Effective Date: August 8, 2026
This Privacy Policy describes how we process Personal Data of users of our services. From now on, we'll call it the 'Policy'.
CWILL is a brand name for a family of e-commerce software-as-a-service (SaaS) products and services operated by the following legal entities (each, a 'CWILL Entity' and collectively, 'CWILL,' 'we,' 'us,' or 'our'):
It applies to CWILL's handling of Personal Data collected through our websites located at cwill.com, parcelpanel.com, trustoo.io, loloyal.com, seoant.com, chatwill.ai, ecomsend.com, and trackingmore.com, together with associated web applications, APIs, and related services. From now on, we'll collectively call these the 'Sites' and 'Services.'
We process Personal Data in two capacities:
(a) As a data controller: CWILL independently determines the purposes and means of processing for merchant account administration, billing, security, fraud prevention, legal compliance, customer relationship management, website analytics, and marketing communications. This Policy governs that processing.
(b) As a data processor: When CWILL processes Personal Data on behalf of merchants through the Services (such as end-user shipment data, review content, chat messages, and email campaign data), the merchant is the data controller and CWILL acts as a data processor in accordance with the merchant's instructions. That processing is governed by our Data Processing Agreement.
This Policy is not...
Other resources
Key information about your Personal Data is right here in this Policy. You might also want to take a look at:
Here are some key terms used throughout this Policy:
| Term | Meaning |
|---|---|
| 'End-User' | Any individual who is a customer of a Merchant or whose Personal Data is processed by CWILL as part of the Services provided to a Merchant. |
| 'Merchant' or 'User' | The business entity or individual acting in a professional capacity that subscribes to and uses the Services. |
| 'Personal Data' | Any information relating to an identified or identifiable natural person, including information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked to a particular individual. |
| 'Processing' | Any operation performed on Personal Data, whether automated or not, such as collection, recording, organization, storage, adaptation, retrieval, use, disclosure, dissemination, restriction, erasure, or destruction. |
| 'Sensitive Personal Data' | Personal Data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, data concerning sex life or sexual orientation, or, under applicable US state privacy laws, precise geolocation data, data of known children, or other categories specified by law. |
| 'Services' | All products and services provided by CWILL, including the Sites, CWILL Products, APIs, and related support services. |
| 'User' | Any individual or entity that accesses or interacts with the Sites or Services, including Merchants, their authorized representatives, and visitors to the Sites. When used interchangeably with 'Merchant,' 'User' refers to the business entity or individual acting in a professional capacity that subscribes to and uses the Services. |
By using the Sites or Services, you acknowledge our privacy practices as described in this Policy.
Depending on your country or jurisdiction, you have certain rights over your Personal Data. We provide these rights in accordance with applicable law. You will not receive discriminatory treatment for exercising any of your privacy rights.
The table below explains your rights and how to exercise them.
| It's your right to... | How? |
|---|---|
| Be informed about how your Personal Data is processed. | We inform you through this Policy and by answering your specific questions when you contact us. |
| Access your Personal Data. Request to know the categories and specific pieces of Personal Data we have collected, the sources, the purposes, and the categories of third parties with whom we have shared your data. | Send an email to [email protected], contact our Data Protection Officer at [email protected], or submit a request through our online form. |
| Correct inaccurate Personal Data. | Contact us at [email protected] or [email protected] with the details that need updating. |
| Delete your Personal Data, under certain conditions. | Contact us at [email protected]. Where CWILL processes your Personal Data on behalf of a merchant (as a data processor), please direct your request to the merchant. CWILL will assist the merchant in responding. |
| Object to the processing of your Personal Data. | Contact us at [email protected]. |
| Restrict processing of your Personal Data, under certain conditions. | Contact us at [email protected]. |
| Data portability: receive your Personal Data in a structured, commonly used and machine-readable format, and have the data transmitted to another controller, under specific conditions. | Contact us at [email protected]. |
| Withdraw consent at any time, where processing is based on consent. This does not affect the lawfulness of past processing. | Contact us at [email protected]. |
| Obtain the names of third parties with whom CWILL is sharing Personal Data. | Contact us at [email protected]. |
| Lodge a complaint with the national supervisory authority. | Contact the relevant authority in your jurisdiction. |
| Not be subject to automated decision-making that produces legal or similarly significant effects, to the extent any such decision-making is involved. | Contact us at [email protected]. |
We may require identity verification before responding. We verify identity through email address, subscription details, and domain or store information. Requests will be processed within 30 days, or as required by applicable data protection law.
Where CWILL processes your Personal Data on behalf of a merchant (as a data processor), the merchant is the data controller, and you should direct your request to the merchant. CWILL will assist the merchant in responding. If your information has been communicated to CWILL by a third party and you wish to remove it, you may reach out to us directly.
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you these additional rights:
| Right | Details |
|---|---|
| Right to Know | You may request the categories and specific pieces of Personal Data we have collected, the sources, the business or commercial purposes, and the categories of third parties with whom we have shared your data. |
| Right to Delete | You may request that we delete Personal Data we have collected from you, subject to certain exceptions. |
| Right to Correct | You may request that we correct inaccurate Personal Data. |
| Right to Opt Out of Sale/Sharing | You may opt out of the 'sale' or 'sharing' of your Personal Data for cross-context behavioral advertising. Use our Cookie Settings or submit a request at [email protected]. |
| Right to Limit Use of Sensitive Personal Information | Where applicable, you may limit our use of Sensitive Personal Information to purposes necessary to provide the Services. |
| Right to Non-Discrimination | We will not discriminate against you for exercising your privacy rights. |
CWILL does not sell Personal Data for monetary consideration. Certain third-party analytics tools used on our Sites may constitute 'sharing' for cross-context behavioral advertising under the CCPA. You may opt out through our Cookie Settings. CWILL does not use Personal Data collected through the Services to train large language models.
If you reside in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, or another US state with a comprehensive privacy law, you may have rights similar to those described above, including the right to access, correct, delete, and opt out of targeted advertising and profiling that produces legal or similarly significant effects. To exercise these rights, contact us at [email protected].
If you are a Canadian resident, you have the right to access your Personal Data held by CWILL, to request correction of inaccurate data, and to withdraw consent to processing (subject to legal or contractual restrictions). Your Personal Data may be transferred to foreign jurisdictions for processing. While in those jurisdictions, your Personal Data may be accessible to foreign courts, law enforcement, and national security authorities under the laws of those jurisdictions.
If you are a Brazilian resident, you have the right to access, correct, anonymize, block, or delete your Personal Data; to obtain information about the entities with which your data has been shared; to revoke consent; and to petition the Autoridade Nacional de Proteção de Dados (ANPD). You may also request a copy of any standard contractual clauses governing the international transfer of your Personal Data.
We process your Personal Data to provide the services you request, to improve your interaction with CWILL, and to communicate with you. We limit the Personal Data we collect to information required to support the intended purpose of collection.
These tables set out the categories of Personal Data we collect from you.
Collected when you create or use your account
| Categories | Description |
|---|---|
| Account Data | Personal Data we need to create and manage your CWILL account. This includes your name and/or company name, email address, encrypted access credentials, phone number, and address. |
| Payment and Transaction Data | If you make purchases or subscribe to paid plans, we process transaction information such as product name, price, contact and payment information, and shipping information. |
| Third-Party Account Data | If you link an email account, social networking account, or connect a third-party platform such as Shopify, WooCommerce, or Google Search Console, we collect authentication information from those accounts. |
Collected through your use of the Services
| Categories | Description |
|---|---|
| Service Usage Data | Data collected when you use the Services, including chat transcripts, review content, campaign engagement metrics, and interactions with AI-powered features. Where necessary, we may combine limited usage information we collect to provide you with better services. This applies across all CWILL products. |
| User Content | Content you submit or post on the Sites, such as reviews, chat messages, or email campaign content. |
| Inferences | Inferences drawn from the Personal Data listed above, such as consumer preferences, characteristics, behavioral trends, or predispositions. Such inferences are generated only in connection with certain Services, including CWILL Pop-Up & Email Marketing and CWILL AI Chat, and are used to improve functionality, user experience, and to generate aggregated, non-identifying analytics and insights related to marketing effectiveness or customer support activities. CWILL does not use inferences for individualized profiling of End-Users. |
Additional data you may choose to provide
| Categories | Description |
|---|---|
| Date of Birth | If voluntarily provided for loyalty birthday rewards through CWILL Loyalty & Referrals, or if imported by the merchant. |
| Third-Party Personal Data | When you ask us to provide services on behalf of a third party (such as a customer's name, address, phone number, credit card and shipping information). You confirm you are legally authorized by that third party to disclose their Personal Data to us, and that the third party is aware of and has consented to this processing. |
Product-specific data collection
Each CWILL Product collects only the data necessary for its function:
| Product | Data Collected |
|---|---|
| CWILL Order Tracking, Returns & Exchanges, Shipping Protection | Tracking number, carrier, customer name, email, phone number, country, shipping address, product information, order information, tracking events, delivery status, shipment metadata. For Returns: return reason, return images, and refund amount. |
