Privacy Policy

CargoVault ("we") respects your privacy. This Policy explains what personal data we collect, how we use it and what rights you have under the EU General Data Protection Regulation (Regulation 2016/679, "GDPR").

1. Data we collect

• Account: full name, business email, password hash, role.
• Company: legal name, VAT/registration number, country, address, website, company type, certifications.
• Trading activity: lots, bids, deals, messages, documents uploaded to the platform.
• Technical: IP, browser, country (for analytics and abuse prevention).
• Communications: emails you send us and our replies.

2. How we use it

• To provide and operate the marketplace (contract — Art. 6(1)(b) GDPR).
• To verify business identity (KYC) and prevent fraud (legitimate interest — Art. 6(1)(f)).
• To send transactional notifications (bids, deals, escrow, alerts).
• To comply with legal obligations (accounting, sanctions screening).
• To improve the platform through aggregated, anonymised analytics.

We do not sell personal data and we do not run marketing campaigns to third parties.

3. Sharing

Data is shared only with: (a) the counterparty after a deal is created, to enable the transaction; (b) infrastructure providers (hosting, email delivery) acting as data processors under DPA; (c) authorities, when legally required.

4. Retention

Account and deal data is retained while your account is active and for up to 7 years thereafter to comply with EU bookkeeping rules. Logs are kept for up to 12 months.

5. Your rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion ("right to be forgotten") subject to legal retention obligations.
• Request data portability (machine-readable export).
• Object to or restrict processing.
• Lodge a complaint with your national supervisory authority.

6. Contact & data requests

To exercise any right, email yuliia.olshanska@cargovault.eu. We respond within 30 days. See also our Terms of Service.