled.
• Email delivery providers, including Resend or an SMTP provider.
• Payment providers that process your payment.
• Google, when you choose Google sign-in.
• Apple and Google, as part of app submission and review. This can include builds, store metadata, demo credentials, and reviewer notes.
• The developer account you name when you request an app transfer.
• Professional advisers, auditors, insurers, and authorities when required by law, or when needed to protect our rights, users, or developer accounts.
• A buyer or successor if we sell or transfer all or part of the business, subject to this policy.

We do not sell personal data. We do not share your source code with other customers.

Store listing information you provide is public once your app is published. A hosted app privacy policy is also public.

Some providers process data on our behalf. Others, such as payment providers and app stores, handle data under their own terms and privacy policies.

Shiptavio and some of our service providers may process personal data in countries other than the one where you live. Privacy laws in those countries may differ from your local laws.

We keep account, app, release, and support data while your account or app is active and for as long as needed to provide the service, handle renewals, resolve disputes, and support you.

We keep payment, tax, acknowledgement, and audit records for the period required for legal, accounting, and security purposes. When data is no longer needed, we delete it or remove identifying details.

Some copies may remain in backups for a limited period. We may also keep records where law requires it or where needed to enforce an agreement. If you ask us to delete your account, we may first need you to unpublish or transfer any live apps, and we may keep records that we are required to retain.

We store passwords as hashes and store email verification codes in hashed form. We limit staff access to customer data to the people who need it to review, build, publish, or support an app. We also use access controls and audit logs.

No service can promise complete security. Use a unique password, protect your email account, and tell us if you believe your account has been compromised.

Depending on your location and applicable law, you may ask to access, correct, delete, restrict, or object to our use of your personal data, or withdraw consent. Contact us using the details below. We may need to verify your identity. Some rights are limited by law, and we may keep records needed for legal or security reasons.

You can also complain to your local data protection authority.

To close your Shiptavio account, contact us. Because apps are published under our developer accounts, we may need to remove or transfer live apps before closing the account. Closing your Shiptavio account does not delete data held by Apple, Google, your payment provider, or the users of your app.

You can block cookies in your browser. Some parts of Shiptavio, including sign-in, may stop working if you do.

Shiptavio is a publishing service for businesses and adult developers. It is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will take appropriate steps.

Shiptavio links to third-party services such as Google, GitHub, Apple, Google Play, and payment providers. Their privacy policies apply to their handling of data.

Published apps are operated by their owners, not by us. Their privacy policies and data practices are their responsibility. If you use an app published through Shiptavio, contact that app's support contact with privacy questions.

We may update this policy when our service or legal requirements change. We will post the new version and update the date at the top. If a change is material, we will provide additional notice by email or in the dashboard where appropriate. The version in effect when you use the service applies.