Privacy Policy
Last updated: September 2026
This Privacy Policy explains how TuBoleto collects, uses, discloses, stores and protects personal information in connection with its websites, marketplaces, Vendor services, logistics operations, technology systems and related services.
This Policy applies to TuBoleto websites and subdomains, the TuBoleto Marketplace, Vendor Dashboard, warehouse management systems, Product Assessment services, import and logistics coordination, warehousing, fulfillment, returns, marketplace integrations, Customer Agent, APIs, support channels and other services operated by or on behalf of TuBoleto.
1. Information We Collect
Depending on the service used, TuBoleto may collect information relating to individuals, businesses, Vendors, buyers, recipients, employees, representatives and other users.
2. Vendor and Business Information
We may collect information such as:
- business name;
- contact name;
- email address;
- telephone number;
- business address;
- billing address;
- company registration information;
- tax information;
- banking or payment-related information;
- product information;
- manufacturer information;
- shipment information;
- inventory information;
- marketplace account information;
- authorized-user information; and
- communications with TuBoleto.
3. Buyer, Customer and Recipient Information
Where TuBoleto performs fulfillment, shipping, returns or marketplace services, we may process information about buyers or shipment recipients, including:
- name;
- shipping address;
- billing address where applicable;
- email address;
- telephone number;
- order information;
- tracking information;
- return information;
- customer-service communications; and
- other information necessary to complete the transaction or service.
4. Payment Information
TuBoleto may collect payment-related information necessary to process fees, invoices, refunds or other transactions.
Payment information may be processed by third-party payment providers. TuBoleto may not directly store complete payment-card details where those details are handled by an authorized payment processor.
5. Product Assessment Information
When a Vendor requests a Product Assessment, TuBoleto may collect and process information such as:
- product descriptions;
- photos;
- ingredients or materials;
- country of origin;
- manufacturer information;
- pricing information;
- product dimensions and weight;
- certifications;
- labels and packaging;
- regulatory documentation; and
- other information required to perform the assessment.
6. Warehouse and Operational Information
TuBoleto may collect and maintain operational information relating to:
- receiving;
- inventory;
- SKU records;
- barcodes;
- lots and batches;
- expiry dates;
- warehouse locations;
- orders;
- shipments;
- returns;
- photographs;
- discrepancies;
- inventory adjustments; and
- other warehouse activities.
7. Vendor Dashboard and WMS Information
When users access the Vendor Dashboard, WMS or related technology, TuBoleto may collect:
- account identifiers;
- usernames;
- authentication information;
- login activity;
- permissions;
- actions taken in the system;
- order and inventory activity;
- API activity;
- integration information; and
- technical logs.
8. Marketplace and External Integrations
Where a Vendor connects an external platform such as Amazon, Walmart, eBay, Best Buy, an ecommerce platform, carrier or other service, TuBoleto may receive information necessary to operate the integration.
This may include account identifiers, permissions, orders, inventory, shipment information, listing information and other data made available through the authorized connection.
9. Technical Information
When users access TuBoleto websites or digital services, we may collect technical information such as:
- IP address;
- browser type;
- device information;
- operating system;
- pages visited;
- timestamps;
- referring pages;
- session information;
- security logs; and
- other technical information.
10. Cookies and Similar Technologies
TuBoleto may use cookies and similar technologies for authentication, security, preferences, analytics, functionality and service improvement.
Additional information may be provided in TuBoleto’s Cookie Policy where applicable.
11. How We Use Information
TuBoleto may use information to:
- provide requested services;
- create and administer accounts;
- verify Vendors and users;
- perform Product Assessments;
- receive and manage inventory;
- process orders;
- coordinate shipping;
- manage returns;
- operate marketplaces and integrations;
- provide customer support;
- process payments and invoices;
- prevent fraud and abuse;
- maintain security;
- improve services and operations;
- comply with legal requirements; and
- protect TuBoleto, Vendors, customers and other parties.
12. Product Assessment Use
Information provided for Product Assessment may be used to research product viability, compare market conditions, review available regulatory or import information, estimate costs, analyze competition and prepare assessment outputs.
13. Vendor Dashboard and WMS Use
Information may be used to provide Vendor Dashboard, WMS, inventory, order, shipment, return, reporting and integration functionality.
14. Customer Agent and Support
TuBoleto may use information to provide customer-support and Customer Agent functionality, including answering questions, retrieving service information and assisting with operational requests.
15. Fraud Prevention and Security
TuBoleto may use information to identify fraud, suspicious activity, unauthorized access, account abuse, payment risk, security incidents or violations of applicable policies.
16. Service Providers
TuBoleto may use third-party service providers to support operations, including providers of:
- hosting;
- cloud infrastructure;
- payment processing;
- communications;
- analytics;
- customer support;
- artificial intelligence;
- marketplace integrations;
- carriers;
- customs and logistics services;
- fraud prevention;
- security; and
- other business-support services.
These providers may process information only to the extent reasonably necessary to perform their services or meet applicable legal obligations.
