Privacy Policy

Updated 2026-08-28

On this page

Latest version posted: August 28, 2026

Effective: August 28, 2026

This Privacy Policy ("Policy") describes privacy practices of Foggy Goggle Inc, doing business as NitroMule ("NitroMule", "Provider", "we", "us", or "our"). It describes how we collect and maintain certain information collected about you through www.nitromule.com , related applications and clients, merchant-branded portals, and APIs (collectively, the "Services"). This Policy applies to website users, customers, business partners, portal visitors, and others who interact with our Services ("you"). It is incorporated by reference into our Terms of Service .

We take the privacy of our customers and their downstream customers seriously. We require our merchant customers, where applicable, to respect relevant data protection laws, including the GDPR, UK GDPR, the California Consumer Privacy Rights Act (as amended) ("CCPA"), and other applicable U.S. state and federal laws.

For clarity, personal information collected by NitroMule may be disclosed to the United States Postal Service ("USPS"), UPS, FedEx, and other carriers in connection with the Services and pursuant to the applicable carrier's privacy policies and practices. If you access the Services through a connected store, marketplace, or merchant-branded portal, personal information may also be disclosed to that platform as needed to provide the features you enable. Use of carrier services via our platform is at your own risk; your interactions with carriers are also governed by each carrier's privacy policy.

1. When This Policy Applies

This Policy applies to our sites, products, and Services that link to this Policy where we act as a controller (or similar concept under applicable law). We are the controller of Personal Information for NitroMule merchant accounts—registration, billing, platform security, and operating the shipping tools you use.

Please note that this Policy does not fully cover processing of Personal Information for which we act only as a processor (or service provider) on a merchant's instructions. When you connect Shopify, WooCommerce, eBay, Amazon, or similar services, or upload CSV order files, you instruct us to process buyer and order information so we can import orders, buy labels, and push fulfillment or tracking. You are responsible for having a lawful basis to share that data with us and for complying with the marketplace's data rules. That processing is also governed by our Terms of Service and any applicable data-processing commitments between you and us.

Branded portals. If you operate a merchant-branded portal, you may determine many purposes for portal visitor and customer data (branding, forms, marketing on your pages). We process that data to host the portal, run checkout and shipping, send transactional messages, and secure the platform. Merchant-edited policy pages on a portal do not replace this Privacy Policy for processing we perform as platform operator.

2. Types of Information We Collect — Account Settings and Tools

When you use NitroMule settings, we process the information needed to store and apply your choices. Profile and authentication settings may include your name, email, locale, password hash, passkey credentials, multi-factor authentication secrets (encrypted), linked sign-in identifiers (such as Google), and security preferences. Billing settings process saved payment method metadata, transaction history, and carrier adjustment records. Shipping settings may store label and packing-slip formats, print order preferences, carrier account credentials or references, service defaults, custom tags, and default coverage rules. Business settings may include portal branding, custom pages, form submissions, and connected store credentials or tokens. Advanced settings may store API keys, webhook endpoints, and embed configuration.

Shipping analytics aggregates order and spend information from your account (such as shipment counts, spend totals, service breakdowns, and order-level rows for the date ranges you select) to display dashboards and exports in settings. Analytics is derived from your existing order data and is used to help you understand shipping activity on your account, not to sell your shipping history to third parties.

3. Types of Information We Collect — Store and Marketplace Connections

If you connect a store or marketplace, we receive information authorized by that connection. Depending on the integration and the features you enable, this may include:

Shopify — shop identity and OAuth tokens; open fulfillment orders and related customer contact and address fields; product catalog fields used for NitroMule Products; location addresses for ship-from; fulfillment and tracking updates we send back; optional inventory display and checkout rate requests when you enable those features; and GDPR-related webhook payloads Shopify sends for customer or shop data requests.
WooCommerce — store URL and API credentials; orders and customer fields your plugin settings allow; product and dimension fields used for Products; shipment and tracking notifications we send; optional two-way inventory updates; and checkout rate requests when enabled.
eBay — OAuth tokens; unfulfilled order and shipping address data for import; fulfillment notifications when you ship.
Amazon — Selling Partner API data for merchant-fulfilled order import, shipment confirmation, and related shipping features, subject to Amazon's developer and data protection requirements and the retention rules below.
CSV or similar imports — whatever fields you upload (often names, addresses, phones, emails, and package details). You should not upload data you are not permitted to process.

