Privacy Policy

1. Data we collect

• Account data: name, email address, password (stored only as a salted bcrypt hash), role and permissions.
• Workspace data: company profile, folders, suppliers, invoices, inventory, shipments, loading/unloading records, payments and reports you enter.
• Uploaded files: documents and images you attach to a workspace (invoices, packing lists, letters of credit).
• Operational data: activity log entries (who did what and when), security tokens (email verification, password reset, invitations - stored as hashes), and subscription/billing records.
• Contact form data: name, email, subject and message when you write to us.

2. How we use data

• To operate the service: authentication, tenant isolation, subscription enforcement, notifications (verification, password reset, invitations, subscription lifecycle notices).
• To secure the platform: rate limiting, audit logging, session invalidation on password change.
• To communicate: transactional email only; no marketing email is sent without consent.

3. Cookies

CargoNex uses a small set of strictly necessary cookies; we do not use advertising or third-party tracking cookies.

• Session cookie (authjs.*): keeps you signed in; httpOnly, secure in production, sameSite=lax. You can clear it by signing out.
• Impersonation cookie (cx-imp, Super Admin support tool): short-lived, signed, set only with explicit action by platform staff.
• CSRF cookie (authjs.csrf-token): protects forms against cross-site request forgery.

4. Sharing & subprocessors

• Hosting and database providers that operate the platform infrastructure.
• Email delivery provider (Resend or SMTP relay) to send transactional email on our behalf.
• Cloud storage (e.g., Google Drive via service account) to store uploaded files per company.
• We never sell personal data. Data is shared only as needed to run the service or when required by law.

5. Retention

• Account and workspace data are retained while your subscription is active, and in read-only mode after expiry until deletion on request or after prolonged inactivity.
• Password-reset and invitation tokens are deleted or invalidated on use/expiry.
• Deleted users and files are soft-deleted and purged in line with backup cycles.

6. Your rights

You may access, correct or export your data (company owners can request a full JSON export), and may request deletion of your workspace. Email us from the workspace owner address to exercise these rights; we respond within 30 days.

7. Security

• Passwords hashed with bcrypt; one-time tokens stored as hashes only.
• Session cookies are httpOnly and signed; password changes revoke all sessions instantly (tokenVersion).
• Tenant isolation is enforced at the query layer: every company-scoped query is filtered by the authenticated session's company.

8. Changes

We will announce material changes to this Policy by email to workspace owners or in-app before they take effect.