| CWILL Product Reviews | Review ID, product ID and name, review content, rating and date, reviewer name, email and profile, purchase status, review status, replies, images, videos, helpful votes, notification preferences, submission method, and engagement metrics. |
| CWILL Loyalty & Referrals | Customer name, email, loyalty program ID, date of birth (if provided by the customer for birthday rewards or imported by the merchant), IP address, account creation date, order history, points, rewards, referral activity, program participation records, and loyalty preferences. Referral programs may also collect the referred individual's email address, IP address, referral activity, and reward information. |
| CWILL AI Chat | Chat transcripts, message history, customer name, email, phone number, tracking number, fulfillment status, store-policy information, AI-generated responses, customer feedback, and chat analytics. This includes both AI-assisted and human-agent conversations. |
| CWILL Pop-Up & Email Marketing | Recipient name, email and contact details, email subject and content, images, links, delivery/open/click metrics, bounce and unsubscribe data, segmentation tags, A/B test results, and email preferences. |
| SEOWILL | Store name and domain, product and collection information, page and blog content, keywords and rankings, traffic analytics, Google Search Console data (where authorized by the merchant, including search queries, page URLs, dates, countries/regions, device types, clicks, impressions, click-through rates, average positions, sitemap information, and indexing status), redirects, backlinks, SEO settings, and AI-generated analysis and content. SEOWILL does not intentionally collect identifiable end-user data. |
| TrackingMore | Order number, value and date; item details; tracking number; carrier name and shipping method; parcel weight; shipping dates and addresses; customer name, email, phone number, and shipping address; notification preferences; delivery status, location and dates; signer name; shipping labels; return reasons, methods, images, refund amount, and return date. TrackingMore API clients choose which fields to submit; tracking number and carrier code are generally required, while other fields are optional. |
Where we collect your data from
| Source | Description |
|---|---|
| Directly from you | For example, from forms you complete or products and services you purchase. |
| Indirectly from you | For example, from affiliates and third parties to whom you provide your information. |
| From third-party platforms | For example, from Shopify, WooCommerce, and other e-commerce platforms when merchants install CWILL applications and authorize data access, and from Google Search Console when merchants authorize SEOWILL to access their search analytics. |
The table below sets out our purposes for processing your Personal Data and the legal grounds we rely on.
| Purpose | Legal Ground |
|---|---|
| To provide the CWILL Services. For example, fulfilling your requests for products and services, registering your account, communicating with you about your requests, and providing customer service. | Processing is necessary to perform a contract with you, or to conclude one. |
| To enhance the Sites and personalize your experience. For example, improving interactions with the Sites, customizing the Sites, and analyzing use of our Services. | Processing is based on CWILL's legitimate interests to operate effectively and enhance product and service offerings. |
| For promotional communications. For example, sending you information about our products, services, promotions, contests, and sweepstakes. CWILL obtains merchants' consent before sending marketing or promotional emails and provides an opt-out mechanism in each email. | Processing is based on CWILL's legitimate interests. |
| To link your accounts. For example, connecting your CWILL account with social media, email, or third-party accounts. | Processing is necessary to fulfill contractual obligations or to conclude such contracts. |
| To provide customer service and ensure security. | Processing is necessary to fulfill contractual obligations or to conclude such contracts. |
| For AI-powered features. For example, enhancing certain features of our products through artificial intelligence. | Processing is necessary for our legitimate interests, including to develop features useful for our users, and to provide, maintain, and improve Services. |
| To prevent fraud and protect our business. For example, detecting, investigating, and responding to fraud, unauthorized access, and breaches. | Processing is necessary for our legitimate interests and legal obligations. |
When CWILL processes end-user Personal Data on behalf of merchants through the Services, the merchant determines the purposes and means of processing. CWILL processes such data solely in accordance with the merchant's instructions and our Data Processing Agreement. Some examples:
If you are engaging with our Services in a professional role, such as a merchant operating in a B2B environment, we process your Personal Data for contract administration and renewals, customer relationship management, order management, shipping invoicing, solvency monitoring, customer support, and personalized marketing and advertising. We only use this data as necessary to fulfill contractual obligations or legal requirements.
In providing the Personal Data of your Business Associates (including employees and customers), you as a professional User confirm you have obtained consent allowing us to process their Personal Data.
This section sets out who receives Personal Data which is collected or generated through your use of the Services.
CWILL does not sell Personal Data for monetary consideration. CWILL does not use data from one merchant's account to benefit another merchant or for CWILL's own independent marketing purposes (beyond anonymized, aggregated analytics).
