Policy · Last updated 20 July 2026

Privacy Policy

This policy explains how CRYSTALBALL123 LTD ("we", "us"), the operator of ShipSeer, collects, uses, shares and protects personal data when you use our shipping-planning software and website at crystalbball123.shop.

1. Who is responsible for your data

CRYSTALBALL123 LTD is the data controller for personal data processed through ShipSeer. You can reach us about privacy at support@crystalbball123.shop, by phone on +44 7364811640, or by post at 3 The Stables, Monifieth, Dundee, Scotland, DD5 4GB. Our services are governed by the laws of England and Wales.

2. What we collect

  • Account data: name, email address and password credentials you create.
  • Subscription and billing data: plan, billing status, and the last four digits and card brand supplied by our payment processor. We never receive or store your full card number.
  • Workspace inputs: the order descriptions you type into the planner and any product or box photos you upload.
  • Generated output: the shipping plans, packing visuals, reels and Dispatch Pack exports created for you.
  • Support data: messages, topics and enquiry details you send through our contact forms.
  • Technical data: IP address, device and browser type, and pages viewed, collected through cookies and server logs.

3. Collection sources

  • Directly from you when you register, subscribe, enter user inputs, upload files, use example data or contact us.
  • Automatically from your device through cookies, similar technologies and server logs.
  • From Stripe or PayPal when the payment method shown at checkout confirms subscription, payment, refund or dispute status.
  • From our hosting, database, storage, email and AI providers when they return service, delivery or security records generated while processing your request.

4. Why we use it and our legal bases

  • To provide the service — generate plans, visuals, reels and exports (performance of a contract).
  • To take payment and manage subscriptions (performance of a contract).
  • To provide support and respond to enquiries (legitimate interests / contract).
  • To secure, maintain and improve the service and prevent abuse (legitimate interests).
  • To send service and billing notices (contract) and, where required, consent-based updates.
  • To meet legal, tax and accounting obligations (legal obligation).

5. Payment provider boundary

Payments are processed by Stripe or PayPal according to the payment method presented at checkout. Card or wallet details are entered in the selected provider's hosted payment surface and transmitted directly to that provider. Neither CRYSTALBALL123 LTD nor ShipSeer receives, processes or stores your full card number, CVC or complete payment credentials. We receive only a payment token and limited metadata such as card brand, last four digits, billing country and payment status needed to manage your subscription, refunds and disputes.

6. User inputs, files and generated outputs

  • User inputs include order descriptions, destinations, weights, declared values, courier preferences and packing instructions entered in the workspace.
  • Uploaded product or box photos and example data are processed only to create the requested shipping plans, packing visuals, reels and Dispatch Pack exports.
  • Generated outputs and workspace history are stored for account access; uploaded files and example data are cleared from active processing cache by default after 30 days unless you delete them sooner or ask us to retain them for support.
  • We do not use or authorise our processors to use your user inputs, uploads or generated outputs to train general-purpose AI models.
  • You can delete workspace items through available account controls or request deletion of your history, uploads and generated outputs at any time by contacting us.

7. Who we share it with

We share data only with processors that help us run the service, under contract and only as needed:

  • Hosting and delivery: our cloud hosting and content-delivery provider (Vercel).
  • Payments: Stripe, for subscription billing and fraud prevention.
  • Database and storage: our managed database and file-storage provider for accounts, subscriptions, workspace history and generated assets.
  • Email: our transactional email provider for service and support messages.
  • AI provider: our contracted model provider receives the minimum user input, instructions and uploaded files needed to produce plan text, images or reels. It acts as a processor for the requested generation and must follow our retention and no-training instructions.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

8. International transfers

Some of our providers process data outside the UK/EEA. Where that happens, we rely on adequacy decisions or Standard Contractual Clauses (and the UK International Data Transfer Addendum) to protect your data to an equivalent standard.

9. How long we keep it

  • Account and subscription records: for the life of your account and up to 7 years afterwards where needed for tax and accounting.
  • Workspace uploads and example files: cleared from active cache by default after 30 days.
  • Support messages: up to 24 months after resolution.
  • Server and security logs: typically up to 12 months.

10. Security

We use encryption in transit, access controls, and reputable infrastructure providers. Secret payment keys are stored only in the site's own hosting environment and never exposed to the browser. No system is perfectly secure, but we work to protect your data proportionately.

11. Your rights (UK GDPR & EU GDPR)

  • Access a copy of your personal data.
  • Rectify inaccurate data and complete incomplete data.
  • Erase data ('right to be forgotten') where applicable.
  • Restrict or object to certain processing.
  • Data portability for data you provided.
  • Withdraw consent at any time where processing relies on consent.

To exercise any right, email support@crystalbball123.shop. You also have the right to complain to the UK Information Commissioner's Office (ICO) or your local EU supervisory authority.

12. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to access and delete it, to correct it, and to be free from discrimination for exercising these rights. We do not sell or share personal information as those terms are defined under California law. To make a request, email support@crystalbball123.shop.

13. Do Not Sell or Share

We do not sell your personal information and do not share it for cross-context behavioural advertising. There is nothing to opt out of, but you may still contact us with any preference at support@crystalbball123.shop.

14. Cookies and analytics

We use essential cookies to run the site and keep you signed in, and limited analytics to understand usage. See our Cookie Policy for details and choices.

15. Automated decisions and children

ShipSeer generates suggestions with AI, but these are advisory drafts you review and act on — we do not make legally significant automated decisions about you. The service is not intended for children: you must be at least 13 to register, and users aged 13–17 need verifiable consent from a parent or guardian.

16. Changes and contact

We may update this policy; we will change the date below and, for material changes, notify you. Last updated 20 July 2026. Questions or requests: support@crystalbball123.shop · +44 7364811640 · 3 The Stables, Monifieth, Dundee, Scotland, DD5 4GB.