Privacy Policy

1. Information we collect

You give us

• Account & company data — name, email, password (stored hashed), company name, and company details you add (legal name, address, tax/VAT/registration numbers, billing email, logo).
• Load & compliance data — the trailer, axle, weight, cargo and jurisdiction details you enter (or import from a manifest) to run a check, and the resulting verdicts and certificates.
• Payment details — handled by our payment processor. We do not see or store full card numbers; we receive a token, the last four digits, and transaction metadata.
• Support communications — messages you send us.

Collected automatically

• Usage & device data — IP address, browser type, pages viewed, timestamps, and API request logs (endpoint, status, response time).
• Cookies — see §5.

2. How we use your information

• Provide the service: run compliance checks, generate certificates, pack loads, and keep your history.
• Bill you and meter per-load credits; send receipts, invoices, and payment notices.
• Authenticate you, secure accounts, prevent abuse and fraud (including reCAPTCHA and rate limiting).
• Send service email you’d expect (welcome, low balance, refunds, team invites, compliance certificates you request).
• Operate, debug, and improve the product; understand aggregate usage.
• Comply with legal obligations.

We do not sell your personal information, and we do not use your load data to train models.

3. Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we rely on: contract (to provide the service you signed up for), legitimate interests (security, fraud prevention, product improvement), consent (analytics cookies — which you can withdraw), and legal obligation (tax, accounting).

4. Who we share it with

We share data with service providers (“subprocessors”) only as needed to run LoadLegit:

We may also disclose information to comply with law, enforce our terms, or protect rights and safety. If we’re involved in a merger or acquisition, data may transfer as part of that transaction.

5. Cookies

• Essential (always on): session and CSRF cookies that keep you logged in and forms secure, and Google reCAPTCHA to block bots. The site can’t function without these.
• Analytics (only with consent): Google Analytics 4, to understand which pages help visitors. These load only after you accept in the cookie banner, and you can change your mind any time by clearing the choice.

6. Data retention

We keep account and compliance data for as long as your account is active and as needed to provide the service. Billing and transaction records are kept as required by tax and accounting law (typically 6–7 years). When you close your account we delete or anonymise personal data within a reasonable period, except where we must retain it by law.

7. International transfers

We serve customers in the United States and Canada, and our providers may process data in other countries. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

8. Your rights

Depending on where you live (GDPR, UK GDPR, Canada’s PIPEDA, California’s CCPA/CPRA), you may have the right to access, correct, delete, export, or restrict processing of your personal data, and to withdraw consent. To exercise any of these, email hello@loadlegit.com; we’ll respond within the timeframe the applicable law requires. You may also complain to your local data-protection authority.

9. Security

We protect data with encryption in transit (TLS), hashed passwords, scoped access, tenant isolation, signed and rate-limited endpoints, and regular backups. No method is perfectly secure, but we work to protect your information and to notify you of a breach where the law requires.

10. Children

LoadLegit is a business tool and is not directed to anyone under 16. We don’t knowingly collect data from children.

11. Changes

We may update this policy. We’ll change the “last updated” date and, for material changes, notify you by email or in the app.

12. Contact

Privacy questions or requests: hello@loadlegit.com.