Privacy Policy

Last updated: July 2026

1. What we collect

Account data (name, email, organization), the trade documents and shipment data you upload, and activity records (an audit trail of actions taken in the service). We do not sell personal data.

2. How we use it

To operate the service: storing documents, extracting and classifying their contents (including processing document contents through third-party AI providers under contract), computing consistency checks, and notifying the parties you collaborate with.

3. Who can see your data

Members of your organization; counterparties you link on a shipment (buyer/seller see the shared application); customs brokers you explicitly grant access via share links (revocable at any time); and Corseco operations staff, whose administrative interventions are recorded in the audit trail.

4. Processors

Infrastructure and processing providers currently include Supabase (database, storage, authentication), Vercel (hosting), and OpenAI (document extraction and classification assistance). Document contents are transmitted to the AI provider solely to perform the extraction/classification you request.

5. Security and retention

Data is encrypted in transit and at rest; access is segregated per organization at the database layer; documents are content-hashed for integrity. Data is retained while your account is active or as required for legal and audit purposes; contact us to request export or deletion.

6. Contact

For privacy requests, contact your Corseco account representative.