We use this information to operate shipping in NitroMule and the features you turn on. We do not sell buyer lists obtained through these connections.

4. Types of Information We Collect — Amazon and Restricted Marketplace Data

If you connect Amazon (for example, Selling Partner APIs to use Amazon Logistics or related shipping features), we process the data Amazon returns only to operate shipping in NitroMule—such as quoting, purchasing labels, tracking, and displaying status in your account. We do not sell Amazon data. We process Amazon buyer information under Amazon's applicable developer and data protection requirements, including retention limits in Section 9 ("Data Retention and Your Access Rights"). Subprocessors are listed in Section 10.

5. Types of Information We Collect — Personal Information

The term "personal information" as used in this Privacy Policy refers to: (1) information that identifies you directly, such as your name, street or email address, driver's license or passport numbers where we collect them for claims or customs, government identification numbers where otherwise collected, and payment-related identifiers; and (2) information that may be associated with you indirectly, such as your device IP address, device identifiers, and data from cookies and similar technologies.

When you register, place orders, use checkout, or otherwise use our services, we ask for the information needed to provide those services. Depending on the feature, this may include your name, date of birth (where requested), email address, mailing and pickup/delivery addresses, phone number, company name, shipment details (including package descriptions and dimensions), billing and payment information, and preferences you save to your account. Account settings may also store profile and locale choices, authentication and linked sign-in details, saved payment method references (such as card brand and last four digits), order email recipients, printing and label format preferences, carrier account connections and service defaults, shipment tags, default coverage or declared-value settings, portal and branding assets, API keys and webhook URLs, embed keys and markup configuration, store or marketplace connection metadata, and similar operational preferences. Payment card numbers are collected and processed by our payment processors (such as Stripe); we generally receive tokens or limited payment metadata rather than storing full card numbers on our servers. We do not routinely retain full credit card numbers on our systems.

We may use address autocomplete and validation providers (for example, Smarty and Google Places) and pass address text or related signals needed to suggest or validate addresses. We may use bot-protection services (such as Google reCAPTCHA) on login, registration, contact, or claims forms.

If you use a merchant-branded portal or storefront powered by NitroMule, we collect information in that context as described here and as needed to operate the portal (for example, account, checkout, shipment, and form-submission information).

For claims, support, and shipping, we and our partner carriers (such as UPS, USPS, and FedEx) and, where enabled, coverage partners may also collect or process supporting materials. Depending on the claim or shipment, this can include sales invoices and images; return or repair authorization forms; passport or driver's license information; descriptions or photos of contents and packing; travel itineraries; event or tournament registrations when relevant to the shipment; and similar records needed to assess claims, clear customs, or complete delivery.

You may provide additional information when you create or update your account, submit contact forms, use chat or support tools where available, or participate in surveys or promotions. Voluntary information helps us improve our services. We may collect and store any of the above to operate, secure, and improve NitroMule and to perform agreements with you.

Our desktop application may store session or exchange tokens locally and communicates with the same services as the website once you authenticate.

6. When We Collect Information

We collect information when you visit our website or applications, create or log in to an account, place or import an order, complete checkout, save or update account settings (including billing, printing, carrier, coverage, portal, API, and embed preferences), connect or disconnect stores or carrier accounts, subscribe to marketing, submit forms (including claims or contact forms with attachments), respond to surveys, use site features, or communicate with support. We also collect information when carrier adjustments are processed on your account, when webhooks fire to URLs you configure, and when quote embeds on third-party sites collect address or rate inputs. We also collect information through email, phone, and other correspondence, and through service providers that host ticketing, chat, email, or telephony on our behalf.

7. How We Use Your Information

We use personal information for purposes including:

To create and maintain your account and authenticate you (including passkeys, MFA, and linked sign-in);
To process transactions, fulfill orders, provide customer support, and communicate about your orders;
To arrange shipping, rating, labels, pickup or drop-off, tracking, and customs clearance where applicable;
To operate optional features such as saved addresses, product and package libraries, portals, coupons, integrations, shipping analytics, printing preferences, carrier settings, tags, coverage defaults, order emails, API and embed tools, and billing history including carrier adjustment charges;
To verify identity and prevent fraud, abuse, or misuse of the platform;
To process loss, damage, or other claims;
To send newsletters, service updates, and marketing where permitted, and to obtain feedback; you may unsubscribe from marketing emails using the link provided or by contacting us;
To personalize content and improve our website, products, and analytics; and
To administer surveys, promotions, or other programs we offer.

