Privacy

Written to be read, not to be defensible. If something here is wrong, tell us.

What we store

Your identity, which comes from the auth provider you signed in with: handle, email and avatar.
A Stripe credential you paste, encrypted at rest. We keep only the last four characters in plaintext so you can tell which key is connected.
Revenue events read from Stripe for products you register: amount, currency, transaction date and status.
Your clan membership, check-ins and any post you write.

Card data. It never reaches us — Stripe handles it and we only receive transaction totals.
Your Stripe secret key in plaintext, anywhere we could read it back.
Anything about you that you have not chosen to display. Your exact revenue figure is stored, but what your profile shows is your choice.

We ask for a restricted key with read access only. If a key can move money we reject it.
You can revoke the key from your own Stripe dashboard at any time. Our sync fails immediately and stops reading.
Disconnecting in Shipclan deletes the stored credential and every transaction record attached to it, because revenue we can no longer re-verify is not treated as verified revenue. Your verified total returns to $0. Your profile, posts and clan membership are kept.

Email support@shipclan.com and we delete your account and associated revenue within 30 days.
In-app: Settings › Danger zone lets you disconnect your payment provider and sign out of every device immediately, without contacting anyone.
If you close your account elsewhere, we mark it deleted and stop processing it, rather than removing the record immediately, so your public profile does not leave dangling references.

Deletion requests, corrections and questions about your data: support@shipclan.com

Last updated 14 October 2026.