Privacy Policy

1Information We Collect

We collect information in the following categories.

1.1Information You Provide Directly

• Account registration details (name, email, company name)
• Contact information
• Support requests and communications
• Configuration settings and preferences

1.2Information Collected Automatically

When you use the Services, we may automatically collect:

• IP address
• Device type, browser, and operating system
• Log files, timestamps, and usage activity
• Cookies and similar technologies (see Section 5)

1.3Information from Third-Party Platforms

If you connect third-party services (for example, ecommerce platforms or carriers), we may receive:

• Order and shipment metadata
• Store identifiers
• Fulfillment- or label-related data

BUKU does not control the privacy practices of third-party platforms.

2How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Services
• Process transactions and generate shipping-related outputs
• Communicate with you, including support, service updates, and notices
• Improve and optimize our products
• Monitor usage, security, and compliance
• Create aggregated or anonymized analytics
• Comply with our legal obligations

We do not sell personal information.

3How We Share Information

We share information only as described below.

3.1Service Providers

With vendors who help us operate the Services—such as hosting, analytics, and support providers—under confidentiality obligations.

3.2Third-Party Integrations

When you choose to connect third-party platforms, data may be shared as required to enable the functionality you request.

3.3Legal & Compliance

When required to comply with applicable law, regulation, subpoena, or other legal process.

3.4Business Transfers

In connection with a merger, acquisition, financing, or sale of assets.

4Data Retention

We retain information:

• For as long as your account is active
• As needed to provide the Services
• As required to comply with legal, accounting, or regulatory obligations

Information may be retained in anonymized or aggregated form indefinitely.

5Cookies and Tracking Technologies

BUKU uses cookies and similar technologies to:

• Authenticate sessions
• Remember preferences
• Analyze usage and performance

You may control cookies through your browser settings, though disabling cookies may affect the functionality of the Services.

6Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect information. However:

• No system is completely secure
• We do not guarantee absolute security
• You are responsible for safeguarding your account credentials

7International Data Transfers

BUKU is based in the United States. By using the Services, you acknowledge that your information may be transferred to and processed in the United States and other jurisdictions where data protection laws may differ from those in your country of residence.

8Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access your personal information
• Request correction or deletion
• Object to certain processing
• Withdraw consent where applicable

You may submit requests using the contact information in Section 11.

9Children’s Privacy

The Services are not intended for individuals under 18 years of age. BUKU does not knowingly collect personal information from children.

10Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will communicate material changes through the Services or by other reasonable means. Your continued use of the Services after an update constitutes acceptance of the revised policy.

11Contact Information

For questions or requests regarding this Privacy Policy, please contact us:

12GDPR Privacy Rights (EEA & UK Residents)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (“GDPR”).

12.1Your GDPR Rights

You may have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Erase your personal data (the “right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time where processing is based on consent

12.2Lawful Bases for Processing

BUKU processes personal data under one or more of the following lawful bases:

• Performance of a contract
• Legitimate business interests
• Compliance with legal obligations
• Consent, where required

12.3International Transfers

Personal data may be transferred outside the EEA or UK, including to the United States. Where required, BUKU relies on appropriate safeguards such as standard contractual clauses or other lawful transfer mechanisms.

12.4Exercising Your GDPR Rights

You may submit requests using the contact information in Section 11. We may require verification of your identity before processing a request. You also have the right to lodge a complaint with your local data protection authority.

13California Privacy Rights (CCPA / CPRA)

This section applies to California residents and is provided in accordance with the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”).

13.1Categories of Personal Information Collected

In the past 12 months, BUKU may have collected the following categories of personal information:

• Identifiers (name, email address, IP address)
• Commercial information (account usage and service interactions)
• Internet or network activity (logs, device data)
• Professional or employment-related information (business account details)

13.2Use of Personal Information

We use personal information for:

• Providing and operating the Services
• Security and fraud prevention
• Customer support
• Product improvement and analytics
• Legal and compliance purposes

13.3No Sale or Sharing of Personal Information

13.4Your California Rights

You may have the right to:

• Know what personal information we collect, use, or disclose
• Request deletion of your personal information
• Correct inaccurate personal information
• Limit the use of sensitive personal information, where applicable
• Not be discriminated against for exercising your privacy rights

13.5Submitting Requests

You may submit requests using the contact information in Section 11. We will verify your identity before fulfilling a request, as permitted by law. Authorized agents may submit requests on your behalf with proper documentation.

14Data Processing Role Clarification

For the purposes of applicable data protection laws:

• BUKU acts as a data processor for customer shipment and order data
• BUKU acts as a data controller for account, billing, and website usage data

A Data Processing Addendum (DPA) may be made available upon request for enterprise customers.