Privacy Policy
Last updated: May 13, 2026
1. Introduction
CargoParse LLC ("CargoParse," "we," "us," or "our") operates the CargoParse web application at cargoparse.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By accessing or using CargoParse, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your email address, first and last name, and a password (for email/password sign-ups). If you sign in with Google, we receive your name and email from Google's OAuth service.
2.2 Documents You Upload
When you upload documents (PDFs, JPG, PNG, or TIFF files), we store the file in Amazon S3 and process it to extract structured data. We store the extracted data in our database. Source files are retained according to your plan's retention policy (see Section 5); extracted data is retained permanently on every plan unless you delete it.
Freight and logistics documents may contain personal information about third parties, including drivers, shipper contacts, consignees, and other individuals. You are responsible for ensuring you have the right to submit such documents and have obtained any necessary consents from those individuals (see our Terms of Service, Section 5).
2.3 Usage Data
We automatically collect information about how you use the Service, including documents processed, features used, API usage patterns, and error logs. We also collect standard server logs (IP address, browser type, pages accessed, timestamps) for security, diagnostics, and abuse prevention. We do not use third-party analytics or advertising trackers.
2.4 Payment Information
Payments are processed by Stripe. We do not store your credit card number. Stripe provides us with a customer ID, subscription status, and billing period information. See Stripe's Privacy Policy.
2.5 Phone Number (Optional)
If you provide a phone number for account recovery, we collect and verify it via Amazon Cognito.
2.6 Communications
If you contact us by email or through our contact form, we retain that correspondence to respond to your request and for our internal records.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, operate, and improve the Service
- Process and extract data from your uploaded documents
- Send transactional emails (document notifications, account alerts, billing notices, daily digests)
- Enforce usage limits and prevent fraud or abuse
- Respond to support requests and feedback
- Send product and service announcements (you may opt out of non-essential communications)
- Comply with legal obligations and respond to lawful requests
- Aggregate and de-identify usage data to produce statistics and improve the Service
We do not sell your personal information. We do not share your personal information with third parties for their own marketing purposes. We do not use the content of your uploaded documents to train machine learning models. Document content is sent to Amazon Bedrock for real-time extraction and is not retained by the AI model provider after processing.
4. How We Share Your Information
We share information only with:
- Amazon Web Services (AWS) — infrastructure provider (S3, DynamoDB, Lambda, Bedrock, Cognito, SES, Textract). Data is processed in the us-east-1 region (Northern Virginia, United States).
- Stripe — payment processing.
- Google — if you sign in with Google OAuth, Google provides us with basic profile information. If you use Google Workspace email features, relevant data may be processed through Google.
- Your organization — if you join a team account, other members with appropriate roles can view documents and extracted data uploaded by your team.
A current list of our sub-processors is maintained at cargoparse.com/subprocessors.
We may disclose information if required by law, subpoena, or court order, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of CargoParse, our users, or the public. We may also transfer information in connection with a merger, acquisition, reorganization, or sale of all or substantially all of our assets, subject to standard confidentiality protections.
5. Data Retention
Extracted data (the structured fields, line items, and search keys we derive from your documents) is retained permanently on every plan, including Free, until you delete it.
Source files (the original PDFs, JPGs, PNGs, or TIFFs you upload) are retained according to your plan:
- Free: Source files for 90 days
- Haul, Fleet, Terminal: Source files retained permanently
After 90 days, we transition source files to a lower-cost storage tier; this is invisible to you — they remain accessible in the document viewer with no perceptible delay.
Paid plan customers can shorten retention via account preferences (e.g., for compliance reasons). The shorter window applies to every document on your account, including ones already uploaded — each document's deletion date is computed from its original upload date plus the new window, so a 90-day window means a document uploaded 30 days ago will be deleted in 60 days. Documents whose original upload date is already older than the new window will be queued for deletion on the next daily cleanup run; once deleted they cannot be recovered. The account interface previews how many documents a proposed change would affect before you commit. Free plan retention cannot be modified.
Activity log entries (the audit trail of actions performed on your account — uploads, exports, approvals, deletions, field edits, API key management, template changes, team membership changes) are retained permanently on every plan, including Free. A durable audit trail is part of how you keep your own account auditable, so we don't tier this.
When you cancel a paid subscription, your extracted data and activity log are not deleted — they remain accessible if you resubscribe or stay on the Free tier. New source-file uploads after cancellation use the Free 90-day retention; existing source files keep their original retention stamp from when they were uploaded.
You can delete individual documents or your entire account at any time through the account settings page.
Account information, billing records, and communications may be retained for a longer period as necessary for legal, accounting, or compliance purposes.
6. Data Security
We use industry-standard security measures including:
- Encryption in transit (TLS 1.2+)
- Encryption at rest (AWS-managed keys)
- Access controls and least-privilege IAM policies
- Authentication via Amazon Cognito with optional multi-factor authentication (authenticator app)
- API keys stored using SHA-256 hashing — plaintext keys are never stored
- Logging and monitoring of administrative access
- Regular review of infrastructure security configurations
No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we take commercially reasonable precautions to protect your data. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law.
7. Your Rights
Regardless of where you reside, you may:
- Access your data through the Service at any time
- Export your extracted data in Excel, CSV, JSON, or PDF format
- Delete individual documents or your entire account (Account → Profile & Security)
- Update your name and notification preferences
7.1 California Residents
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:
- Right to know what personal information we collect, use, and disclose
- Right to delete personal information we have collected
- Right to correct inaccurate personal information
- Right to opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising)
- Right to non-discrimination for exercising your privacy rights
To exercise these rights, contact us at support@cargoparse.com. We will verify your identity by matching the email address on your account before fulfilling your request.
7.2 Other U.S. State Privacy Laws
Residents of Virginia, Colorado, Connecticut, Texas, Utah, and other states with comprehensive privacy laws have similar rights. You may exercise these rights by contacting support@cargoparse.com.
7.3 International Users
The Service is operated from the United States and is intended for use by U.S.-based businesses. If you access the Service from outside the United States, you acknowledge that your information will be transferred to and processed in the United States. We do not currently market the Service to residents of the European Economic Area, United Kingdom, or Switzerland. If you are an EU/UK/Swiss data subject and wish to exercise data protection rights under GDPR or similar laws, contact us at support@cargoparse.com.
8. Cookies and Tracking
CargoParse uses only essential cookies for authentication (session tokens managed by Auth.js) and interface preferences (such as theme selection stored in localStorage). We do not use advertising, analytics, or third-party tracking cookies. We do not honor "Do Not Track" browser signals because we do not track users across sites.
9. Children's Privacy
CargoParse is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us with personal information, please contact us and we will promptly delete it.
10. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.
11. Data Processing Agreements
Business customers may request or execute a Data Processing Agreement ("DPA") governing our processing of personal information on their behalf. The current DPA is available at cargoparse.com/dpa. You can execute the DPA through your account settings or by contacting support@cargoparse.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date and, for material changes, by sending notice to the email address on file for your account. Your continued use of the Service after changes take effect constitutes acceptance.
13. Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about our data practices, contact us at:
Email: support@cargoparse.com
Contact form: cargoparse.com/contact
CargoParse LLC
---