Privacy policy

Signing in requires only an email address. The one-time code is sent by email through the Resend email service. The code is valid for 10 minutes, and we store only its hash.

The account holds your email address, the interface language you chose, the date you registered and the date of your last sign-in.

After you sign in, the site sets two httpOnly cookies (page scripts cannot read them): an access token for 15 minutes and a session token for 30 days. The site uses no advertising or third-party analytics cookies.

For each session the server keeps a hash of the token (the token itself is not stored), the client type (website or app), the User-Agent string of the browser and a hash of the IP address.

Your last five searches are kept only in your browser (localStorage). The ID of the assistant conversation is kept in the browser until the tab is closed (sessionStorage).

If you pick a language in the switcher, the site remembers it for a year in the NEXT_LOCALE cookie, and the home page then opens in that language. Until you pick one, the home page opens in your browser’s language, or in English if the site does not have it.

If you are signed in, your account keeps your 50 most recent distinct searches: from, to, cargo, weight and filters. You can delete the whole history or single searches on the account page.

Searches are also recorded for demand statistics without being linked to an account: the route, cargo, number of companies found, language, platform and a hash of the IP address with a salt that changes daily. These records are kept for 13 months.

We record when a company is shown in search results, on a route page or on its own page, and when someone clicks one of its contacts: the company, its position in the list, the contact type, the platform (website or app) and a hash of the IP address with a salt that changes daily. Records from different days cannot be linked through this hash, and the IP address itself is not stored in these records.

Detailed records are kept for 13 months; after that only daily totals remain.

If no companies or only a few serve your route, you can leave a request: the route, cargo, weight, transport modes, a comment and, optionally, an email address or phone number. If you are signed in, the request is linked to your account, and if you leave the email empty, the account email is added. We also store the language, the platform and a hash of the IP address with a salt that changes daily.

Requests are handled by the site administrators. The email address and phone number are removed from a request after 180 days; the rest of the request, including the comment, is kept.

Signed-in users can save companies to their favorites (up to 500). The list is kept in the account, and you can remove a company from it at any time.

You can delete your account on the account page of the site or the app; a site administrator can also delete an account. The account is blocked at once and for good: every session ends, and nobody can sign in with this email or create a new account with it.

After the deletion the account data (email, search history, favorites, requests, assistant conversations) is kept for another 365 days for lawful requests from public authorities. The shorter periods described above still apply: for example, contacts in requests are removed after 180 days and the texts of messages to the assistant after 30 days.

After 365 days the account and the data linked to it are deleted permanently. Direction requests remain as anonymous demand statistics, without a link to the account, without the email, phone or IP address hash. Database backups rotate over 3 months, so deleted data may remain in them for up to 3 more months.

Search assistant, business-card and company-website recognition, translation of company texts. Some features of cargo-info.com use the Claude language model by Anthropic, PBC (USA), which processes data on our behalf as a sub-processor.

What the model receives:

• Search assistant: the text of your message (up to 500 characters) and the search parameters understood so far (from, to, cargo). The conversation history is not sent. Please do not include names, phone numbers or other personal data: the search does not need them.
• Business-card recognition (site administrators only): the card image or pasted text and the administrator's answers to follow-up questions. Business cards usually contain the name, phone numbers, messenger IDs and address of a company or its employee.
• Adding companies from websites and screenshots (site administrators only): the addresses of the company's web pages, the text of those pages, screenshots and text pasted by the administrator. This is usually public company information: rates, terms, addresses, phone numbers. If a screenshot shows personal data (a customer's name, an account number), the administrator masks it before uploading.
• Translation of company texts: company descriptions, shipping terms and notes written by the company or an administrator are translated into the site's languages. These texts are not expected to contain personal data.

How the model uses the data: only to return a structured result to us (for example, "from Seoul, to Tashkent, cargo: clothing") or a translation of a text into another language. The model makes no decisions: results come from the site's regular search, and companies are created as drafts that an administrator reviews and publishes.

Translations appear on the site automatically, without human review, and are marked as machine translations; the original can be viewed. The model does not invent information about companies: each translation is checked automatically so that numbers, prices and links match the original.

Anthropic does not use data received through its commercial API to train its models and keeps it for a limited time under its API terms (Commercial Terms, Usage Policy).

Our retention:

• assistant message texts — 30 days, then deleted (only the search parameters remain);
• business-card images — kept indefinitely, visible to administrators only;
• screenshots and snapshots of company web pages — kept indefinitely as the source of a company's data, visible to administrators only;
• contact data in onboarding drafts — deleted 90 days after the session ends;
• machine translations — as long as the original text exists (they are re-created when it changes);
• the model call log — 13 months, without content (volume, cost and outcome only).

To prevent abuse we keep a hash of the IP address with a salt that changes daily; the IP address itself is not stored. The assistant is optional: the regular search form works without it.