Privacy policy

Updated 01/10/2026

1. Controller

Controller: CTS, Cargo Tech Solutions, Unipessoal, Lda., NIPC 518716643, Rua do Sol, n.º 20, 4475-382 Maia, Portugal. Data-protection contact: info@cargo-tech.solutions.

2. Data processed

Company data (name, VAT, address), user data (name, email), driver data (name, phone, email), plates, shipper data and the content of the DeCA.

3. Purpose and legal basis

Providing the contracted service (performance of a contract) and complying with legal retention duties. Driver and shipper data is processed on behalf of the user, who is the controller; CTS is the processor.

4. Processor

CTS processes driver, shipper and plate data under the user's instructions, only to generate and deliver the documents. These terms constitute the processing agreement (art. 28 GDPR).

5. Hosting and sub-processors

Data and PDFs are hosted in the European Union. Sub-processors: Stripe (payments; transfers to the USA under standard contractual clauses), SMTP2GO (transactional email; New Zealand, a country with an EU adequacy decision) and, only on the Pro AI plan and when the user uploads a document for automatic reading, Google Cloud Vertex AI in an EU region, used solely to extract the DeCA fields and never to train models. We do not sell data.

6. Retention

DeCA are kept 18 months by default, up to 5 years at the customer's choice. Public download URLs stay active at least during the service plus 7 days, and are withdrawn 7 days after the end of the service. Account data is deleted 12 months after cancellation.

7. Your rights

Access, rectification, erasure, restriction, portability and objection by writing to info@cargo-tech.solutions. You may complain to the CNPD (Portugal) or your national authority.

8. Cookies

Technical cookies only: session (PHPSESSID), persistent session after login (REMEMBERME, 30 days) and the theme preference kept in the browser. No tracking or advertising cookies, so no consent is requested.