1. Information we collect

• Account information: name, company, email, phone number, and password (hashed).
• Usage data: log files, device and browser details, IP address, pages viewed, actions in the app (e.g., scans).
• Upload contents: CSV/JSON files and derived results created during scanning.
• Billing data: plan, invoices, and limited payment metadata from our payment processor (we do not store full card details).
• Support communications: messages or attachments you send to our support channels.

2. How we use information

• Provide and maintain the service (authentication, scanning, storage).
• Operate, protect, and improve features and performance.
• Communicate about product updates, billing, and support.
• Detect, prevent, and respond to security incidents and misuse.
• Comply with legal obligations and enforce our Terms.

3. Legal bases (EEA/UK users)

Where applicable, we process personal data under these legal bases: performance of a contract (to provide the service), legitimate interests (to secure and improve our services), consent (where required), and compliance with legal obligations.

4. Data retention

We retain account and usage information for as long as your account is active. Uploads and derived results are kept to operate the service and for your access, and can be deleted by you in-app. We may retain limited information to comply with legal obligations, resolve disputes, and enforce agreements.

5. Data sharing

We do not sell personal data. We may share information with:

• Service providers that help operate infrastructure, analytics, customer support, and payments—bound by contractual confidentiality and security obligations.
• Compliance and legal recipients when required by law or to protect rights, safety, and security.
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to continued protection of your data.

6. International transfers

Your data may be processed in countries outside your own. Where required, we use appropriate safeguards (such as standard contractual clauses) to protect personal data during cross-border transfers.

7. Security

We implement administrative, technical, and physical measures designed to protect information—such as encryption in transit and at rest, access controls, and logging. No method of transmission or storage is 100% secure; we continually improve our safeguards. For more details, see our Security page.

8. Your choices & rights

• Access, correct, or delete certain data from your account settings or by contacting us.
• Object to or restrict certain processing where applicable by law.
• Request a copy of your personal data (data portability) where applicable.
• Opt out of non-essential emails via unsubscribe links.

To exercise rights, contact support@cargoscan.app. We may need to verify your identity before fulfilling requests.

9. Children’s privacy

Our services are not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us information, please contact us to request deletion.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and adjust the “Last updated” date below. Your continued use of the service after changes indicates acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy? Contact us at support@cargoscan.app.

Governing law: Ontario, Canada.

Last updated: 9/13/2025