Skip to content

Legal

Privacy Policy

Effective Date: June 22, 2025 | Last Updated: June 22, 2025

Alset, Inc. ("Alset," "we," "us," or "our") operates 3PLicity, a multi-tenant SaaS platform for third-party logistics operators and their merchant clients, accessible at app.3plicity.com and 3plicity.com (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use and protect it, with whom we share it, and what rights you have with respect to your information.

This Privacy Policy applies to: (a) 3PL Operators who register for and administer accounts on the Service; (b) Merchants who are invited by 3PL Operators to access a workspace within the Service; and (c) visitors to the 3plicity.com website.

By registering for an account or using the Service, you accept this Privacy Policy. If you do not agree, do not use the Service. This Privacy Policy is incorporated into and forms part of the 3PLicity Terms of Service, available at 3plicity.com/terms.

I. Information We Collect

A. Information You Provide Directly

Account Registration. When a 3PL Operator registers for the Service, we collect: full name, business name, business email address, phone number (optional), and billing information (processed by Stripe — we do not store payment card numbers). When a Merchant is invited and creates an account, we collect: name, business email address, and company name. Operational Data. In the course of using the Service, you and your Merchants submit operational business data including: purchase orders and sales orders, product SKU information, inventory quantities and locations, shipment details and carrier tracking information, receiving records and discrepancy notes, and pick-pack and fulfillment workflow data. This data is referred to in our Terms of Service as "Customer Data." Communications. If you contact us for support, billing inquiries, or other purposes, we collect the content of your messages and any information you choose to provide.

B. Information Collected Automatically

Usage and Log Data. When you access the Service, our servers automatically record: IP address, browser type and version, operating system, device type, pages or features accessed, timestamps, referring URLs, and session duration. This information is used to maintain and improve the Service and to troubleshoot issues. Cookies and Similar Technologies. We use cookies and similar tracking technologies to operate and improve the Service. Cookies are small text files stored on your device. We use: • Essential cookies: Required for authentication, session management, and core Service functionality. These cannot be disabled without impairing the Service. • Analytics cookies: We use Google Analytics 4 (GA4) to collect aggregated usage data about how users interact with the Service, including pages visited, features used, and session behavior. GA4 uses cookies to distinguish users. This data is used in aggregate to improve the Service and is subject to Google's Privacy Policy (policies.google.com/privacy). You can opt out of GA4 tracking by installing the Google Analytics Opt-Out Browser Add-On (tools.google.com/dlpage/gaoptout). You can configure your browser to refuse cookies, but doing so may impair certain features of the Service. We do not use advertising or targeting cookies.

C. Information from Third-Party Integrations

The Service integrates with third-party ecommerce platforms including Shopify, Amazon Seller, and TikTok Shop. When you enable an integration, we receive data from that platform on your behalf, which may include: order details, product and SKU data, customer shipping addresses, fulfillment status, and tracking information. We use this data solely to operate the Service on your behalf — specifically, to create and process orders within your 3PLicity workspace. We do not use integration data for any purpose beyond fulfilling your instructions. Each third-party platform has its own privacy policy governing how it handles your data before it is transmitted to us. We encourage you to review those policies: • Shopify: shopify.com/legal/privacy • Amazon: amazon.com/privacy • TikTok Shop: tiktok.com/legal/privacy-policy

II. How We Use Your Information

Purpose of Use

We use the information we collect for the following purposes: • To provide and operate the Service. We use account information and Customer Data to create and manage accounts, process orders, maintain inventory records, generate shipment tracking, and deliver all core Service functionality. • To process billing and payments. We use your billing information to calculate usage fees, generate invoices, and process payments through Stripe. Stripe handles payment card data directly — we receive only payment confirmation and limited transaction metadata. • To send transactional communications. We send emails related to your account and use of the Service, including: account registration confirmation, billing statements and payment receipts, password reset and security notices, service status updates and scheduled maintenance notices, and support responses. We do not send marketing or promotional emails. • To provide customer support. We use information you provide in support requests to diagnose issues, respond to inquiries, and improve Service reliability. • To improve the Service. We use aggregated, de-identified usage data and analytics to understand how the Service is used, identify areas for improvement, and develop new features. This analysis does not involve reviewing individual Customer Data. • To ensure security and prevent fraud. We use log data, account information, and usage patterns to detect and prevent unauthorized access, abuse, and other harmful activity. • To comply with legal obligations. We may use and retain information as required by applicable law, regulation, or legal process, or to enforce our Terms of Service. We do not sell your personal information. We do not sell, rent, or trade personal information to third parties for their marketing purposes.

III. Multi-Tenant Data Isolation

Isolation Practices

3PLicity is a multi-tenant platform. Each 3PL Operator account contains one or more Merchant workspaces. We implement logical data isolation to ensure that: • Each Merchant can access only their own workspace, orders, inventory, and shipments within the 3PL Operator's account. • 3PL Operators can access all Merchant workspaces within their own account, but cannot access data belonging to other 3PL Operators. • Alset personnel access Customer Data only as necessary to provide support, investigate security incidents, or comply with legal obligations — never to share it between accounts. 3PL Operators are responsible for managing Merchant access within their account and for ensuring that Merchants are informed about how their data is handled within the Service.

