Privacy Policy
Last updated: July 2026
CargoReach ("we", "us", "our") provides a newsletter and marketing platform built for freight forwarders. This policy explains what personal data we collect, why, and what rights you have over it — whether you are a CargoReach customer ("tenant"), a member of a tenant's team, or a contact who received a newsletter or submitted a form.
1. Who we are
CargoReach is operated by XPERT GROUP PTE LTD, 60 Benoi Rd, #02-15, Singapore 629906 (UEN: 201423705Z). For any question about this policy or your data, contact us at info@cargoreach.marketing.
2. What data we collect
| Who | Data collected | Source |
|---|---|---|
| Tenant account holder | Name, email, phone, password (hashed), company details, logo, billing information | Provided directly at signup and in account settings |
| Tenant's team members | Name, email, role | Invited by the tenant |
| Newsletter contacts | Email, name, company, country, language, trade lane, engagement data (opens/clicks/bounces) | Imported by the tenant, or submitted directly via a CargoReach embeddable widget on the tenant's own website |
| Website visitors | Approximate country (derived server-side from IP, never shared with third parties), browser language | Automatically, to localize display language and, where applicable, pre-fill widget forms |
3. Why we process this data
- To provide the service: operating tenant accounts, generating and sending newsletters, publishing to LinkedIn/Facebook on a tenant's behalf when connected, billing.
- Newsletter contacts: sent communications on behalf of the tenant that owns them, based on the consent or legitimate business relationship the tenant has obtained directly. When a contact is collected via our embeddable widget, we require and record explicit consent at the point of submission.
- Product improvement and security: detecting abuse, duplicate accounts, and technical issues.
4. Legal basis
Where GDPR or an equivalent regime applies: account and billing data is processed under contract; newsletter contacts are processed under the legal basis obtained by the tenant (consent or legitimate interest, depending on how the contact was added); country/language detection for display purposes relies on legitimate interest, and is never linked to a stored identity beyond the derived country name.
5. Who we share data with
We use a limited number of service providers (sub-processors) to operate CargoReach:
- Stripe — payment processing and billing.
- Mailtrap — delivering newsletters on behalf of tenants.
- Lovable Cloud (Supabase, hosted on AWS eu-west-1, Ireland) — database and authentication infrastructure.
- LinkedIn and Meta (Facebook) APIs — only when a tenant explicitly connects their own Page/account, to publish content the tenant has approved.
We do not sell personal data to third parties, and we do not share newsletter contact lists across tenants.
6. Data retention
We retain account and contact data for as long as the tenant's account is active, plus a reasonable period afterward for legal and accounting purposes. A tenant or a contact can request deletion at any time (see Section 8).
7. International transfers
CargoReach is operated from Singapore by XPERT GROUP PTE LTD. Our database and authentication infrastructure is hosted in the European Union (AWS eu-west-1, Ireland). Our email-sending provider (Mailtrap) processes data primarily in the United States (AWS us-east-1, Virginia, and Google Cloud infrastructure in the US). Depending on your location, using our service may therefore involve the transfer of your personal data to Singapore, the European Union, and the United States. Where such transfers occur, we rely on appropriate safeguards, such as standard contractual clauses or equivalent mechanisms recognized under applicable data protection law, to ensure your data remains protected.
8. Your rights
Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Newsletter contacts can unsubscribe at any time via the link included in every email. For any other request, contact info@cargoreach.marketing.
9. Cookies
This website does not currently use analytics or advertising cookies. If this changes, this policy will be updated accordingly and, where required, a consent banner will be shown.
10. Changes to this policy
We may update this policy as the product evolves. The "last updated" date at the top reflects the most recent revision.