Privacy policy

What Sendora collects, why, where it goes, and how long we keep it.

Who we are

Sendora is a shipping service operated by Meta Studios Creative Agency k.k (株式会社), Tobu Bldg. 5F, 6-28-9 Jingumae, Shibuya-ku, Tokyo 150-0001, Japan (“Sendora”, “we”). Questions about this policy or your data: galarcon@metastudios.jp.

Who this covers

• Sellers who create a Sendora account and connect a store.
• Buyers of those sellers, whose order details reach us only because a seller connected their store.
• Visitors to this website.

What we collect

• Seller account data — name, email and profile picture from Google when you sign in with Google, business name and address, and the store connections you authorize (each store’s access token, stored encrypted).
• Order data from connected stores — order number, items, quantities, weights, declared values, and the buyer’s name, shipping address and (where the marketplace provides it for shipping) phone number.
• Shipment data — packaging, carrier, label and customs-declaration details, tracking numbers.
• Your product customs details — the English customs description, HS code, country of origin and customs SKU you confirm for each product, kept so you only confirm them once.
• Technical data — server logs needed to run and secure the service (time, endpoint, error codes). We do not run advertising trackers.

Why we use it

Only to provide the service you asked for: importing paid orders, preparing shipping labels and customs declarations, sending tracking back to your store, billing you, and supporting you. Buyer data is used solely to ship that buyer’s order.

What we never do

• Sell or rent personal data, or use it for advertising or marketing.
• Ask for your marketplace passwords — stores connect through each platform’s official authorization (OAuth / Login with Amazon).
• Use marketplace or buyer data to train AI or machine-learning models.
• Contact your buyers ourselves.
• Store payment card numbers.

Sendora apps for iPhone and Mac

The Sendora apps are companions to your Sendora account. They sign in with a one-time pairing code — never a password.

• What the apps store on your device: a device key in the Keychain (so the app stays signed in), your printer choice and settings, and which orders you have already seen or printed. Orders, buyer details and label files are kept in memory only while the app is open, and are not saved on the device.
• What Sendora keeps about each device: the device name and type, app version, when it was last used, its printer name and, if you allow notifications, a push-notification token. You can disconnect a device at any time in Settings → Apps & printing, which deletes its key.
• Camera (iPhone): used only when you choose to scan a tracking-number barcode. Images are processed on the device and never sent to us.
• Printing: label files go straight from Sendora to the printer you chose; nothing is shared with anyone else.
• The apps contain no advertising, analytics or tracking SDKs.

Who we share it with

Only the parties needed to ship an order, each for that purpose alone:

• Carriers and customs providers you choose — when you buy a label, the sender and recipient details, parcel and customs details are sent to Zonos, Inc. (United States), which creates the customs declaration, calculates and prepays duties, and books the shipment with Japan Post Co., Ltd. (Japan), which delivers it with its partner postal operators abroad. Other carriers (e.g. Yamato, Sagawa) receive the same details only if you choose them. When you ask Sendora's assistant to fill in missing customs details, only the product's title, description, price and origin are sent to Anthropic, PBC (United States; Claude AI, which does not use this data to train its models under its commercial terms) or, if your Zonos account offers it, to Zonos's classification service (Zonos Classify) — never the buyer's details. When you add a photo of a Japan Post receipt, the photo is sent to Anthropic to read the item numbers, weights and postage; Sendora keeps only those figures, not the photo. For US shipments, your products' customs details are also saved in your Zonos customs catalog, as US customs entries require.
• Payments — subscriptions are paid on Stripe's checkout. Stripe (Stripe, Inc. and Stripe Japan K.K.) receives your card and billing details directly; Sendora stores only a Stripe customer ID, your plan and its status, and never sees or stores card numbers. If you choose to be billed through Shopify, Shopify handles the charge and Sendora stores only the Shopify subscription ID and its status. When you pay on our website before creating an account, Stripe shows us a masked version of your email on the confirmation page so you can link the plan to your Sendora account. To keep the free trial to one per seller, we keep a one-way keyed hash of the card's Stripe fingerprint and of each connected store's ID (never the card number or store name).
• Parcel tracking — to show carrier scans and mark parcels delivered, the tracking number, destination country and order number (no buyer name or address) are sent to Ship24, a parcel-tracking provider, which looks them up with the carrier. Scan history is kept for 120 days.
• Domestic carriers you use — for orders shipped within Japan, Sendora creates a file with the buyer's name, address and phone for you to upload to your own carrier system (Yamato B2クラウド, Sagawa e飛伝, Japan Post ゆうプリ or クリックポスト). The file is generated on request and not stored by Sendora; only the tracking numbers you import back are kept.
• Your connected marketplaces (Etsy, Shopify, Amazon) — receive tracking numbers and shipment status.
• Infrastructure providers that host the service on our behalf under confidentiality and security obligations, currently Netlify, Inc. (United States, hosting), Supabase, Inc. (United States; seller accounts and encrypted store connections, stored in its Tokyo, Japan region), GitHub, Inc. (United States; encrypted daily backups of that database, kept 30 days) and Google LLC (United States, sign-in with Google — only when you choose to sign in). Fonts are served from Sendora’s own site, so browsing Sendora does not send your IP address to Google.
• Authorities, where Japanese or other applicable law requires it.

International transfers

Some of the providers above are located outside Japan, mainly in the United States. Under Japan’s Act on the Protection of Personal Information (APPI), we transfer data abroad only to providers that maintain protection equivalent to APPI standards, or as needed to deliver the international shipment you requested. On request we will tell you which providers hold your data and where.

How long we keep it

• Sendora reads orders from your connected stores live, each time you open the console, and does not keep a copy of them.
• When you buy a label, Sendora keeps the label file (which shows the buyer’s name and address) encrypted so you can reprint it, together with the tracking number and customs summary. The label file is deleted no later than 30 days after delivery, or 60 days after the label was created if delivery is never confirmed, unless a law requires us to keep it longer — and then only for that legal purpose. The tracking number, service and costs (no buyer details) stay in your shipment history.
• Your ship-from address and your Zonos account key (stored encrypted) are kept until you change or remove them in Settings, or close your account.
• If a seller disconnects a store, uninstalls Sendora from Shopify, or closes their account, that store’s saved access is deleted immediately and any other data from that store within 30 days, including backups. Shopify data-deletion requests (customer and shop redaction) are completed within 30 days.
• Seller account and billing records are kept for as long as the account is open and then as long as Japanese tax and accounting law requires.

How we protect it

Encryption in transit (HTTPS/TLS) everywhere, encryption at rest for any stored personal data, least-privilege access, and secrets kept in server-side secret stores. Details are on our Security page.

Your rights

You can ask us to disclose, correct, stop using or delete your personal data, as provided by APPI and other laws that apply to you. Buyers may contact the seller they bought from, or us directly. Write to galarcon@metastudios.jp; we reply within 14 days.

Cookies

This website uses only storage that it needs to work (for example, your language and cookie choice). See Cookies.

Changes

If we change this policy in a way that matters, we will update this page and tell account holders by email before the change applies.

Last updated: October 29, 2026.