Privacy policy: Shipmozo connector

This policy covers the Shipmozo connector for AI assistants (the MCP server at this address, used from Claude and other MCP clients) and the Shipmozo Telegram assistant. Shipmozo's main privacy policy also applies to your Shipmozo account.

What we collect

• Sign-in details. When you connect, you enter your Shipmozo email or phone and password on our sign-in page. We pass them to Shipmozo once to start a session. We never store or log your password.
• Session. Shipmozo returns a session token. We keep it only inside encrypted tokens held by the assistant you connected (and, for Telegram, in encrypted form linked to your chat).
• Account data you ask about. Orders, buyer details, shipments, wallet, remittances and similar data are fetched from Shipmozo when the assistant calls a tool, and returned to that assistant.
• Telegram only: the messages, photos and voice notes you send the Shipmozo Telegram assistant.

How we use it and where it is stored

• Only to carry out what you ask: read your account data, or perform the actions you approve. We do not use it for advertising and we do not sell it.
• The connector itself stores no account data. It keeps a record of used sign-in refresh tokens (random identifiers, no account data) to stop token reuse.
• Telegram: recent conversation text is stored so the assistant can follow the conversation. Photos are not kept after they are read; voice notes are transcribed and only the text is kept.
• Data is stored and processed on Microsoft Azure in India (Central India), and for Telegram AI processing in Azure OpenAI.

Who we share it with

• Shipmozo (our own platform) and, through Shipmozo, the courier partners needed to ship your orders, as when you use the Shipmozo panel.
• The AI assistant you connect. Tool results go to that assistant (for example Anthropic's Claude) and are handled under its own terms and privacy policy.
• Service providers: Microsoft Azure (hosting, storage, Azure OpenAI for the Telegram assistant) and Telegram (message delivery).
• We do not share your data with anyone else, except where required by law.

How long we keep it

• Sessions expire after at most 7 days. Used-token records are deleted when the token would have expired.
• Telegram conversation history is kept until you send /new or /disconnect, and is limited to the most recent messages.
• Operational logs (errors and request metadata, not your account data) are kept for a short period for troubleshooting and security.
• Your Shipmozo account data is retained by Shipmozo under its main privacy policy.

Your choices

• Every action that changes your account needs your approval in the assistant.
• Disconnect at any time: remove the connector in your assistant's settings, or send /disconnect to the Telegram assistant.
• To ask what data we hold or to have it deleted, contact us below.

Contact

Shipmozo, support@shipmozo.com

Last updated: 3 November 2026