Privacy Policy

1. Your data belongs to you

The following information exists solely within your tenant database and is accessible only to users within your organisation:

• Account information — your email address and assigned role (Owner / Marketing / Logistics), set at account creation. Used only to authenticate you and enforce access within your own account.
• Shipment & business data — invoice details, client records, item descriptions, logistics figures, and generated trade documents that you enter. Specific to your organisation and never read, exported, or shared by us.
• Session activity — sign-in timestamps and last-seen times, stored in your tenant database for your own security audit trail. We do not monitor or analyse this data.
• Uploaded files — product images and Sales Note Excel files uploaded during shipment processing, stored in your organisation's dedicated storage bucket. Not accessible to us or any other tenant.

2. How your data is used

Your data is used exclusively by the system to serve your own requests — nothing more:

• Verifying your identity and enforcing your organisation's role-based access rules.
• Generating trade documents (Invoice, Packing List, Summary, Sales Note) on demand when you request them.
• Displaying your own shipment and financial data on your dashboard and reports.
• Recording your session activity in your own audit log for your security visibility.

We do not sell, rent, share, mine, or analyse your data — for any reason, at any time.

3. Data storage and security

All data is stored on secure cloud infrastructure (Supabase / PostgreSQL hosted on AWS) with encryption at rest and in transit. Generated reports and uploaded images are stored in secure object storage. Access to your data is restricted to authenticated users within your tenant only — no cross-tenant data access is possible.

4. Data retention

Shipment records, documents, and account data are retained for as long as your account is active. If you require deletion of specific records or your entire account, contact us at info@shiporah.com. Session logs are retained for 90 days for security auditing purposes.

5. Cookies and local storage

Shiporah TradeSystem uses browser local storage to maintain your authentication session (refresh token and user preferences). No third-party tracking cookies are used. Clearing your browser's local storage will sign you out of the application.

6. Your rights

You have the right to access, correct, or request deletion of your personal data held within Shiporah TradeSystem. To exercise these rights, contact us at info@shiporah.com. We will respond to all requests within 30 days.

7. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.