Privacy Policy

Seven Degrees, LLC (doing business as 7 Degrees Co.), a Delaware limited liability company (“7 Degrees,” “we,” “us”), operates a third-party logistics (3PL) and warehouse management platform. Businesses (“Clients”) store inventory with us and use our platform to manage receiving, inventory, order fulfillment, and shipping.

This policy explains what personal information we handle, why, who we share it with, and what choices are available. It covers our platform at app.7degreesco.com and the integrations that connect it to Clients’ sales channels and carriers.

We handle personal information in two distinct capacities. Which one applies determines who controls the data and where to direct a request.

As a controller — our own users

When staff at 7 Degrees or at a Client company create accounts and use the platform, we decide how that information is used. This policy governs it directly.

As a service provider / processor — our Clients’ customers

When a Client sends us an order to fulfill, that order contains the name, address, phone, and email of the person receiving the shipment. Those individuals are our Clients’ customers, not ours. We process that information solely on the Client’s documented instructions, in order to pick, pack, ship, and track the shipment. We do not sell it, do not use it for advertising, and do not use it to market anything to the recipient.

We do not intentionally collect government identifiers, payment card numbers, or special categories of data such as health information. Please do not place such information into free-text fields.

• Operating the platform — authenticating users, showing inventory and orders, and controlling who can see which Client's data.
• Fulfilling orders — picking, packing, generating shipping labels, and returning tracking information to the Client and their sales channel.
• Communicating — transactional email such as account invitations, password resets, order alerts, and low-stock notifications.
• Billing — calculating storage, pick, pack, and shipping charges and producing invoices.
• Support and troubleshooting — investigating errors reported by Clients.
• Security and integrity — detecting unauthorized access and maintaining audit records.
• Legal compliance — meeting tax, customs, carrier, and regulatory obligations, including record-keeping for regulated products.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

We share information with service providers who perform functions on our behalf. Each receives only what its function requires, and is contractually restricted to using it for that purpose. Our current providers:

We may also disclose information where required by law, to enforce our agreements, to protect the rights and safety of any person, or in connection with a merger, acquisition, or sale of assets — in which case we will provide notice.

We retain information for as long as a Client relationship is active, and afterwards for the period needed to meet legal, tax, accounting, carrier, and regulatory record-keeping obligations. Order, shipment, and billing records are retained because they evidence services performed and are subject to those obligations.

Records are retained until a documented deletion request or the end of the applicable retention period, rather than removed on a fixed automated schedule. Clients may request deletion of their data, and of their customers’ data, by contacting us; we will comply except where we are required to retain records by law.

• Encryption in transit — all traffic to the platform and to third-party APIs uses TLS.
• Encrypted integration credentials — access tokens for connected sales channels and accounting systems are encrypted at rest with AES before storage.
• Database access controls — row-level security is enabled on the database, and sensitive tables are reachable only by server-side processes, not directly by browser clients.
• Role-based access — users see only the data belonging to their own organization; Client portal users cannot access other Clients' records.
• Audit logging — platform activity, webhook events, and integration syncs are logged.

No system is perfectly secure. We cannot guarantee absolute security, and we encourage Clients to use strong, unique passwords and to remove accounts for staff who no longer need access.

We use cookies that are strictly necessary to operate the platform: a session cookie that keeps a user signed in, and short-lived cookies that protect integration authorization flows against cross-site request forgery.

We do not use advertising cookies, and we do not use cookies to track users across other websites. Blocking necessary cookies will prevent signing in.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to appeal a refusal, and not to be discriminated against for exercising these rights.

How to make a request

• Platform users — contact us at info@ship7degrees.com. We will verify your identity before acting.
• Shipment recipients — contact the brand you ordered from. They control that information. If you contact us directly, we will forward your request to the relevant Client.

We do not sell personal information or share it for cross-context behavioral advertising, so there is no opt-out to offer for those activities.

We operate in the United States, and information is processed and stored in the United States. If you access the platform from another country, you understand that information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

The platform is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 18. Shipments of age-restricted products, including alcohol, are fulfilled subject to carrier age-verification requirements and applicable law, and require an adult signature at delivery.

We may update this policy as the platform changes. We will revise the “Last updated” date above, and for material changes we will notify Clients through the platform or by email. Continued use after an update constitutes acceptance of the revised policy.

Questions about this policy or about your information: