To provide and improve the service (including AI parsing, pricing and drafting on your instruction), operate your subscription and billing, send service messages (verification codes, trial and status notifications), provide support, and meet legal obligations. We do not sell personal data, and we do not use one customer's business data to serve another customer. Any cross-customer benchmarking would be aggregate-only and opt-in.
Content you submit (inquiry text, documents, ratesheets) is processed by enterprise cloud AI infrastructure to generate the outputs you request. Our AI providers process this content as our processors and, per their enterprise terms, do not use your content to train their foundation models.
We use reputable cloud providers as processors: database, authentication and storage (Supabase), AI processing (Amazon Web Services), application hosting and delivery (Vercel, Netlify, Render, Cloudflare), transactional email (our email delivery provider), and a licensed payment provider (Airwallex) for card and bank payments, which handles payment data itself; we never see or store full card numbers. Data may be processed outside Hong Kong by these providers under their security commitments.
Workspace data is tenant-isolated with row-level security; access to production systems is restricted; transport is encrypted (HTTPS). No system is perfectly secure — please use a strong, unique password.
Workspace data is retained while your workspace exists (including through trial expiry, so you can resume). After termination, we delete workspace data on written request, and otherwise remove or anonymise it in the ordinary course, subject to legal/accounting retention requirements.
Under the PDPO you may request access to and correction of your personal data. Contact [email protected] — we respond within the statutory timeframe. If your data appears in a customer's workspace (e.g. you emailed a forwarder who uses Cargo-Stack), that forwarder is the controller of their business records; we will refer or assist as appropriate.
The console uses essential storage only (authentication session tokens and interface preferences). The marketing site uses no advertising trackers.
The service is for business use and not directed at children under 18.
We will post updates here and flag material changes in the console or by email. Questions or requests: [email protected].