Privacy Policy

LinkCargo is a business-to-business freight platform. Accounts belong to companies, not to the general public: they are provisioned in the web portal by a LinkCargo administrator or by the person nominated as your company’s LinkCargo Lead, or created through the sign-up form and then approved. The personal data we handle is, in almost every case, business contact data used to move freight.

We collect only what the platform needs in order to price, book, and move a shipment, and to keep your account secure.

Account data

Your email address, display name, the company you belong to, and your role on the platform (admin, customer, or supplier). If you sign in with a password, we store a one-way bcrypt hash of it — never the password itself. You may optionally upload a profile photo.

Shipment booking details

For every booking you confirm: the pickup and delivery company name, street address, city, state or region, postal code, country, contact name, phone number, email address, opening hours where given, and your requested pickup date.

Freight records

Rate requests, quotes, bookings, shipments, tracking milestones, and invoices created by you or for your company, together with any documents you upload against a shipment (for example commercial invoices, packing lists, or bills of lading).

Device push tokens

If you allow notifications in the LinkCargo mobile app, we store the push token your device issues, along with the platform (iOS or Android) and the date it was registered. The token identifies a device, not a person, and is used only to deliver transactional shipment notifications.

Sign-in identity

If you sign in with Google or Apple, we verify the identity token they issue and match it to the email address on your existing LinkCargo account. We do not request or receive your contacts, calendar, files, photos, or any other data from those accounts.

Security and activity records

An audit log of significant actions (who did what, to which record, and when), sign-in attempt counters used to rate-limit brute-force attacks, and the standard request logs our hosting provider keeps, which include IP address and timestamp.

Quote enquiries from visitors without an account

If you request an indicative price on our public site without signing in, we record the route and service you asked about, the price we showed, and the contact details you provide — an email address, and optionally a company name and phone number. We also record the IP address and browser user-agent the request came from, which we use only to detect automated abuse of a form that anyone can reach. You do not need an account to ask for a price, and we do not create one for you.

We do not ask for and do not want special-category data (health, biometrics, political or religious information), payment card numbers, or government identity documents. Please do not upload them.

When you book a shipment you supply pickup and delivery details that usually describe somebody other than yourself: the shipper’s or receiver’s company name, address, contact name, phone number, and email address. That information is personal data about those individuals.

We use it only to arrange and carry out the shipment you booked — passing it to the broker, forwarder, or carrier handling the freight so they can collect and deliver it, and contacting those people about that shipment. When you enter it, you confirm you are entitled to share it with us for that purpose, and it is your responsibility to tell those contacts that their details have been passed to us. It is also saved to your company’s contact directory inside LinkCargo so you do not have to retype it on the next booking.

Performance of a contract

Running the platform: authenticating you, showing your company’s rates, quotes, bookings, shipments, and invoices, and moving the freight you book.

Performance of a contract; consent for push notifications

Sending transactional messages — quote-ready notices, booking confirmations, shipment status changes, and password resets — by email and, where enabled, by push notification.

Legitimate interests

Keeping accounts secure: rate-limiting sign-in attempts, step-up multi-factor authentication for administrators, and audit logging so account activity can be reconciled.

Legal obligation

Meeting customs, transport, tax, and accounting record-keeping obligations that apply to freight forwarding.

Legitimate interests — responding to an enquiry you initiated

Answering a price enquiry you sent from our public site, including having a broker follow up where we had no live rate for the route you asked about, and detecting automated abuse of that form.

Legitimate interests

Diagnosing faults and improving the service using aggregated, operational information.

Where we rely on legitimate interests, we have weighed those interests against your rights and freedoms, and you can object at any time using the contact address below.

Plainly, and without qualification:

• We do not show advertising in the app or on the website.
• We do not track you across other companies’ apps or websites, and we do not build advertising or behavioural profiles.
• We do not sell or rent personal data, and we do not share it for cross-context behavioural advertising.
• We use no third-party analytics, attribution, or advertising SDKs.
• We do not use your data to train machine-learning models that serve anyone other than your own company’s use of the platform.

We keep the list of companies that touch your data deliberately short. Each of them acts as our processor, under contract, and may use the data only to provide their service to us.

Vercel

Hosts the web application and its serverless functions, and stores files you upload (shipment documents and profile photos) in Vercel Blob storage.

Neon

Provides the managed PostgreSQL database where all account, booking, shipment, and invoice records are stored. Data is held in the United States.

Resend

Delivers transactional email — password resets, quote and booking notices, and shipment updates. Resend receives the recipient address and the message content.

Expo

Delivers push notifications to registered mobile devices. Expo receives the device push token and the notification title and body, and relays them through Apple or Google push infrastructure.

