How we handle account and operations data.

Last updated: July 7, 2026

Data we may collect

elsOps may collect account details, company details, user profile data, channel connection metadata, product data, inventory data, order data, shipment data, tracking data, usage events, and support communications required to operate the service.

Marketplace and buyer PII

When a connected marketplace such as Amazon, Walmart, or Shopify provides buyer personally identifiable information, elsOps uses that data only for permitted operational purposes such as order fulfillment, picking, packing, shipping, delivery confirmation, customer support for the related order, fraud prevention, compliance, and security.

Buyer PII may include buyer name, recipient name, delivery address, phone number, email address, gift message, and shipment contact details. We do not sell buyer PII, use it for advertising, use it for unrelated marketing, or use it to train AI models.

How data is used

Data is used to provide the application, sync connected channel information, meter usage, improve reliability, support customers, and meet legal or security obligations.

GDPR and lawful basis

For users and data subjects in the European Economic Area, United Kingdom, or other regions with similar privacy laws, elsOps processes personal data under applicable lawful bases, including performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where required.

elsOps generally acts as a processor or service provider for customer-controlled marketplace and buyer data, and as a controller for account administration, billing, security, website, and direct business contact data.

Regional privacy laws

elsOps initially supports customers targeting North America: the United States, Canada, and Mexico. Depending on the user, customer, buyer, seller, and order location, privacy laws such as U.S. state privacy laws, Canada's PIPEDA and substantially similar provincial laws, and applicable Mexican personal data protection laws may apply. The United Kingdom, Germany, and other countries may be added later.

Additional market-specific details are available in our Regional Privacy Notice.

GDPR data subject rights

Where the General Data Protection Regulation or similar law applies, individuals may request access, correction, deletion, restriction, portability, or objection to processing of their personal data. Some requests may need to be handled through the elsOps customer or marketplace seller that controls the related order data.

We may need to verify the requester's identity and may retain limited information where required for legal, marketplace, fraud prevention, tax, audit, security, dispute, or operational compliance reasons.

PII deletion after shipping

elsOps deletes or irreversibly masks buyer PII after the shipment is completed and tracking has been uploaded or confirmed, unless retention is required by law, marketplace policy, fraud prevention, chargeback handling, tax, audit, or an open support case. Operational records may retain non-PII information such as order identifiers, channel references, SKUs, quantities, timestamps, fulfillment status, and operational usage events.

Access and sharing

Access to buyer PII is restricted to authorized users and service processes that need it to complete the permitted fulfillment workflow. We do not disclose buyer PII to third parties except service providers that help us provide the application, shipping or fulfillment providers selected by the customer, connected marketplaces, legal authorities when required, or other parties with the customer's instruction.

International transfers

If personal data is transferred across borders, elsOps uses appropriate safeguards where required, such as contractual protections, customer instructions, service provider commitments, and technical and organizational security measures.

Security

We use administrative, technical, and organizational controls designed to protect PII, including company-level data separation, role-aware access, encrypted transport, credential protection, logging, monitoring, and restricted operational access.

Contact

Questions about privacy, GDPR rights, or personal data deletion can be sent to support@elsops.com.