Privacy Policy

1. Our role and application owners

For account administration, billing, support, and security of our own Service, SiteCargo determines why and how data is used. Where data-protection law uses that term, we act as a controller for those activities.

When we process application-user data to provide features on an application owner's instructions, that owner determines the purposes of processing and we act as its service provider or processor, as applicable. The owner must provide its own privacy notice and obtain any required permissions. This Policy does not replace the privacy policy of a website or application built with SiteCargo.

2. Information we process

• Account and support: name, email address or phone number when supplied, authentication information, language preferences, and messages you send us.
• Billing: billing name and address, invoices, balances, transaction references, payment status, and payment-method information returned by the checkout provider. Card entry is handled by the payment provider.
• Application configuration: website URLs, app names, icons, screenshots, navigation settings, custom code, store information, and integration credentials you supply.
• Usage and technical data: request information such as IP addresses and browser or device information, logs, timestamps, session information, and errors needed to operate and protect the Service.
• Application analytics: installation and session identifiers, event types and times, platform, app version, page URLs, notification interactions, and metadata supplied by the application. Events may include launches, page views, purchases, and custom actions. Analytics identifiers and IP addresses may be stored in hashed form; hashing does not necessarily make data anonymous.
• Push delivery: device installation identifiers, push tokens, platform, notification preferences and activity, message content, and delivery or opening information.

We receive data from you, browsers and applications interacting with the Service, application owners, and payment or integration providers. Country-level analytics may be derived from an IP address; this is not a request for precise GPS location. Website previews may load content from the website you provide and its third parties.

3. Purposes and legal bases

We use data to create accounts, authenticate access, prepare and manage applications, deliver requested notifications, provide analytics, process payments, answer support requests, and maintain service reliability.

Where a legal basis is required, account and service delivery generally rely on performance of a contract; tax, accounting, and legally required disclosures rely on legal obligations. Security, fraud prevention, troubleshooting, and handling business enquiries may rely on legitimate interests, balanced against the rights of affected individuals. Where consent is required, it must be obtained and can be withdrawn without affecting earlier lawful processing.

For application-user data processed on behalf of a customer, the application owner is responsible for determining the appropriate legal basis. Information needed for account access or billing is required to provide the relevant service; without it we may be unable to create an account or process an order.

4. Cookies, storage, and notifications

SiteCargo uses session and security cookies and may store preferences, such as language, in cookies or local browser storage. These support login, protect forms, and remember settings. Blocking them can prevent those features from working.

Websites displayed inside previews or customer applications may set their own cookies or use third-party services governed by their own notices. Non-essential tracking requires the notices and choices applicable to that website and its users.

You can control push permissions in your device settings. Disabling notifications does not by itself delete earlier analytics or an account. Application analytics can operate separately from notification permissions; contact the application owner about its analytics choices.

5. Recipients and service providers

Data may be shared with providers that support hosting, storage, communications, payments, application builds, and notification delivery, to the extent needed for those activities. Depending on the selected integration, these include Stripe or Paddle for payments, Expo or Google Firebase and Apple push services for notifications, and Apple or Google for store publication.

Payment providers may have independent legal responsibilities. When Paddle sells a purchase as merchant of record, its Privacy Notice also applies. Stripe describes its processing in its Privacy Policy.

Application owners can access data and reports associated with their applications. We may also disclose information when legally required, to investigate misuse or protect rights and security, or as part of a business transfer subject to applicable protections. We do not sell personal data for third-party advertising.

6. International processing

Our customers and service providers may be in different countries, so processing may occur outside your country. The protections available in those countries can differ. Where applicable law requires safeguards for a transfer, the relevant processing must use a permitted mechanism, such as an adequacy decision or appropriate contractual safeguards. Contact us for information about destinations and safeguards relevant to your data.

7. Retention and security

Retention depends on the purpose: account and configuration data support the ongoing service; billing records may need to be kept for applicable accounting, tax, or dispute periods; logs support security and troubleshooting. Application analytics and device records depend on the owner's instructions, the enabled features, and applicable obligations. Backup copies may remain until they are replaced through the backup cycle.

We assess deletion requests against those purposes and obligations rather than promising immediate removal from every system. Contact us about retention or deletion of particular records. Access controls and other technical and organisational measures help protect data, but no online system can guarantee absolute security. Protect your credentials and avoid sending sensitive information in URLs, event metadata, or notification messages.

8. Your choices and rights

You can update available account and billing details in your profile. Depending on the law that applies, you may have rights to access, correct, delete, or obtain a portable copy of personal data, restrict or object to processing, and withdraw consent. These rights can be subject to legal exceptions. You may also complain to the data-protection authority responsible for your location.

Send requests to the contact below, describing the data or account concerned. We may need to verify your identity before responding. For data collected through a customer's application, contact its owner first; we can assist that owner with requests about data processed on its behalf. Withdrawing consent or deleting information may limit features that depend on it.

9. Children

SiteCargo customer accounts are intended for adults operating websites or applications, not for children. Application owners are responsible for age-appropriate notices and any required parental permissions for their own users. Contact us if you believe a child has provided account data to SiteCargo without appropriate authorisation.

10. Changes to this Policy

We will update the date above when this Policy changes. Where required, material changes will be communicated through the Service or account contact details, and any necessary consent will be requested before a new use begins.

Contact

For questions about these documents, billing, or your personal data, contact the operator of SiteCargo: