This Privacy Policy explains how Powerloop Solutions collects, uses, stores, and protects information when you use the CargoWise workflow XML analysis service. If you use the service on behalf of an organization, that organization is responsible for confirming that each file may be uploaded and processed.
Information We Collect
We may collect account information such as name, email address, authentication identifiers, organization details, billing status, plan information, invoices, payment metadata, support messages, product usage events, device and log data, and cookie or local-storage preferences.
When you upload workflow files, we collect the files, filenames, file size, upload time, derived hashes, generated analysis, consolidated XML exports, and related metadata needed to provide the service. Workflow files may include customer names, email addresses, shipment references, office information, credentials, internal business logic, or commercially confidential configurations.
How We Use Information
We use information to authenticate users, provide workflow analysis, compare files, create consolidated exports, manage subscriptions and billing, operate storage, prevent abuse, troubleshoot issues, maintain security, respond to support requests, and comply with legal obligations.
We process uploaded files only to provide and support the service. We do not sell uploaded files, publish them, reuse them for unrelated purposes, or use them to train AI models.
Storage, Retention, and Deletion
Uploaded files are stored in access-controlled application storage associated with the uploading user or tenant. Files may be retained until deleted by the customer, until the account is closed, or according to a retention period stated in an applicable order form, data processing addendum, or written agreement. Temporary processing data is deleted when it is no longer needed to provide the requested workflow operation.
You may request deletion or access by contacting support@powerloopsolutions.com. Some account, billing, security, and backup records may be retained where required for legal, fraud-prevention, accounting, dispute-resolution, or security purposes.
Providers and Subprocessors
We use infrastructure and service providers to operate the service, including hosting, database, authentication, storage, logging, email, analytics, customer support, and payment providers. Current core providers include Supabase for authentication and storage, Stripe for payment processing, and the hosting provider used for the application deployment. These providers process information only as needed to provide their services to us.
Data may be processed in the United States and, depending on provider configuration and support operations, may be accessed or processed from other locations. Business customers may request a Data Processing Addendum for additional processor, subprocessor, transfer, and deletion terms.
Security
We use technical and organizational safeguards designed for the sensitivity of workflow files, including HTTPS, authenticated access, tenant-scoped storage paths, private storage configuration, encryption at rest through infrastructure providers, restricted secret handling, and operational review of security events. No method of transmission or storage is completely secure.
We do not intentionally write raw XML file contents to ordinary application logs. Customers should not upload credentials, malware, regulated data, or files they are not authorized to process.
Cookies and Analytics
We use essential cookies and local browser storage for sign-in, security, billing flows, and user preferences. Analytics may be used to understand product usage and reliability. See the Cookie Policy for more detail.
Security Incidents
If we determine that a security incident requires customer notice under applicable law or a written agreement, we will notify affected customers without undue delay and provide information reasonably available to help them evaluate the incident.
Contact
Privacy requests and questions may be sent to support@powerloopsolutions.com or through the contact page.