Privacy Policy

1. Who we are

Will Gift LLC ("we", "us") operates Store OS, business software for running a store, including shipping, point of sale, accounting and tax preparation. This policy explains what personal and financial information we handle and the choices you have. Contact: cs@ishipx.com.

2. Information we collect

Account and contact information: names, email addresses, phone numbers and shipping addresses of store staff and of the customers a store serves.

Business records: orders, shipments, payments, invoices, bills, inventory and accounting entries that a store enters or generates in Store OS.

Bank connection data, only if a store owner chooses to connect a bank account through Plaid: the institution name, account name and type, the last four digits of the account number, balances and transactions, and a Plaid access token. We never receive or store your bank login credentials; you enter them only in Plaid's interface. We do not store full account or routing numbers.

Technical data: sign-in events, IP address and audit records needed to secure the service.

3. How we use information

We use information only to provide and secure the service: running orders and shipments, keeping the books, preparing tax worksheets, preventing fraud and abuse, and supporting our customers.

Bank data is used only to provide the store's own accounting service (importing and categorizing transactions, reconciliation). We do not sell it, share it with advertisers, or use it to train artificial-intelligence models.

4. Who we share it with

Plaid Inc., when you choose to connect a bank account. Plaid's handling of your data is described in Plaid's End User Privacy Policy at https://plaid.com/legal/#end-user-privacy-policy.

Service providers that host or deliver the service on our behalf (cloud hosting, payment processing, shipping carriers, email delivery), only as needed to provide it.

Authorities, when the law requires. We do not sell personal information.

5. Your consent and control

We collect bank data only after the store owner explicitly connects an account through Plaid Link, where Plaid shows what will be shared and asks for consent. You can disconnect an institution at any time in Store OS; disconnecting revokes the Plaid connection, stops all syncing and deletes the stored access token immediately. You can also withdraw access from Plaid directly.

6. Retention and deletion

Bank access tokens are deleted when an account is disconnected or closed. Imported transactions that have been posted to the ledger are accounting records and are kept for the period that applicable accounting and tax record-keeping rules require; other imported bank data is deleted or anonymized.

On account closure or a verified request sent to cs@ishipx.com, we delete or anonymize personal data we are not legally required to keep within 30 days. Encrypted backups containing it age out within a further 30 days. We review this retention policy at least every six months.

7. Security

All traffic uses HTTPS (TLS 1.2 or higher). Third-party credentials and tax identification numbers are encrypted at rest with AES-256-GCM; database backups are encrypted before leaving our server. Access is limited by role and tenant, sensitive actions need a second password confirmation, and changes are written to an audit log. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.

8. Your rights

Depending on where you live (for example California, other U.S. states, or the EU/UK), you may have the right to access, correct, delete or port your personal data, and to object to or limit certain processing. Send a request to cs@ishipx.com; we verify your identity and reply within 30 days. We do not discriminate against you for exercising these rights.

9. Children

Store OS is business software and is not directed to children under 16. We do not knowingly collect their data.

10. Changes and contact

We will post changes here and update the date above. Questions or requests: cs@ishipx.com.