Privacy policy

Effective date: September 24, 2026

Who we are and what this policy covers

Fulfill.com is operated by Overflow Logistics, LLC, doing business as Fulfill.com ("Fulfill.com", "we" or "us"), a Pennsylvania limited liability company.

Fulfill.com is a business-to-business marketplace. We help ecommerce brands find third-party logistics providers ("3PLs") and other logistics vendors, and we help those providers reach brands. Most of the personal information we handle is business contact information about people acting for their companies.

This policy explains how we collect, use, disclose and protect personal information when you use www.fulfill.com, app.fulfill.com, partners.fulfill.com and any other website or service of ours that links to this policy (together, the "Services"), and when you contact us by email, phone or meeting.

This policy does not cover websites or services run by others, including 3PLs and vendors you are introduced to. Once you are introduced, the provider's own privacy practices apply to what you share with them.

Information we collect

Information you give us. Depending on which forms and features you use, this includes:

• Contact and business details: name, business email address, phone number, company name, company website, job title, and city and state.
• Your fulfillment profile: for brands, details such as your products, order and shipping volumes, SKUs, sales channels, storage needs, locations and the services you are looking for. For 3PLs and vendors, details such as facilities, capacity, services, rates and the customers you want to serve.
• Figures you enter into our tools: for example, the costs you enter into a calculator or the financial and operating figures you enter into our 3PL valuation tool.
• Reviews: your ratings and review text, along with your name, title, company, company size and shipping volume.
• LinkedIn verification: if you choose to verify a review with LinkedIn, LinkedIn gives us your name, email address, headline, profile photo and profile URL.
• Partner accounts: if you create an account on partners.fulfill.com, your name, email address, company and login credentials.
• Purchases: if you buy a plan, Stripe processes the payment on its own pages. We receive a record of the transaction, such as the plan, amount, status and billing contact, but not your full card number.
• Communications: messages you send us, meetings you book with us, and your answers to any surveys.

We do not ask for Social Security numbers, government ID numbers, bank account numbers or health information, and we ask that you not send them to us.

Information we collect automatically. When you use the Services, we and the providers described under "Cookies and tracking technologies" collect:

• Device and connection data: IP address, browser and operating system, cookie and device identifiers, and the page that referred you.
• Usage data: the pages you view, the links and buttons you click, the searches you run and how you move through forms. We record a sample of visits as session recordings, and we set the recording tool to mask what you type into form fields.
• Campaign data: ad click identifiers (such as Google's gclid, Meta's fbclid and Microsoft's msclkid) and campaign (UTM) parameters in the link you arrived from. We store these with any form you submit so we can tell which campaign brought you to us.
• Approximate location: the city or region our analytics providers infer from your IP address. We do not collect precise location.

After you submit a form, our analytics tool links your earlier and later visits in that browser to the email address, name and company you submitted.

The Meta Pixel on our site uses Meta's automatic advanced matching. When you fill in a form on www.fulfill.com, the pixel reads contact fields from the form, such as your email address, first and last name, phone number, city, state and ZIP code, hashes (encodes) them in your browser, and sends them to Meta so Meta can match your visit to a Facebook or Instagram account.

We also use enhanced conversions for Google Ads. When you submit a form, we may send Google a hashed (encoded) copy of your email address and phone number so Google can measure which ads led to the submission.

Information from other sources.

• Visitor identification: we use RB2B, a service that may identify some visitors to our website and tell us professional details about them, such as name, job title, company, LinkedIn profile URL and business email address.
• LinkedIn, when you choose to verify a review.
• 3PLs, vendors and other business partners, for example when they refer a brand to us or tell us about their own team and services.
• Public sources, such as company websites and professional profiles, for information about logistics providers and the people who work at them. To reach those businesses, we may work out a likely business email address from the company's usual email format and check that it can receive mail before we write to it.

How we use information

• To provide the Services: matching brands with 3PLs and vendors, preparing summaries of a brand's needs, making introductions, publishing provider listings and reviews, running our tools and calculators, answering your questions and sending the resources you request.
• To run provider plans: setting up listings and accounts, counting clicks and introductions, and billing and collecting fees.
• To communicate with you: service messages, replies to your requests, and newsletters and marketing emails about our Services. Every marketing email has an unsubscribe link.
• To understand and improve the Services: measuring how the site is used, finding and fixing problems, and deciding what to build or write next.
• For advertising and measurement: telling advertising platforms which ad clicks led to an inquiry, and showing our ads to people who have visited our site.
• To keep the Services safe: screening reviews and submissions for spam, fraud and abuse (including automated screening of review text by an AI service provider), securing our systems and enforcing our Terms of Use.
• To meet legal obligations and to establish, exercise or defend legal claims.
• For any other purpose we describe when you give us the information, or with your consent.

