Privacy Policy
How PACAShield handles customer account data, API telemetry, and public commercial license filings.
1. Account & Billing Information Collected
- Customer Workspace Data: Work email address, company/agency name, selected plan tier, and optional custom domain configuration submitted during self-serve signup.
- Payment Processing: Payment card details and tax identification numbers are collected directly by our Merchant of Record (Polar.sh) or payment processor (Stripe) over TLS; PACAShield never stores raw payment card numbers.
- Operational Telemetry: Hashed visitor identifiers (SHA-256), API key request counters, and error logs used strictly to enforce plan quotas and prevent abuse.
2. Public Commercial Registry Filings
Commercial license numbers, business names, trade names, business addresses, business telephone numbers, business email addresses, principals, and reparation counts displayed in the Service originate from mandatory public statutory disclosures published by the USDA ePACA portal (apps.mrp.usda.gov/public_search). If a licensed business updates its filing with the USDA, our scheduled sync updates the indexed record automatically, or you may request an immediate refresh or record review at support@pacashield.com.
3. Customer Watchlist Confidentiality
Counterparty rosters, CSV uploads, and multi-client VAR workspaces uploaded by a Customer are isolated to that Customer's organization and are never sold, shared with competitors, or disclosed to third parties except as required by law.
4. Data Retention, GDPR & CCPA Rights
Customers and individuals may request access to, correction of, or deletion of their account personal data at any time by emailing support@pacashield.com. Account deletion requests are fulfilled within 14 days.