Who we are
CargoForge is operated by CargoForge, Marvel, Khaitalpur, Kukatpally Hyderabad-500085 (“we”, “us”). For any privacy question or request, write to us at support@Cargoforge.in.
What we collect
| Data | When | Why |
|---|---|---|
| Email address, name and a hashed password | When you create an account | To sign you in and to contact you about your account |
| Business details: company name, address, phone, GSTIN, PAN, bank details and logo, if you add them | When you fill in Settings or a document | To print them on the documents you create |
| Documents, parties and trips you save, including the names, addresses, phone numbers and GSTINs of your customers and drivers that you enter | When you save a record | To keep your records and produce your PDFs and exports |
| Payment records: order and payment IDs, amount, status and payment method type | When you buy a Pro pass | To activate Pro, issue receipts, handle refunds and meet tax obligations |
| Usage events: pages viewed and tools used, tied to a random identifier that lasts only for the browser tab | As you use the site | To understand which tools are useful and to fix problems |
| Technical logs: IP address, time and the page requested | On every request | Security, abuse prevention and rate limiting |
| Messages you send through the contact form | When you write to us | To reply to you |
We do not receive or store card numbers, UPI PINs, net-banking passwords or OTPs. Those are entered on Razorpay’s checkout and handled by Razorpay.
The free tools without an account
What you type into a free tool is kept in your own browser’s storage so that a refresh does not lose it. It is sent to our server only when you press Download PDF, is used to produce that PDF, and is not saved on our side.
Cookies and browser storage
- One essential cookie (
ld_session) keeps you signed in. It is HttpOnly and is removed when you log out. - Local storage holds unsaved drafts from the free tools on your device.
- Session storage holds the random per-tab identifier used for usage events.
We do not use advertising cookies or third-party analytics. Razorpay may set its own cookies inside its checkout window when you make a payment.
Who we share data with
We do not sell personal data. We share it only with service providers that process it for us:
- Google Cloud — hosting and database, in Google’s Singapore (asia-southeast1) region. This means your data is stored on servers outside India.
- Razorpay — payment processing. Razorpay receives your name, email and the order amount.
- Our email delivery provider (Resend) — to send password-reset and account emails, when that feature is switched on. It receives your email address and the message.
We may also disclose data when the law requires it, for example in response to a valid order from an authority.
How long we keep it
- Account, business details, documents, parties and trips: until you delete them or your account.
- Payment records: for the period required by tax and accounting law, even after the account is deleted, with the link to your account removed.
- Technical logs: about 30 days.
- Usage events: up to 24 months, in a form not linked to your name or email once your account is deleted.
Your choices and rights
- Access and portability. Download everything stored for your account as a file from Settings → Account.
- Correction. Edit your details, documents, parties and trips at any time.
- Erasure. Delete individual records, or delete the whole account yourself from Settings → Account.
- Withdrawing consent. Deleting your account withdraws consent for further processing.
- Grievance. Write to our grievance officer, Kattula Omkar Sri Harsha, at support@Cargoforge.in. We aim to respond within 7 working days. If you are not satisfied, you may complain to the Data Protection Board of India once it is receiving complaints.
Other people’s details in your documents
Your documents contain details of consignors, consignees and drivers. You decide what is entered and you are responsible for having a proper reason to record it. We process that data only to provide the service to you.
Security
Connections are encrypted with HTTPS. Passwords are stored only as salted hashes. Session tokens are stored hashed. Each account can read only its own records, and payment confirmation is verified on our server. No system is perfectly secure; if we learn of a breach affecting your data we will notify you and the authorities as the law requires.
Children
CargoForge is a business tool and is not meant for anyone under 18.
Changes
If this policy changes in a way that matters, we will update the date at the top and tell account holders by email. See also the terms of service.