17. Processing Outside Canada
Some service providers, platforms or technology infrastructure used by TuBoleto may process or store information outside Canada.
When information is processed in another jurisdiction, it may be subject to the laws and lawful access requirements of that jurisdiction.
18. Artificial Intelligence and Automation
TuBoleto may use automated and AI-assisted tools in connection with activities such as Product Assessment, research, classification, customer support, fraud prevention, document preparation, workflow automation and operational analysis.
Where appropriate, TuBoleto may apply human review based on the nature and risk of the activity.
19. Legal and Regulatory Disclosure
TuBoleto may disclose information where reasonably necessary to:
- comply with law;
- respond to valid legal process;
- respond to government or regulatory authorities;
- protect legal rights;
- investigate fraud or security incidents;
- enforce agreements or policies;
- protect health or safety; or
- respond to emergencies where legally permitted.
20. Consent and Other Lawful Uses
Where consent is required by applicable law, TuBoleto will seek consent appropriate to the circumstances.
TuBoleto may also collect, use or disclose information without additional consent where permitted or required by law.
21. Retention
TuBoleto may retain information for as long as reasonably necessary to provide services, administer accounts, fulfill legal and financial obligations, resolve disputes, maintain security, preserve evidence or protect legitimate business interests.
Different categories of information may be retained for different periods depending on operational, contractual and legal requirements.
22. Deletion and Anonymization
When information is no longer reasonably required, TuBoleto may delete, anonymize or securely archive it according to applicable policies and legal requirements.
Immediate deletion may not be possible where information remains in backups, financial records, legal records, security logs or systems subject to retention requirements.
23. Security Safeguards
TuBoleto uses reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the information and the nature of the services.
These safeguards may include access controls, authentication, permissions, monitoring, logging, secure infrastructure, backups and operational security procedures.
24. No Absolute Security Guarantee
No system, network, transmission or storage method can be guaranteed to be completely secure.
TuBoleto therefore cannot guarantee absolute security, but will use reasonable safeguards appropriate to the circumstances.
25. Security Incidents and Breaches
Where TuBoleto becomes aware of a security incident involving personal information, TuBoleto may investigate, contain and remediate the incident and take any notification or reporting steps required by applicable law.
26. User and Vendor Responsibility
Users and Vendors are responsible for maintaining the security of their credentials, passwords, API keys, tokens and authorized-user access.
Users should promptly notify TuBoleto if they believe an account or credential has been compromised.
27. Access and Correction
Subject to applicable law and permitted exceptions, individuals may request access to personal information about them held by TuBoleto and may request correction of inaccurate information.
28. Privacy Requests
Privacy requests may require reasonable identity verification before information is released, corrected or otherwise handled.
TuBoleto may refuse or limit a request where permitted or required by law.
29. Marketing Communications
TuBoleto may send commercial or service-related communications in accordance with applicable law.
Where required, users may unsubscribe from promotional communications using the mechanism provided in the message.
Unsubscribing from marketing does not prevent TuBoleto from sending necessary transactional, security, legal or service communications.
30. Minors
TuBoleto’s business and Vendor services are not directed primarily to minors.
Where personal information relating to a minor is processed as part of an order or other legitimate service, TuBoleto will handle that information according to applicable law and the service purpose.
31. Third-Party Websites and Platforms
TuBoleto websites or services may contain links to or integrations with third-party websites, marketplaces or platforms.
Those third parties operate under their own privacy practices, terms and security controls.
32. Business Transfers
Information may be transferred as part of a merger, acquisition, financing, restructuring, sale of assets or other business transaction, subject to applicable legal requirements and appropriate safeguards.
33. Fraud, Abuse and Security Investigations
TuBoleto may retain and use relevant information where reasonably necessary to investigate suspected fraud, unauthorized activity, abuse, chargebacks, security incidents or violations of applicable policies.
34. Operational Records
TuBoleto may retain operational records such as inventory movements, order history, shipment data, returns, logs, account activity and system records where reasonably necessary for operations, audit, dispute resolution, compliance or legal obligations.
35. Information After the Commercial Relationship Ends
Ending a Vendor or customer relationship does not necessarily require immediate deletion of all information.
TuBoleto may retain information that remains reasonably necessary for legal, financial, security, dispute-resolution, fraud-prevention or operational purposes.
36. International Vendors and Customers
Vendors or customers located outside Canada acknowledge that information may be transferred to or processed in Canada and other jurisdictions involved in providing the requested services.
37. Changes to This Privacy Policy
TuBoleto may update this Privacy Policy to reflect changes in services, technology, business practices, legal requirements or privacy practices.
The updated version will be published with a revised effective or last-updated date.
38. Contact
Questions, privacy requests or concerns regarding this Privacy Policy may be submitted through TuBoleto’s current official contact channels.
Important: This Privacy Policy should be read together with TuBoleto’s applicable Terms & Conditions, International Vendor & Services Terms, Data & Technology Terms and other policies relevant to the services being used.