1. Definitions

“Customer Data” means personal data you submit through CargoScan services. “Processor” refers to CargoScan acting on your instructions. “Controller” refers to you, the customer, who determines the purposes and means of processing.

2. Roles of the parties

As between you and CargoScan, you are the data controller (or equivalent under applicable law) and CargoScan is the data processor, processing Customer Data only as instructed by you and as required to deliver the service.

3. Scope of processing

CargoScan processes Customer Data solely to provide the service: including ingestion of uploads, transformation, analysis, storage, billing, and customer support. We do not process Customer Data for unrelated or commercial purposes.

4. Subprocessors

We may engage third-party service providers (e.g. hosting, payments, analytics) as subprocessors. All subprocessors are bound by written agreements ensuring data protection standards equivalent to this DPA. A current list of subprocessors is available on request.

5. International transfers

CargoScan may transfer Customer Data outside of your jurisdiction. Where we do so, we use lawful mechanisms (such as Standard Contractual Clauses or equivalent safeguards) to ensure compliance with GDPR and similar frameworks.

6. Security measures

CargoScan implements technical and organizational measures to protect Customer Data, including encryption in transit and at rest, access controls, and monitoring. For details, see our Security page.

7. Data subject rights

CargoScan provides assistance, where legally required, to help you fulfill data subject requests (e.g., access, correction, deletion, portability) by providing appropriate tools and support channels.

8. Audit rights

On reasonable request, and subject to confidentiality, CargoScan will provide documentation demonstrating compliance with this DPA. Formal audits may be conducted by mutual agreement.

9. Termination & deletion

Upon termination of your CargoScan account, Customer Data is deleted or anonymized within a commercially reasonable timeframe, unless retention is required by law. You may also export or delete uploads at any time in-app.

10. Contact

For questions about this DPA or data protection practices, contact us at support@cargoscan.app.

Last updated: 9/13/2025