Privacy Policy - ShieldMailBox

This policy explains how ShieldMailBox collects, uses, stores, and shares personal information when you use our virtual mailbox services. It should be read with our Terms of Service.

Information we collect

Account and contact information, including email address, phone number, postal code, and registered personal or business names.
Mailbox and service information, including mailbox ID, subscription plan, mail-item logs, scan, forwarding, pickup, and courier-tracking instructions.
Digital scan files that you request us to upload.
Technical and security information needed to operate the site, authenticate accounts, prevent abuse, and maintain service logs.

We do not receive or store full payment-card numbers. Payment information is handled by Stripe during checkout.

How we use information

We use personal information to create and administer mailboxes, handle mail according to your instructions, process subscriptions, communicate service updates, respond to support requests, protect the service, and meet legal obligations. We do not sell or rent personal information.

Service providers and storage

We use service providers to operate ShieldMailBox. Depending on the service, they may process limited personal information only as needed to provide their services:

MongoDB Atlas (Canada Central / Toronto): stores primary application records, mailbox data, and requested scan files.
Render: hosts the ShieldMailBox application.
Stripe: processes subscription payments and checkout.
Resend: sends transactional service emails, such as verification and mail-status notifications.
Google: provides site analytics and map content where enabled.
Delivery carriers: receive the information necessary to fulfil forwarding instructions.

Data residency and cross-border processing. Our primary application database, including account profiles, mailbox logs, and requested scan files, is hosted in our MongoDB Atlas Canada Central (Toronto) deployment. Some service providers used to operate the service—such as payment, email, analytics, application-hosting, and delivery providers—may process limited information in other jurisdictions. That information may be subject to the laws of those jurisdictions. We remain responsible for information under our control and use providers to operate the service.

Security

We use measures designed to protect information appropriate to its sensitivity, including encrypted service connections, hashed passwords, authenticated access controls, role-based staff access, and restricted database network access. No system can guarantee absolute security; please use a unique, strong password and contact us promptly if you believe your account has been compromised.

Retention

We retain account and mailbox records for as long as needed to provide the service, meet legal and operational requirements, resolve disputes, and enforce our agreements. Digital scan files uploaded to a mailbox are scheduled for deletion seven days after upload. Download any scan you need before it is deleted.

Your choices and requests

You may review and update certain account information in your dashboard. To request access to, correction of, or deletion of personal information, or to ask a privacy question, contact us using the details below. We may need to verify your identity before completing a request and may retain information where required or permitted by law.

Contact and complaints

ShieldMailBox Privacy Contact
Email: support@shieldmailbox.ca

If you are not satisfied with our response, you may have the right to contact the applicable privacy regulator, including the Office of the Privacy Commissioner of Canada.