Privacy Policy

Last updated: 6/1/2026

1. What we collect

Account data: email, name, organization name, password (hashed)
Manifest data you upload: stored encrypted at rest, scoped to your organization
Billing data: handled by Stripe; we don't store card numbers
Usage logs: request paths, response codes, IP addresses, user agents (90-day retention)
Error reports: automatically captured to debug crashes

2. What we DON'T collect

We don't sell your data. Ever.
We don't share your manifests with other customers
We don't use your data for advertising
We don't fingerprint you across the web

3. How we use it

To provide the Service (grade manifests, route items, run your account)
To process payments via Stripe
To send transactional emails (signup confirmation, billing receipts, team invites)
To debug and improve the engine (aggregated, anonymized only)

4. Sub-processors

We use these services to operate LoadGrade:

Cloud infrastructure providers — application hosting and database
Stripe — payment processing
Email delivery service — transactional email
Error monitoring service — application observability

5. Your rights

You can request export or deletion of your account and data at any time. Email hello@loadgrade.com and we'll process within 30 days.

6. Data retention

Active account data: retained while account is active
After account deletion: removed within 30 days, except where required by law (e.g., tax records)
Backups: 90-day retention; deleted data may persist in backups for up to 90 days

7. Security

Passwords are hashed with bcrypt (cost factor 12). Database connections use TLS. All HTTP traffic is HTTPS. We don't share access credentials with sub-processors beyond what's required for them to operate (e.g., Stripe gets your email; not your manifests).

8. Children

LoadGrade is for businesses; not directed at children under 13.

9. Changes

We'll notify you of material changes to this Policy via email. Continued use after notice = acceptance.

10. Contact

Privacy questions: hello@loadgrade.com