8. Security of Your Information

We use commercially reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission over the Internet or electronic storage is fully secure; we cannot guarantee absolute security. Risks include unauthorized access, network failures, and software vulnerabilities. Sensitive traffic—including account credentials, tracking numbers, shipment details, and related account information you supply—is protected using TLS encryption in transit where implemented. Access to payment card data is handled by our payment processors; we limit what we store according to this Policy. For retention periods, see "How Long Do We Keep Personal Information?"

You are responsible for choosing a strong, unique password (or passkey), enabling multi-factor authentication where available, and keeping credentials confidential—including store API keys, carrier credentials, and developer keys. Do not share passwords with anyone, including anyone claiming to work for us. Change your password if you suspect compromise.

9. Data Retention and Your Access Rights

Our payment processors may provide tokens or references (not your full card number) that we retain to speed up checkout, save payment methods in Billing settings, and process post-shipment adjustments, reroutes, or carrier-billed corrections—including off-session charges where you have given carrier adjustment consent—typically up to 180 days after the original shipment date, consistent with our Terms of Service, unless a shorter period applies under payment network rules or your settings. Saved payment methods remain on file through our processor until you remove them, subject to our requirement that at least one method stay on file while you have eligible open orders or adjustment obligations. Full payment card data is processed by the processor and is not routinely stored by us. Records of carrier adjustment charges (amounts, dates, reasons, and related order details) may be retained with your order history for billing reconciliation, support, and dispute resolution.

Amazon buyer information. Personally identifiable information about buyers that we receive from Amazon through Selling Partner APIs or related Amazon shipping programs (for example, ship-to name, address, or phone when supplied for rating, label purchase, or delivery) is used only for those shipping operations and related support. Unless a longer period is required by law or to resolve an open claim, carrier adjustment, or legal hold, we delete or irreversibly anonymize that buyer-identifying information within thirty (30) days after the shipment is delivered or, if no shipment is completed, after the order is cancelled or otherwise finalized in our systems without a delivery. If Amazon requires a shorter retention period for specific data elements, we follow Amazon's requirement for those elements. For orders we identify as holding Amazon buyer data, we use automated processes in our production systems to redact or remove those details from stored order records when the retention period has passed.

We retain merchant account records (for example, your business contact information and account settings) and non-identifying operational metadata for as long as needed to provide services, meet legal and accounting obligations, resolve disputes, and understand usage trends, subject to your closure or deletion requests where applicable law provides a right to deletion. We may also retain order and transaction history indefinitely where needed for our legitimate interests in evaluating shipping trends, repeat usage, support history, fraud prevention, accounting, and product improvement, except where law requires a shorter period or a valid deletion request applies to personal information that can be deleted without impairing those interests.

For non-Amazon shipment-related details used for operations, billing reconciliation, and claims, we may retain information for about 90 days (or longer where required for open claims, carrier adjustments, or legal holds). International shipments may require itinerary or identification details for customs; those items are retained only as long as needed for those purposes. Carrier retention is governed by the carriers' own policies—for example, see UPS , USPS , and FedEx privacy notices.

We retain contact information while you have an account or an ongoing relationship with us and may retain marketing lists until you unsubscribe or we determine communications are no longer appropriate. See "How to Contact Us."

Depending on the features you use, we engage the categories of service providers below to host and operate NitroMule, process payments, send email, validate addresses, authenticate users, and complete shipments. They may process personal information only as needed to provide their services to us (or, for integrations you enable, as needed to carry out your instructions) and subject to appropriate confidentiality and security obligations.

Google Cloud (for example Cloud Run, Cloud SQL or managed PostgreSQL, Secret Manager, logging, Cloud Storage) — hosting, database, secrets, operational logs, and file storage.
Google (Sign-In, Places / address helpers, Analytics where consented, reCAPTCHA) — authentication, address assistance, usage measurement, and bot protection.
Stripe — payments, saved payment methods, and payment webhooks, including off-session charges for authorized carrier adjustments.
Parcel carriers and logistics partners (for example UPS, USPS, FedEx, and Amazon Logistics when enabled) — rating, label purchase, pickup, delivery, and tracking. Merchant-connected carrier accounts use the same carriers under your credentials.
Coverage / declared-value partners (for example UPS Capital when enabled) — optional coverage quotes or binds related to eligible shipments.
Smarty (or similar address providers) — address autocomplete and validation.
Shopify — optional store connection for order import, products, fulfillment, and related features you enable.
WooCommerce / WordPress hosts — optional store connection via our plugin and the merchant's store hosting environment.
eBay — optional order import or fulfillment notifications when you use eBay-related features.
Amazon (Selling Partner APIs and related logistics or carrier interfaces) — data source and shipping execution when you connect Amazon.
SMTP or email delivery providers — transactional and, where configured, portal-branded email.

We do not sell personal information obtained through Amazon or our shipping services to third parties. We review this list when we onboard a new subprocessor category or materially change our stack; the current summary is maintained in this Policy.

11. What You Can Do To Manage Your Privacy — Cookies and Similar Technologies

Cookies are small files placed on your device by a site or provider to recognize your browser and remember certain information. We use cookies and similar technologies to:

Operate sessions, remember preferences, and support checkout and logged-in experiences (necessary / functional);
Maintain security and detect abuse; and
Measure site traffic and interactions where you consent to performance cookies; we may use authorized analytics vendors (such as Google Analytics) to help us understand usage. Targeting or advertising cookies, if enabled in your consent choices, may support remarketing as described below.

Where we present a cookie preference banner, you can adjust categories. Some browsers send Global Privacy Control (GPC) signals; where we honor GPC, we treat it as a request to opt out of sale or sharing of personal information for targeted advertising as those terms are defined under applicable U.S. state privacy laws.

12. Other Tracking Technologies

We and third parties we authorize may use web beacons, pixels, tags, remarketing tags, and similar technologies—alone or with cookies—to understand whether pages or emails were viewed, to measure campaign performance, to support security, and to help deliver or measure personalized advertising where permitted by your consent choices. A web beacon can indicate whether you visited a page or opened an email. Pixel or remarketing tags are often used with cookies. On some devices, other anonymous identifiers may be used for similar purposes when cookies are unavailable.

You can limit tracking in several ways, including:

Adjusting your browser or device settings to block or alert you about cookies;
Using our cookie preference controls where available;
Reviewing Google's privacy materials if you use Google services in connection with our site: https://policies.google.com/privacy ;
Using privacy tools or browser extensions from reputable providers; and
Visiting www.aboutads.info/choices for information about interest-based advertising opt-outs where available.

Restricting cookies may limit some features. If you opt out of personalized ads, you may still see generic advertisements.

We may share personal information with third parties where consistent with this Policy and applicable law, including in the following situations:

Carriers and shipping partners. We transmit shipment and contact details to carriers and logistics partners as needed to rate, book, transport, pick up, and deliver shipments (for example, name, addresses, tracking numbers, label data, ship date, pickup confirmation numbers, and package attributes). Where you or a portal operator request packing, assembly, local pickup/drop-off, or event-related fulfillment, we may share necessary shipping and contact details with those partners (for example, a packing shop or event organizer) to complete the service you requested.

Payment processors. We share payment-related data with processors such as Stripe to authorize, capture, and refund charges, to save payment methods, to process authorized carrier adjustments (including off-session charges), and to reduce fraud.

Customer communications and hosting. We use vendors for email, hosting, ticketing, chat, telephony, and internal tools. Those vendors access information only as needed to provide their services and under contractual obligations.

Integrations you enable. When you connect external accounts (stores, marketplaces, or carrier accounts) or send webhook events to URLs you configure, or when quote embeds run on sites you control, information is shared with those third parties according to your instructions and their policies. You are responsible for the destinations you choose.

Analytics and advertising. We may use analytics services (such as Google Analytics) to understand how our services are used when performance cookies are allowed. Information about how Google Analytics collects and processes data is available at https://support.google.com/analytics/answer/6004245?hl=en . Where we or our partners use advertising or remarketing technologies, those partners may collect information as described in their policies—for example, Google's Advertising Principles: https://policies.google.com/technologies/ads . See also "How And Why Do We Use Cookies" and "Other Data Collection Technologies."