How we disclose information

• To 3PLs, as part of matching. When you ask us to help you find a 3PL, we share a summary of your fulfillment needs with 3PLs we think may fit, and we share your name and contact details with the 3PLs we introduce you to.
• To vendors. When you ask us for help with a need a vendor can meet, or ask to be connected with a vendor, we share your name, company, contact details and the needs you describe with vendors we think can help. We may send your details to a vendor before we make an email introduction.
• Publicly. Reviews are published on the site with the name, title and company you enter on the review form. Provider listings are public.
• To service providers who work for us and may use the information only to provide their services to us. These include website hosting (Vercel), our database (Supabase), cloud hosting for our tag server (Google Cloud), analytics (PostHog, Google Analytics, Ahrefs), workflow and email automation (Zapier, Google Workspace), sending email from partners.fulfill.com (Resend), team messaging (Slack), AI services that screen reviews for spam, extract business contact details from public web pages and help draft outreach emails (Anthropic), collecting public web pages (Firecrawl), email address verification (MillionVerifier), payments (Stripe), meeting scheduling (Calendly), our newsletter platform (beehiiv), and, on app.fulfill.com, error monitoring (Sentry) and address lookup and maps (Google Maps Platform).
• To advertising and visitor-identification partners: Google, Meta, OpenAI and RB2B collect information through the technologies described below. We also send Google Ads a record of which ad clicks led to a qualified inquiry or introduction (the ad click identifier, the type of conversion, its value and its time). Meta receives hashed contact details from forms through automatic advanced matching, and Google receives them through enhanced conversions, as described above. Our server-side tag server also forwards site events, such as page views and form submissions, to Meta through Meta's Conversions API. Those events can include your IP address, browser details and the hashed contact details described above. These partners handle the information under their own privacy policies and may use it to measure and improve their advertising services.
• In a business transfer, such as a merger, acquisition, financing, reorganization or sale of assets, including in a bankruptcy.
• For legal reasons: to comply with law, a court order or a government request, and to protect the rights, property or safety of Fulfill.com, our users or others, including to prevent fraud.
• With your consent or at your direction.

We may also share information that is aggregated or de-identified so that it no longer identifies anyone.

Cookies and tracking technologies

We and our partners use cookies, pixels, local storage and similar technologies on www.fulfill.com. They include:

• Google Tag Manager, which loads several of the tools below, and a server-side tag server we run on Google Cloud, which forwards site events to Google Analytics and to Meta.
• Google Analytics, for site analytics.
• Google Ads, which reads the ad click identifier when you arrive from a Google ad and records conversions, including enhanced conversions from form contact details.
• Meta Pixel, for ad measurement and audiences on Facebook and Instagram, including automatic advanced matching of form fields.
• OpenAI's advertising pixel, for ad measurement.
• PostHog, for analytics and session recordings of a sample of visits.
• RB2B, for visitor identification, as described above.
• Ahrefs Web Analytics, for site analytics.
• Calendly and YouTube, which load only on pages where we embed a scheduler or a video.

Our ad and campaign cookie. We also set a cookie named fulfill_touch, and only when you arrive on www.fulfill.com from an ad or a campaign link. It records the ad click identifiers and campaign details in those links and when you arrived: the details of your first such visit, the most recent ad click identifier of each type, and the campaign details of your most recent such visit. That way, if you come back later and continue to app.fulfill.com or submit a form, we can still tell which ad or campaign brought you. It lasts 90 days and stays on www.fulfill.com. We use it only to add those details to links you follow to app.fulfill.com and partners.fulfill.com, and to forms you submit on our site, and we add a click identifier only while it is recent enough for the ad platform to count it (7 days for Meta, 90 days for Google and Microsoft). Links to Calendly or any other company never receive details from this cookie. If your browser sends Global Privacy Control, or you opt out under Your privacy choices, we do not set it, and we delete one set earlier the next time you visit.

Your choices. You can block or delete cookies in your browser settings, although some parts of the site may not work properly without them. You can also limit ad personalization through Google's ad settings, install the Google Analytics opt-out add-on, adjust your ad preferences in your Meta account settings, and opt out of interest-based ads from participating companies through the Network Advertising Initiative and the Digital Advertising Alliance. We do not currently respond to browser "Do Not Track" signals. We do honor Global Privacy Control, as described under Your privacy choices.

"Sale" and "sharing" of personal information and targeted advertising

We do not sell personal information for money. We do allow the advertising and visitor-identification partners named above to collect identifiers and browsing information through cookies and pixels on our site, and we send conversion records to advertising platforms. Under California law and the laws of some other states, this may count as a "sale" or "sharing" of personal information, or as "targeted advertising".

In the past 12 months, the categories of personal information disclosed this way have included identifiers (such as IP address, cookie identifiers, ad click identifiers, and hashed email addresses, names, phone numbers and city, state and ZIP code), internet activity (such as pages viewed and clicks) and approximate location. The recipients were advertising networks, analytics providers and a visitor-identification provider. We do not knowingly sell or share the personal information of anyone under 16.

You can opt out of the sale and sharing of your personal information, and of targeted advertising, on this page, in the "Your privacy choices" section below. We also honor Global Privacy Control signals automatically on www.fulfill.com.

We do not use sensitive personal information for purposes that would give you a right to limit its use. The only sensitive personal information we handle is partner-account login credentials, which we use only to let you sign in.