Google and Apple

Used only to verify the identity token presented when you choose “Continue with Google” or “Sign in with Apple”. We share no personal data with them beyond what their sign-in flow requires.

Beyond those processors, shipment data is shared with the other party to the freight transaction — the broker, forwarder, or carrier assigned to your booking, and the customer whose freight is being moved — because a shipment cannot be executed otherwise. We may also disclose data where the law requires it, for example to customs authorities or in response to a valid legal request.

Account data

Kept for as long as the account is active. When an account is closed, sign-in access is revoked immediately and the account record is removed or anonymised.

Device push tokens

Deleted as soon as the device unregisters, the operating system reports the token as invalid, or the owning user account is deleted.

Bookings, shipments, invoices, and shipment documents

Retained for the life of the commercial relationship and afterwards for as long as customs, tax, and transport law require — commonly up to seven years.

Audit and security logs

Retained for up to 24 months, then deleted.

Quote enquiries from visitors without an account

The IP address and browser user-agent recorded with the enquiry are erased after 90 days, once they can no longer serve the abuse-detection purpose they were collected for. The enquiry itself and the contact details you gave are deleted after 24 months, unless you have since opened an account — in which case the records become part of our commercial record-keeping above. You can ask us to delete an enquiry sooner at any time; see “Your rights”.

All traffic between your browser or device and LinkCargo is encrypted with TLS, and data is encrypted at rest by our database and file-storage providers. Passwords are stored only as bcrypt hashes. Access inside the platform is gated by role — customers see their own company’s records, suppliers see the bookings assigned to them — and administrator accounts require a second factor (a time-based one-time code) before they can reach administrative screens. Significant actions are written to an audit log. Access to production systems is limited to the people who need it.

No system is perfectly secure. If a breach affects your personal data and is likely to create a risk to you, we will notify you and the relevant supervisory authority without undue delay.

Depending on where you live, you have some or all of the following rights. We will not charge you for exercising them, and we will respond within 30 days.

• Access — ask for a copy of the personal data we hold about you.
• Correction — ask us to fix data that is wrong or incomplete. Most profile fields can be corrected directly in the app.
• Deletion — ask us to erase your personal data, subject to records we are legally required to keep.
• Portability — ask for your data in a structured, machine-readable format.
• Objection and restriction — object to processing we carry out under legitimate interests, or ask us to pause it while a dispute is resolved.
• Withdraw consent — turn push notifications off at any time in your device settings; this does not affect processing carried out before you withdrew consent.
• Complain — raise a complaint with your local data protection authority.

To exercise any of them, email support@linkcargo.app from the address on your account. We may ask you to confirm your identity before we act on a request.

If you asked us for a price but never opened an account, these rights still apply to you. Email the same address from the address you gave us, with the subject “Delete my enquiry”, and we will erase the enquiry and the contact details attached to it within 30 days. You do not need an account, and you do not need the reference number we showed you — though quoting it is quicker. We ask you to write from the address on the enquiry because it is the only way we can tell that the request is yours: acting on an unverified email would let anyone delete, or confirm the existence of, someone else’s enquiry.

You can have your LinkCargo account deleted in either of two ways:

• Ask your company’s LinkCargo Lead or a LinkCargo administrator to remove your user account from the portal. This takes effect immediately.
• Email support@linkcargo.app from your account address with the subject “Delete my account”. We will confirm and complete the deletion within 30 days.

Deleting an account revokes sign-in access, removes your profile from your company’s user list, and deletes every push token registered to your devices, so notifications stop at once. Freight records your company is legally obliged to keep — bookings, shipments, customs paperwork, invoices — survive the deletion of your personal account and remain associated with the company, not with you.

LinkCargo is a business tool sold to companies. It is not directed at children, is not intended for anyone under 16, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, email support@linkcargo.app and we will delete it.

LinkCargo is hosted in the United States, and the database that holds your records is operated by Neon in the United States. Freight is international by nature, so shipment details may also be shared with brokers and carriers in the country of pickup or delivery in order to carry out the shipment you booked.

If you are in the European Economic Area, the United Kingdom, or Switzerland, transfers of your personal data outside your region are made under the European Commission’s Standard Contractual Clauses (with the UK Addendum where applicable), together with the technical measures described in section 08.

If we change how we handle personal data we will update this page and move the “last updated” date at the top. For changes that materially affect you, we will also notify account holders by email before the change takes effect. The current version always lives at linkcargo.app/privacy.

Privacy questions, data requests, and complaints all go to the same address, and a person reads it:

support@linkcargo.app

For help using the platform, see the support page.