Privacy policy

1. What we keep

• Your account: your e-mail address. Your password is handled by our sign-in provider and stored only in a scrambled (hashed) form that nobody can read. If you sign in with Google, Google tells us your e-mail address and basic profile; we only use the e-mail address.
• Your plans, if you have an account: the plans you work on are saved to your account so you can open them on any device, together with the container shapes, templates and fleets you save.
• Share links you create: a copy of that plan and a preview picture. Anyone with the link can open the plan until you turn the link off or delete it; the picture is deleted with the link (copies already shown in a chat, or kept for a while by a cache, can last longer).
• Messages you send us, such as problem reports and feedback, with any technical details you choose to add.
• Server logs: our hosting and database providers keep standard logs, such as IP addresses and the time of requests, to run the service and keep it secure.

As a guest (without an account), your plans stay in your browser on your device; they are not sent to us.

2. What we do not do

• We do not sell your data, and we do not use it for advertising.
• We do not use analytics, tracking or advertising tools.
• Auto-Pack sends your plan to our server to work out the packing; it is used only for that and is not kept there.

3. Why we use it

To run CargoLab for you: signing in, saving and opening your plans, share links and Auto-Pack. Also to answer your messages, keep the service secure, and tell you about important changes.

4. Who helps us run it

• Supabase — sign-in and the database where accounts, plans and share links are kept.
• Vercel — hosting of the website and the Auto-Pack server.
• Resend — sending account e-mails, such as password resets.
• Google — only if you choose to sign in with Google.

These providers may store and process data outside the UK. They handle it for us, under their own security and privacy commitments.

5. How long we keep it

Your account and plans are kept while you have an account. A plan you delete is removed from your account; a share link stays until you turn it off or delete it. If you ask us to delete your account, we delete it with your plans and share links, normally within 30 days. Server logs are kept by our providers for a limited time.

6. Your choices and rights

You can ask to see, correct or delete the personal data we keep about you, by writing to support@cargolab.app. You can export any plan yourself as a CSV file, and turn off any share link at any time. If you are unhappy with how we handle your data, you can also complain to the UK's Information Commissioner's Office (ico.org.uk).

7. Security

Connections are encrypted (HTTPS) and passwords are never stored in readable form. No system is perfectly secure, so please keep your password to yourself.

8. Children

CargoLab is a work tool and is not meant for children under 16.

9. Changes

If we change this policy, we update the date above; important changes are announced in the app or by e-mail.