Skip to content
NesoTMS

Legal

NesoTMS privacy policy

This policy explains what personal information NesoTMS handles when you visit the website, sign in to the app, contact us, or appear on a shipment, why we handle it, who receives it and what choices you have. We do not sell it and we do not use it for advertising.

Contents14 sections
Effective
Last updated
Provided by
NesoTMS LLC

01Who we are

  1. 1.1

    This privacy policy explains how NesoTMS LLC (NesoTMS, we, us) handles personal information when you visit our website, use the NesoTMS app or NesoTMS Print, contact us, or are a person whose name and address appear on a shipment made with NesoTMS. NesoTMS is shipping software for businesses that use NetSuite.

  2. 1.2

    NesoTMS LLC is a limited liability company organized under the laws of Indiana.

  3. 1.3

    NesoTMS has two roles. For website, account, billing and contact information, we decide why and how the information is used. For shipment and customer information that a company puts into NesoTMS, such as the names, addresses and phone numbers of its recipients, the company decides what goes in and why, and we handle it on the company's behalf as its service provider. If you are a recipient or customer of a company that uses NesoTMS, please ask that company how it uses your information. We will help it answer you.

  4. 1.4

    This policy takes effect on October 8, 2026. It works together with the terms of service and the cookie policy.

02Information we handle

  1. 2.1

    Website visits: your browser's address, browser type, the pages you ask for and the time. Our hosting provider records these in its request logs to deliver and protect the website. The website itself sets no cookies.

  2. 2.2

    Website visit counts: we count visits to the website (not the app) with Vercel Web Analytics. For each page view it records the page's address without anything after a question mark, the site that sent you, your country, and your type of device, browser and operating system. It sets no cookie, stores nothing in your browser and doesn't identify you: Vercel tells visits apart with a value made from the request that it discards every day.

  3. 2.3

    Contact form, the website's chat, waitlist and email: your name, work email address, company, the topic and your message, the website page you sent a chat message from, and anything optional you add, such as whether you use NetSuite and about how many shipments you send a day. We also keep the emails you send us.

  4. 2.4

    Accounts: your email address and name, your company's name, your role (admin or member) and your sign-in activity. Clerk, our sign-in provider, stores them and emails you the six-digit sign-in code.

  5. 2.5

    Company setup: the answers given during first-run setup (such as a range of shipments per month, what you ship, the ship-from country and which ERP you use), which NetSuite records to import and how fields map, saved reports, the company's address book, and print settings.

  6. 2.6

    Connection credentials: the NetSuite token keys and carrier credentials an admin enters. They are encrypted before they are saved and are never shown again.

  7. 2.7

    Shipment information: recipients' names, companies, addresses, phone numbers and email addresses; package details; customs information; tracking numbers and costs; label files and carrier documents such as commercial invoices and bills of lading; and the status updates carriers report. For a NetSuite order, NesoTMS reads these from NetSuite when someone opens the order. For Quick ship, a company's team types or imports them.

  8. 2.8

    Printing: the name and operating system of each packing computer a company connects, the printers it reports, and the print jobs sent to it.

  9. 2.9

    Billing: the company's plan and add-ons, its billing contact, and the Stripe customer and subscription they belong to. Card details are entered on Stripe's pages and are not seen by NesoTMS.

  10. 2.10

    Support: what you tell us when you ask for help, and what we do about it. A message from the app's Support chat comes with your name, sign-in email, company, role and the page of the app you were on, so we can answer without asking again.

  11. 2.11

    Technical logs: our servers record what ran (the command, the company's ID, the result and the timing), not names, addresses, tracking numbers, keys or request bodies.

  12. 2.12

    Browser storage: the app keeps some preferences in your browser, and a small number of cookies keep you signed in. The cookie policy lists each one.

03Where it comes from

  1. 3.1

    From you, when you sign in, set up a company, fill in a form or write to us.

  2. 3.2

    From the company you work for or ship for: its admins and colleagues, its NetSuite account and its address book.

  3. 3.3

    From the carriers a company ships with, which send tracking and status updates for its labels.

  4. 3.4

    From Clerk and Stripe, which tell us about accounts, companies and the state of a subscription.

04How we use information

  1. 4.1

    To sign you in, and to keep each company's workspace separate from every other company's.

  2. 4.2

    To run the service for a company: to rate, buy, print and void labels with the carrier accounts it connects, to book freight, to record shipments and to update NetSuite.

  3. 4.3

    To check shipment status with UPS and FedEx about every 15 minutes and show it in the dashboard.

  4. 4.4

    To bill a company through Stripe and to manage plan limits.

  5. 4.5

    To keep the service secure and working, to find and fix problems and to prevent abuse and fraud.

  6. 4.6

    To answer your questions, handle waitlist requests and send you service messages, such as sign-in codes, billing and security notices and replies to your messages.

  7. 4.7

    To meet legal obligations, and to protect our rights and those of our customers.

  8. 4.8

    To measure and improve the service using counts and other information that does not identify a company or a person.

05Selling, advertising and tracking

Here is what we do not do:

  1. 5.1

    We do not sell personal information, and we do not share it for advertising across other companies' sites or apps.

  2. 5.2

    We do not use shipment or customer information for advertising or marketing, ours or anyone else's, and we do not build advertising profiles.

  3. 5.3

    We do not use advertising or tracking tools, and we do not set advertising, analytics or tracking cookies. The only analytics is the cookie-free visit count on the website described above; the app has none.

  4. 5.4

    We do not use shipment or customer information for anything except providing and securing the service for the company that owns it, as the terms of service describe.

06Who receives information

These providers help us run NesoTMS and handle information for us under their own terms. The carriers and NetSuite are chosen and paid for by the company that ships.

Who receives information
ProviderWhat forWhat it receives
VercelHosts the website and the app's web serverRequests to the website and the app, what the app sends and receives for you, and the website's visit counts (Vercel Web Analytics).
ClerkAccounts, companies, members and sign-inYour email address, name, company name, role and sign-in activity. It sends the sign-in code email.
SupabaseDatabase and private file storageOnboarding answers, saved reports, shipment history and label files.
Our cloud hosting providerHosts the NesoTMS shipping engine and its databaseEncrypted credentials, the purchase record, Quick ship orders, the address book, billing state and printing computers.
StripeSubscription billing and paymentsThe billing contact, company name and plan, and payment details entered on Stripe's pages.
ResendSends the contact form and chat messages to our mailboxWhat you type into the contact form or a chat (name, email, company, topic and message) and the page you sent it from. From the app's Support chat, also your name, sign-in email, company and role.
Google address validation, when enabledChecks that an address is deliverableThe address being checked. It is used only if address checking is turned on for the company.
Google Maps, when someone opens a mapShows a delivery address on a map in the appThe delivery address, only when someone chooses to view it on a map.
The company's carriers, such as UPS, FedEx and USPSRates, labels, tracking and freight bookings, on the company's own accountsThe shipment details a carrier needs: ship-from and ship-to names, addresses and phone numbers, package details and, for international shipments, customs information.
NetSuite (Oracle)The company's ERPTracking numbers, package details, shipping cost and ship status written back to the company's records. NesoTMS reads orders from it.

A carrier or NetSuite receives information through the company's own account and handles it under its own privacy practices.

07Other disclosures

  1. 7.1

    We may disclose information when the law requires it, for example in answer to a valid legal request, and when it is needed to protect the rights, property or safety of NesoTMS, our customers or others.

  2. 7.2

    If NesoTMS is part of a merger, sale or reorganization, information may be transferred to the new owner, who must honor this policy or tell you about any change.

08International transfers

  1. 8.1

    NesoTMS and its providers process information in the United States and may do so in other countries. If you are in the European Economic Area, the United Kingdom or Switzerland, your information is transferred to countries whose data protection rules may differ from yours. Where the law requires a transfer mechanism, we use one that the law recognizes.

09Retention

  1. 9.1

    Account and company information is kept while the account is active.

  2. 9.2

    Shipment history and label files are kept while the company has an account, because reports, reprints and voids depend on them. A voided label is marked voided and stays on record.

  3. 9.3

    After a company cancels, we keep its data for at least 30 days so that it can export it. After that, the company can ask us to delete it, and we will delete it within a reasonable time, usually within 30 days of the request. We may also delete the data of a cancelled company after that period.

  4. 9.4

    We keep what the law requires us to keep, such as invoices and tax records, for as long as it requires. Copies in backups age out on the backups' normal schedule.

  5. 9.5

    Print job records are removed after 30 days. The cleanup runs when the company next prints.

  6. 9.6

    Emails, contact form and chat messages are kept for as long as we need them to answer you and to keep our records.

  7. 9.7

    Logs are kept only as long as we need them to run and secure the service.

10Security

  1. 10.1

    NetSuite keys and carrier credentials are encrypted before they are saved and are never shown again. Each company's data is kept apart from every other company's, and the roles in the app limit who can change settings. The security page explains these measures. No system is perfectly secure, and we cannot promise that information will never be reached by someone who should not have it.

11Your rights and choices

  1. 11.1

    You can ask us to tell you what information we hold about you, to correct it, to delete it, or to give you a copy. You can also ask us to limit or stop how we use it. Write to info@nesotms.com. We may need to confirm who you are first. You can ask someone you authorize to write for you.

  2. 11.2

    We answer within the time the law requires, which is usually 30 to 45 days.

  3. 11.3

    If your information is in a company's shipments, the company decides what happens to it. We will pass your request to the company or help it answer you.

  4. 11.4

    Admins can remove carrier accounts, the NetSuite connection and printing computers in the app at any time, and can invite or remove the people in their company.

  5. 11.5

    If you are in the European Economic Area, the United Kingdom or Switzerland, you have the rights to access, correct, erase, restrict and object to the use of your information, to receive it in a portable form, and to complain to your data protection authority. We use your information to provide the service under our agreement with your company, for our legitimate interests in securing and improving the service and answering you, and to meet our legal obligations.

  6. 11.6

    If you live in California or another US state with a privacy law, you have the rights that law gives you, such as to know what we hold, to correct or delete it, and to opt out of its sale or sharing. We do not sell or share personal information, and we do not treat you differently for asking.

  7. 11.7

    You can ask us to stop sending messages that are not about your account, billing or security.

12Children

  1. 12.1

    NesoTMS is for businesses and is not directed to children. We do not knowingly collect information from anyone under 16. If you think a child has given us information, write to us and we will delete it.

13Changes to this policy

  1. 13.1

    We may update this policy. We will post the new version on this page with a new last-updated date. If a change materially affects how we use personal information, we will email the company's admins or show a notice in the app before it takes effect.

14Contact

  1. 14.1

    Write to NesoTMS LLC at info@nesotms.com with any privacy question or request.