Information we may disclose
| Categories of recipients | Reason for disclosing |
|---|---|
| Service providers and vendors | So they can provide their services to CWILL. Examples include shipping companies, payment processors (such as PayPal and Stripe), hosting and infrastructure providers (such as Amazon Web Services and Google Cloud Platform), analytics providers, customer communication platforms (such as Klaviyo, Omnisend, Gorgias, and Zendesk), insurance partners (such as Seel, for CWILL Shipping Protection), and AI service providers (such as Google and OpenAI). When a Shipping Protection claim is initiated, CWILL may automatically provide Seel with the customer's email address and order details. A current list of our sub-processors is maintained at https://trust.cwill.com/subprocessors. |
| CWILL affiliates | To carry out our operations and provide the Services. Our corporate affiliates, including Channelwill Co., Limited (Hong Kong) and Best-selling home (Shenzhen) Technology CO., LTD (Shenzhen, China), may access Personal Data in connection with technical, operational, and support services. |
| Analytics and engagement partners | CWILL uses third-party analytics and engagement tools, including Google Analytics, Google Tag Manager, HubSpot, LinkedIn, Intercom, Customer.io, Microsoft Clarity, LogRocket, and WillDesk. Depending on the tool, these providers may receive cookie identifiers, IP and device information, pages visited, links clicked, form interactions, session activity, and visit timestamps. In some cases, the disclosure of Personal Data to certain third-party analytics providers may constitute 'sharing' for cross-context behavioral advertising. You may opt out through our Cookie Settings or by submitting a request as described in Section 2 of this Policy. |
| Our partners | We may share your Personal Data with trusted partners for promotional and marketing purposes, subject to your consent where required by applicable law. You may provide or withdraw consent at any time. |
| Courts and authorities | We may disclose your information to enforce our Terms, respond to claims that any content violates the rights of third parties, protect the safety, property, or rights of CWILL, our customers, or others, or where required by law. This includes responding to search warrants, subpoenas, or other legally valid orders. |
| Purchasers of our business | In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your Personal Data may be transferred as part of that transaction. The acquiring entity will be required to honor the commitments in this Policy. We will notify you before your Personal Data becomes subject to a different privacy policy and, where required by law, provide you with the opportunity to exercise your rights before the transfer is completed. |
If CWILL's agreement with a third-party partner ends, CWILL will ensure that the partner stops processing the shared data and securely deletes or returns it in accordance with the applicable agreement and legal requirements.
We use cookies, web beacons, and similar tracking technologies to enhance your experience on our Sites, analyze usage, and support our business operations.
Cookie categories
We categorize cookies as:
Some of our cookies may collect and store your Personal Data, such as online identifiers.
Session recording and analytics tools
We use session recording and behavioral analytics tools on certain Sites:
These tools help us understand how users interact with our Sites.
Your cookie choices
Upon your first visit, we provide a cookie banner allowing you to accept or reject cookies. You may modify your preferences at any time through our 'Cookie Settings' button at the bottom of each webpage. Cookie consent is generally stored for one month before the banner may reappear.
The cookie consent mechanism is displayed to all users globally, regardless of country or region, and appears on desktop websites, mobile websites, and mobile app.
Most web browsers are set to accept cookies by default. You can usually set your browser to remove or reject cookies, but note that doing so does not necessarily affect third-party flash cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of the Sites.
For detailed information about the specific cookies and tracking technologies we use, their purposes, durations, and associated third-party providers, please refer to our Cookie Notice.
We keep your Personal Data only as long as necessary to provide you with the Services and for CWILL's legitimate and essential business purposes.
Here are the categories of our retention periods:
Data that expires after a specific period
For all CWILL Products, Personal Data is generally retained for 180 days from the date of collection, after which it is deleted or anonymized. CWILL applies automated retention periods and generally deletes or anonymizes Personal Data within 180 days after it is generated or provided. Merchants and data subjects may also request earlier deletion where applicable and permitted by data protection laws.
Data retained after cancellation or uninstall
After a merchant cancels or uninstalls an application, CWILL retains the merchant's account, transaction, configuration, and service data for up to 180 days for account recovery, legal compliance, security, and record-keeping. The data is deleted or anonymized after that period. Merchants who want their data deleted sooner may submit a data subject request for immediate deletion.
Data retained for extended periods for limited purposes
If the storage period needs to be extended for fulfilling contractual obligations, resolving disputes, or complying with legal requirements, you will be notified in writing of the reasons and the extended period.
