Skip to content
ShipScale
Menu

Privacy policy

Last updated: September 2026

Draft. This is a plain-English starting draft and has not yet been reviewed by legal counsel. It will be updated before it is final.

Ship/Scale helps you grow organic revenue using data from your own site and tools. This policy explains what we collect, what we do with it, and the choices you have. The short version: we use your data only to run Ship/Scale for you, we read Google data with read-only access, we encrypt your keys and credentials, and we never sell your data.

Who we are

Ship/Scale (“we”, “us”) operates shipandscale.com and the Ship/Scale app. You can reach us at hello@shipandscale.com. Ship/Scale is run by the same team as PlacementAPI, the link marketplace used for link purchases.

What we collect

  • Account details: your name, email address and profile picture from Sign in with Google, and your settings (budgets, modes, conversion values).
  • Search Console data: the searches your pages appear for, with clicks, impressions, click-through rate and average position.
  • Analytics data (optional): conversions, revenue and visits by landing page from Google Analytics 4, PostHog or Plausible, if you connect them.
  • Your site's pages: the public content of pages we analyse (titles, headings, text, links), and the changes we draft or publish.
  • Credentials: Google OAuth tokens, CMS credentials or API tokens (WordPress, Webflow, Shopify), and any API keys you bring (Anthropic, PlacementAPI, DataForSEO).
  • Link orders: the pages, domains, prices and reasons for each link purchase, and the live-link checks that follow.
  • Billing details: if you subscribe to Pro, payment is handled by our payment processor. We do not store full card numbers.
  • Technical data: logs of requests and errors, needed to keep the service secure and working.

How we use it

We use your data only to provide and improve Ship/Scale for you, which means:

  • ranking your pages by the revenue they could earn and recommending content and link changes;
  • drafting rewrites and, if you choose, publishing them to your CMS;
  • quoting and, within your budget and settings, placing link orders;
  • measuring results and producing your reports;
  • keeping the service secure, supporting you, and billing you where applicable.

We do not sell your data, and we do not use it for advertising.

Google user data

When you sign in with Google, we ask for permission to read your Search Console data (the webmasters.readonly scope) and, if you connect Google Analytics, your Analytics data (the analytics.readonly scope). Both are read-only: we cannot change your Google properties.

Ship/Scale's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

  • we use Google data only to provide and improve the user-facing features of Ship/Scale that you use;
  • we do not use Google data to serve advertising, and we do not sell it;
  • we do not transfer Google data to others except as needed to provide the service to you (for example, to an AI provider to draft a rewrite), to comply with law, or as part of a merger or acquisition with notice to you;
  • people at Ship/Scale do not read your Google data unless you ask us to (for example, for support), it is needed for security or to comply with law, or it has been aggregated and anonymised for internal operations;
  • we do not use Google data to train general-purpose AI models.

You can revoke our access at any time from your Google account permissions.

How we protect it

  • Google tokens, CMS credentials and API keys are encrypted at rest (AES-256-GCM) and are never written to logs in plain text.
  • All data is encrypted in transit (HTTPS).
  • CMS access is used only to publish changes you have approved or allowed on autopilot, and every change is logged and can be rolled back.
  • Access to production systems is limited to people who need it.

Who we share it with

We share data only with service providers that help us run Ship/Scale, and only what each needs:

  • Hosting and database providers, which store and serve the app.
  • Anthropic, which drafts rewrites from your page content and search data, on your key or ours.
  • PlacementAPI, which receives the pages and competitor domains needed to price and place links, and the orders you approve.
  • DataForSEO, which receives the search terms and URLs needed to fetch search results and market data.
  • Our payment processor, for Pro subscriptions.

We may also disclose data if the law requires it. We will tell you about any change to this list that materially affects you.

How long we keep it

We keep your data while your account is open. If you delete a site, we delete its data. If you delete your account, we delete your data and credentials within 30 days, except records we must keep by law (such as invoices). Changes already published to your site and links already placed stay where they are.

Your choices and rights

You can see, export, correct or delete your data, and disconnect any integration, at any time. Depending on where you live (for example, in the UK, the EU or California), you may have further rights, including to object to or restrict processing. To exercise any of these, email hello@shipandscale.com.

Cookies

We use a signed session cookie to keep you logged in. We do not use advertising cookies.

Children

Ship/Scale is a business tool and is not intended for anyone under 16.

Changes to this policy

If we make material changes, we will update the date above and tell you by email or in the app before they take effect.