Privacy Notice

Who runs this site

This site is operated by [operator name - to be provided by the operator]. For any question or request about your data, contact [contact address - to be provided by the operator].

Using the site without an account

You can read the official-source pages (tariff search and items, notifications, exemptions, anti-dumping entries, source pages) and use the duty calculator without an account. The site does not store your searches or the values and rates you enter in the calculator. Like any web server, it records each request in its server logs (see below).

What is stored when you have an account

• Your account: email address, name, role, whether the account is active, when it was created and last changed, when the password was last changed, and when you last signed out of all other devices. Your password is stored only as a one-way hash (bcrypt), never in readable form.
• Your watchlist: the tariff items you choose to watch and the date each was added.
• Your shipments and documents: the files you upload (commercial invoices and other shipping documents, which can contain names, addresses and prices of you and your trading partners), the values read from them with the text they were read from, the values you enter or confirm, a history of those changes, your saved products, and the working files you prepare. Only you can see them.
• Firms:if you join a firm (for example a customs broker), your name, email and role are visible to its members, and the firm's shipments are visible to its members according to their role. A firm's client sees only the shipments, documents and requests the firm shares with them, and never the firm's internal notes or change history.
• Feature use: which features are used (for example that a search, an upload or a check happened, the type of document, the number of lines), to improve the service. These records hold no search words, document contents, values, titles, file names or contact details.
• Usage counts: how many shipments, uploads, document readings, AI calls, working files and reports you used each month, used for plan allowances. They hold no document content.
• An activity log: sign-ins (successful and failed), sign-outs, changes to your profile, password and sessions, watchlist changes, document uploads, downloads and deletions, working files prepared, and actions by administrators, each with the time. Sign-ins and security actions also record the IP address they came from. A failed sign-in records the email address that was typed, even when no account exists for it.

The site does not store your questions to the AI Copilot or its answers, your searches, your calculator inputs or results, or a browsing history.

Server logs and temporary counters

The web server and the application record each request (time, page or API address, result code and the client IP address) in their logs. These logs are limited in size and the oldest entries are overwritten. To protect accounts, failed sign-ins and the number of requests are also counted per email address and IP address in memory only; these counters are lost when the service restarts.

Cookies and browser storage

When you sign in, your browser keeps two sign-in tokens in its local storage: an access token valid for 30 minutes and a refresh token valid for 7 days. A copy of the access token is also kept in a cookie namedcip_access_token(30 minutes, same-site) so the site can show you the pages for signed-in users. They are needed for signing in and are not used for tracking. The site uses no advertising or analytics cookies. Signing out removes the tokens from your browser.

Why it is used

• to provide your account, your watchlist, your dashboard and your shipment workspace;
• to keep accounts secure - for example, to limit repeated failed sign-ins and to investigate misuse;
• to let administrators manage accounts and roles.

Your data is not sold and not used for advertising.

Who else processes it

• AI Copilot:when a signed-in user asks the Copilot a question, the question and excerpts from the official-source documents are sent to Anthropic's API to write the answer. Your name, email address and account details are not sent with it. This only happens when the operator has switched the Copilot on.
• Document reading:when the operator has switched AI reading on, a document you upload is sent to Anthropic's API to be read; otherwise it is read on the server from the PDF's own text and is not sent anywhere. The values read are shown to you for review; nothing is filed anywhere.
• Hosting: the site runs on servers provided by [hosting provider - to be provided by the operator], which therefore processes the stored data and logs on the operator's behalf.
• Administratorsof the site can see the list of accounts, their roles and the activity log, and can export an account's data to answer a request.

Your choices and requests

• Download your data at any time: Account → “Your data” (your profile, watchlist, shipments, saved products and activity-log entries; no password).
• Delete a document, or a whole shipment with its documents and history, at any time in the workspace.
• Change your name or password, and sign out of all other devices, on the Account page.
• Ask for access to, correction of, or deletion of your data by contacting the operator (above).

How long data is kept

Uploaded files are kept in your workspace until you delete them, unless the operator has chosen to delete each file as soon as it has been read (the values read are then kept). Nothing else is deleted automatically at present. Account data, the watchlist, shipments and the activity log are kept until they are deleted under the operator's data-retention policy or at your request. The operator has not yet set retention periods; when it does, they will be stated here. Server logs are limited in size and overwritten as described above.

Security

Passwords are stored as one-way hashes; access to account and administration pages is checked on the server for every request; repeated failed sign-ins are limited; the official customs data cannot be changed through the site. No system is completely secure; if you think your account has been misused, change your password, sign out of all other devices and contact the operator.

Changes to this notice

When the site changes what it stores or how, this notice is updated and its date above changes.

See also the Terms of use and disclaimer.