Marketing services. We may use third-party email or campaign tools to send newsletters or promotional messages; you may unsubscribe as described in messages or below.

Legal compliance, safety, and security. We may disclose information to comply with law, respond to lawful requests, protect rights and safety, enforce our Terms of Service or other agreements, collect amounts owed, and prevent fraud or abuse.

Business transactions. If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred subject to appropriate confidentiality and use restrictions, and we may retain a copy as permitted by law.

15. Syncing, Linking, and Third-Party Sites

This Privacy Policy applies to information collected through NitroMule services we operate. Our site may link to third-party sites, apps, ads, or social networks ("Third-Party Sites"). We may maintain pages on social platforms (such as Facebook, Instagram, or X). When you interact with us there, the platform's privacy policy governs its collection and use. We do not control Third-Party Sites or platforms and are not responsible for their practices; please review their policies and settings.

If we receive information about you from a Third-Party Site or social platform, we will treat it under this Policy when it is stored in our systems.

16. Country / U.S. State-Specific Privacy Rights — California

Under California's "Shine the Light" law, California residents who provide personal information when obtaining products or services for personal, family, or household use may request, once per calendar year, information about certain categories of personal information disclosed to third parties for their direct marketing purposes. To make a request, email admin@nitromule.com with "Request for California Privacy Information" in the subject line. Not all sharing is covered by this law; we will respond with information on covered sharing, if any.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, may provide additional rights to know, access, correct, and delete personal information, and to opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising. We do not sell personal information for money. If we engage in "sharing" for advertising as those terms are defined by law, you may opt out via cookie controls, GPC where honored, or by emailing us with "California Privacy Rights" in the subject line. We will not discriminate against you for exercising privacy rights. Some information we process for shipping and fraud prevention may be exempt or limited under applicable exceptions (for example, completing a transaction you requested).

17. Collection and Use of Children's Personal Information

We do not knowingly collect personal information from children under 13. Our website and services are a general audience offering intended for users 18 and older and are not directed to children. If you are under 18, you should not use our services or submit personal information to us. If you believe we have collected information from a child under 13, contact us and we will seek to delete it.

18. International Data Transfers

Processing in the United States. We are based in the United States. If you access our services from other countries, your information may be transferred to, stored in, and processed in the United States and other locations where we or our vendors operate. Those countries may have different data protection rules than your own.

European Residents. If you reside in the European Economic Area, Switzerland, or the United Kingdom, you may have rights under the GDPR or similar laws. We and our service providers process personal data as needed to take steps at your request before a contract, to perform a contract with you, to comply with law, to pursue legitimate interests (such as security and improvement), and to contact you for marketing where permitted (with opt-out). As permitted by the GDPR, you may have the right to know whether we process your personal data and what we hold; to have personal data corrected; to object to certain processing; to ask us to delete personal data in certain circumstances (for example, when it is no longer necessary for the purposes collected); to receive copies of personal data you provided in a commonly used, machine-readable format; and to lodge a complaint with a supervisory authority in your Member State of residence, work, or the place of the alleged infringement. This summary is not exhaustive; see https://www.eugdpr.org/ for general GDPR information. Contact us to exercise applicable rights.

19. How To Contact Us

If you have questions, concerns, or complaints about your personal information or this Privacy Policy, contact us at admin@nitromule.com . To unsubscribe from marketing emails, use the unsubscribe link in the message or email us with "Unsubscribe" in the subject line.

20. Changes To This Policy

From time to time we may change or update this Policy. We reserve the right to make changes or updates at any time. If we make material changes to the way we process your Personal Information, we will use reasonable efforts to provide notice via the Services or by other channels (such as email or posting on the Site) before the change becomes effective. We encourage you to periodically review this page for the latest information on our privacy practices.

Unless a later date is indicated, changes are generally effective seven (7) days after posting as described in Section 2 of the Terms of Service. Your continued use of the Services after changes become effective constitutes acceptance of the revised Policy, unless applicable law requires a different process. If you object to any of the changes and no longer wish to use our Services, you may close your account.