Privacy Policy

Ladingly (“Ladingly,” “we,” “us”) operates an autonomous cargo-claims recovery service for freight brokers. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to ladingly.com, our operator console, our customer approval pages, and our backend services. The data controller is [Legal Entity Name], [Registered Address].

a. Information you provide

• Operator accounts: name and email address of your team members who sign in to our console (via Google sign-in).
• Customer (broker) business data: company details, contacts, and the freight/cargo-claim documents you or your carriers provide — e.g. bills of lading, proofs of delivery, invoices, damage photos, and carrier correspondence.
• Prospect inputs: information entered into tools such as the leakage calculator or backlog sweep (e.g. company name, work email).

b. Google user data (only with your explicit authorization)

If a customer connects a mailbox, we request read-only access to that Google account via Google OAuth (scopes gmail.readonly and gmail.metadata). We use this access solely to identify and extract cargo-claim-related correspondence (carrier emails, claim acknowledgements, settlement offers, supporting documents) so we can file and pursue recoverable claims on your behalf. We do not read or process unrelated personal email. You may revoke this access at any time from your Google Account permissions.

c. Information collected automatically

• Basic technical/usage data (IP address, device/browser, pages viewed) and audit logs of operator actions.

• To detect, prepare, file, and pursue cargo claims and negotiate settlements on your behalf.
• To operate, secure, and improve the service and provide operator and customer support.
• To send transactional communications (claim updates, approval links, monthly reports).
• To comply with legal obligations and enforce our agreements.

We do not sell your information, and we do not use Google user data for advertising.

Ladingly’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we only use Google user data to provide and improve the user-facing cargo-claims features described above; we do not transfer this data except as necessary to provide the service, for security purposes, or to comply with applicable law; we do not use it for advertising; and we do not allow humans to read it except with your explicit consent, for security/abuse investigation, to comply with law, or where the data has been aggregated and de-identified. We do not use Google user data to develop, improve, or train generalized artificial-intelligence or machine-learning models.

We share data only with vendors who process it on our behalf to run the service, under confidentiality and data-protection obligations. These currently include:

• Cloud hosting & infrastructure (e.g. Render, Neon, Upstash, Cloudflare, Temporal Cloud)
• Transactional email (e.g. Resend)
• AI processing for document extraction (e.g. Anthropic) — these providers do not train models on your data
• Google (for the authorized mailbox access described above)

We may also disclose information to comply with law or to protect rights, safety, and security.

We retain information only as long as needed to provide the service and meet legal, accounting, or claim-recovery obligations. Prospect tools (e.g. backlog sweeps) auto-expire and delete their underlying data on a short schedule. You may request deletion of your data or revoke mailbox access at any time; upon account termination we delete or de-identify your data within a commercially reasonable period, subject to legal retention requirements.

We protect data with encryption in transit, access controls, audit logging, and reputable infrastructure providers. No method of transmission or storage is 100% secure, but we work to protect your information and promptly address vulnerabilities.

Depending on your location, you may have rights to access, correct, delete, or export your personal data, or to object to or restrict certain processing. To exercise these rights, contact us at the address below. You can revoke Google access at any time via your Google Account permissions.

We operate in the United States and may process data there or in other countries where our providers operate. Where required, we rely on appropriate safeguards for cross-border transfers.

The service is for businesses and is not directed to children under 16, and we do not knowingly collect their data.

We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date; material changes will be communicated as appropriate.

Questions or requests: privacy@ladingly.com — [Legal Entity Name], [Registered Address].