Inactive accounts
CWILL provides at least 30 days' advance notice before deleting an account that has been inactive for 12 months or longer.
Anonymized data
CWILL may anonymize Personal Data and use the resulting anonymized, aggregated data for product improvement, carrier-performance reports, delivery-time statistics, and service analytics. Once data has been irreversibly anonymized so that it can no longer identify any individual, it is no longer Personal Data and may be used without restriction. CWILL does not use identifiable Personal Data from one merchant for the benefit of another merchant or for CWILL's own independent marketing purposes.
Because of the global nature of our business, CWILL transfers Personal Data internationally with our group companies, service providers, and partners when carrying out the activities described in this Policy.
CWILL may process, store, and transfer Personal Data to the United States, Hong Kong, and China.
Whenever we transfer Personal Data internationally, we use tools to make sure the data transfer complies with applicable law:
For more information on our transfer safeguards, contact [email protected].
We're committed to protecting our users' Personal Data. We put in place appropriate technical and organizational measures to help protect the security of your Personal Data. However, be aware that no system is ever completely secure.
We have put various safeguards in place, including:
CWILL does not knowingly collect Personal Data from children under the age of 16 without prior parental consent. In jurisdictions where a lower age threshold applies (such as age 13 under the US Children's Online Privacy Protection Act), we comply with the applicable local requirement.
If we become aware that we have inadvertently collected Personal Data from a child below the applicable age threshold, we will delete such information from our records.
Our Sites may contain links to third-party websites. A link to a third party's website does not constitute endorsement or affiliation. We do not exercise control over third-party websites. You access such third-party websites at your own risk. You should always read the privacy policy of a third-party website before providing any information to that website.
Marketing emails: If you no longer want to receive marketing messages from us, click on the 'Unsubscribe' link at the bottom of our marketing emails. CWILL obtains merchants' consent before sending marketing or promotional emails and provides an opt-out mechanism in each email.
Delivery notifications: If you no longer want to receive delivery notifications, you can change your delivery notification triggers by updating your Account Delivery Notifications.
CWILL utilizes artificial intelligence ('AI') technologies, including third-party AI models, to enhance and provide certain features of the Services ('AI Features'). This section describes how AI is used, which third-party providers are involved, and the safeguards we apply.
How AI is used across our products
| Product | AI Provider | How AI is Used |
|---|---|---|
| CWILL Order Tracking (Post-Purchase Suite) | Google Gemini (Gemini 2.0 Flash / Gemini 2.0 Flash-Lite) | Extracts package tracking station names from carrier data. |
| CWILL AI Chat | AI technologies | Processes chat messages and conversation content to assist Merchants in providing customer support. Analyzes chat inputs, generates automated or suggested responses, and routes or categorizes inquiries. Does not independently determine business decisions. Any responses generated are based on the content submitted and the configurations set by the Merchant. |
| CWILL Product Reviews | OpenAI (GPT-4.1-mini) | Analyzes review-related data to generate aggregated insights, summaries, and trends for Merchants. Also used for content safety checks and review content translation. |
| CWILL Pop-Up & Email Marketing | OpenAI (GPT-4.1-mini) | Email content safety checks and email content translation. |
Our AI commitments
AI transparency
In accordance with applicable AI transparency laws, CWILL is committed to ensuring that natural persons are informed when they are interacting with an AI system. Merchants deploying CWILL AI Chat are responsible for configuring their customer-facing interfaces to provide clear notice to End-Users that they are interacting with an AI system at the point of interaction. CWILL provides merchants with tools and documentation to support compliance with these obligations.
AI-generated content produced through the Services (such as AI-generated SEO content, email content, or review summaries) may carry machine-readable provenance markings in accordance with the EU AI Act and applicable state laws.
We may occasionally make changes to this Policy.
When we make material changes, we'll provide you with at least 30 days' advance notice by posting the revised Policy on the Sites or by email notification to registered users. We will post the date the Policy was last updated at the top.
For any questions or concerns about this Policy, contact us any one of these ways:
| Contact | Details |
|---|---|
| General Privacy Inquiries | [email protected] |
| Data Protection Officer | [email protected] |
| Customer Support | [email protected] |
For users in the European Union: We have appointed the European Data Protection Office (EDPO) as our GDPR Representative. You may contact the EDPO by using their online request form at https://edpo.com/gdpr-data-request/ or by writing to EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium.
For users in other jurisdictions: Please reach out to our Data Protection Officer at [email protected] or by submitting a request through our online form. We will respond within 30 days, or within the timeframe required by applicable data protection law.