IV. How We Share Your Information

Service Providers

We share information with trusted third-party vendors who help us operate the Service, including: • Stripe, Inc.: Payment processing. Stripe receives billing and payment card information directly. We receive payment confirmation only. stripe.com/privacy • Google LLC (GA4): Usage analytics. GA4 receives anonymized usage data. policies.google.com/privacy • Cloud Infrastructure Providers: Hosting, storage, and database services. These providers process data on our behalf under confidentiality obligations and do not use your data for their own purposes. All service providers are bound by contractual obligations to use your information only as directed by Alset and to implement appropriate security measures.

Third-Party Integrations

When you enable an integration with Shopify, Amazon Seller, TikTok Shop, or another platform, data flows between that platform and 3PLicity as directed by you. We transmit only the data necessary for the integration to function.

Legal Requirements

We may disclose information if we have a good-faith belief that disclosure is reasonably necessary to: comply with a law, regulation, or enforceable government request; enforce our Terms of Service; investigate potential violations; address fraud, security, or technical concerns; or protect the rights, property, or safety of Alset, our users, or the public.

Business Transfers

In connection with a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity. We will notify you via email or prominent notice on the Service before your information becomes subject to a materially different privacy policy.

With Your Consent

We may share information for other purposes with your explicit consent.

V. Data Retention

Retention Periods

We retain different categories of information for different periods: • Account and operational data: Retained for the duration of your account and for thirty (30) days following account termination or cancellation, during which you may export your data. After this period, we delete or anonymize Customer Data from our systems, except as required by law. • Billing records: Retained for seven (7) years following the transaction date to comply with financial recordkeeping requirements. • Log and usage data: Retained for up to twelve (12) months, after which it is deleted or aggregated in anonymized form. • Support communications: Retained for two (2) years following resolution of the support request. You may request deletion of your account and personal information at any time by contacting us at contact@alset.com.mx. We will process deletion requests within thirty (30) days, subject to legal retention obligations.

VI. How We Protect Your Information

Security Measures

Alset implements reasonable technical and organizational security measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include: • Encryption of data in transit using TLS (Transport Layer Security) • Encryption of sensitive data at rest • Role-based access controls limiting employee access to Customer Data • Regular security reviews and monitoring • Logical data isolation between customer accounts No method of transmission over the internet or electronic storage is completely secure. While we use commercially reasonable security measures, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at support@3plicity.com. In the event of a confirmed data breach affecting your personal information, we will notify you promptly in accordance with applicable law.

VII. Your Rights and Choices

Access and Correction

You may access and update your account information at any time through your account settings. If you need assistance correcting information we hold about you, contact us at contact@alset.com.mx.

Data Export

You may export your Customer Data at any time using the export functionality within the Service. If you need assistance, contact support@3plicity.com.

Account Deletion

You may close your account at any time through account settings or by contacting support@3plicity.com. We will delete or anonymize your personal information within thirty (30) days, subject to legal retention requirements. Customer Data will remain available for export for thirty (30) days following account closure.

Cookie Opt-Out

You can disable analytics cookies by installing the Google Analytics Opt-Out Browser Add-On at tools.google.com/dlpage/gaoptout. You can configure your browser to refuse all cookies, though this may affect Service functionality.

Communications

We send only transactional and operational emails. If you receive an administrative email you believe was sent in error, contact support@3plicity.com.

California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at contact@alset.com.mx. You may also report complaints to the California Department of Consumer Affairs at 400 R Street, Sacramento, CA 95814 or (800) 952-5210.

VIII. Children's Privacy

Age Limit

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from minors. If we learn that we have collected personal information from a person under 18 without appropriate consent, we will delete that information promptly. If you believe we have collected information from a minor, please contact us at contact@alset.com.mx.

IX. Third-Party Links and Services

External Services

The Service may contain links to third-party websites or services. This Privacy Policy applies only to information collected by Alset through the Service. We are not responsible for the privacy practices of third-party websites or platforms. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Service.

X. Changes to This Privacy Policy

Updates

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email to the address on file at least thirty (30) days before the changes take effect, and by posting a prominent notice on the Service. Non-material clarifications take effect immediately upon posting. Continued use of the Service after the effective date of any update constitutes acceptance of the revised Privacy Policy. We maintain a version history of this Privacy Policy. You may request prior versions by contacting us at contact@alset.com.mx.

XI. Contact Us

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Alset, Inc. — 3PLicity Privacy inquiries: contact@alset.com.mx Support: support@3plicity.com Mailing address: 200 Continental Drive, Suite 401, Newark, Delaware 19713 Phone: +1 (314) 582-5738 Website: https://3plicity.com/privacy

Draft Notice

This document is a working draft and has not been reviewed by legal counsel. It must not be published until reviewed by a licensed U.S. attorney. Verify all contact details, email addresses, and third-party links before publication.