Privacy Policy

Effective Date: September 26, 2026 • Version: 2.2

This policy explains what CargoOptix collects, why, who else handles it, and how long it is kept. CargoOptix is operated by Saam Khan, a sole operator in Dubai, United Arab Emirates, who is responsible for your data. Contact: saam@cargo-optix.com.

1. Your cargo data stays on your device

Your manifests, SKU dimensions, weights and packing plans are read and calculated in your browser. They are not uploaded to or stored on our servers. Anything the planner keeps between visits is saved in your own browser, and clearing your browser data removes it.

2. What we collect

• Account details: your name, email address and, if you give it, your company. Passwords are stored only as secure hashes by our authentication provider; we never see them. If you sign in with Google, Google shares your name, email address and profile picture with us.
• Usage: how many calculation runs you use, when, your plan and your credit balance. This is what makes the free daily run, credits and fair-use limits work.
• IP addresses: recorded when you sign up and each time you run a calculation, and in error reports the planner sends when something breaks. We use them only to stop abuse, such as one person opening many free accounts, and to investigate faults. We never use them for advertising or profiling. Ask us and we will delete them along with the rest of your account.
• Purchases: the plan or pack you bought, when, and its status. Payment details are collected by Paddle (see below) and never reach us.
• Newsletter and waitlist: your email address, only if you choose to sign up. Email us to be removed at any time.
• Messages you send us, such as support emails.

3. Who else handles your data

We use these providers to run the service. Each has its own privacy and security terms; CargoOptix holds no certification of its own and does not claim one.

• Paddle.com is our online reseller and the Merchant of Record for every order. Paddle collects your payment details, billing address and tax information, charges you, and issues your receipt. Paddle handles that data under its own privacy policy, as an independent controller.
• Supabase hosts our database and handles sign-in.
• Resend sends our account emails, such as sign-up confirmations and password resets.
• Google provides "Sign in with Google" if you choose it, and serves the website's fonts, which means your browser requests them from Google's servers.
• Cloudflare delivers the website and provides visitor statistics that do not use cookies or identify you.
• Plausible Analytics counts visits and three actions (account created, checkout started, checkout completed) without cookies, and without recording your email or any other personal data.

We do not sell your data or share it for advertising. These providers may process data outside your country, including in the United States and the EU.

4. Cookies and browser storage

We do not use advertising or tracking cookies. The site stores a small amount of data in your browser's local storage: your sign-in session (in session storage instead, if you untick "Keep me signed in"), your cookie-notice choice, and cached page content such as prices. The checkout, run by Paddle, may set its own cookies needed to process a payment.

5. How long we keep it

• Account and usage data: while your account is open. When you ask us to close it, we delete it within 30 days.
• Trial record: to allow one sign-up trial per person, we keep a one-way hash of your email address after your account is closed. It cannot be turned back into your address; it can only tell us that a new sign-up with the same address has had a trial before.
• Purchase records: kept by Paddle, and by us, for as long as tax and accounting law requires.
• Support emails: as long as needed to help you, then deleted.

6. Security

All traffic to the site is encrypted with HTTPS, enforced with HTTP Strict Transport Security. Our database encrypts data at rest and uses row-level security, so each account can read only its own records.

7. Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and everything linked to it. Wherever you live, we answer within 30 days. If you are in the EU or UK you also have the right to object, to restrict processing, and to complain to your data protection authority.

To make a request, email saam@cargo-optix.com from the address on your account.

8. Changes

If we change this policy in a way that matters, we will update the date above and tell account holders by email before the change takes effect.