Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Name, email address, company name, and role when you register or request a demo
• Trade document content (invoices, packing lists, product descriptions) you upload for HS classification — these are processed temporarily and not stored beyond your session unless you file a submission
• Company type and trade corridor preferences
• Usage data including pages visited, features used, and interaction logs

We also collect technical data such as browser type, IP address, and cookies as described in the Cookies section below.

2. How We Use Your Information

We use collected information to:

• Provide and maintain the HS classification and trade compliance services you request
• Store trade submissions for audit trail purposes (filed submissions are retained per our data retention policy)
• Generate chamber-certified documents such as Certificates of Origin and ZATCA-compliant invoices
• Communicate with you about your account, submissions, and service updates
• Improve our AI models and service performance through aggregated, anonymized usage analytics
• Comply with applicable legal and regulatory obligations (e.g., ZATCA e-invoicing requirements)

3. Cookies and Tracking

Routiply uses cookies and similar technologies to operate our platform and understand usage patterns.

Essential Cookies

These are required for the platform to function. They include session cookies for authentication, language preference (stored in localStorage), and security controls.

Analytics Cookies

We use anonymized session analytics to understand how users navigate the platform. These cookies do not identify individual users and are used only to improve user experience and service reliability.

Third-Party Cookies

Our platform may include third-party services (e.g., Polsia AI proxy for classification). These services have their own privacy policies governing their use of data.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share information in the following circumstances:

• Service providers: Trusted vendors who help us operate the platform (hosting, AI processing, email delivery) — bound by confidentiality agreements
• Legal obligations: When required by law, court order, or regulatory authority (e.g., ZATCA filing records retained for tax compliance)
• Business transfers: In the event of a merger, acquisition, or sale of assets, data may be transferred as part of the transaction

5. Data Retention

Trade submission records (including document content, HS classifications, and filing history) are retained as part of your audit trail for a minimum of 5 years in accordance with customs compliance requirements.

Account information is retained as long as your account is active. You may request deletion of non-filing data at any time by contacting us, subject to any legal retention obligations.

6. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. These include encryption in transit (HTTPS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict certain processing
• Data portability where applicable

To exercise any of these rights, contact us at privacy@routiply.com. We will respond within 30 days.

8. International Data Transfers

Routiply operates globally. If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws, your information may be transferred to countries outside yours. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated via the platform or by email if you have an active account. The "Last updated" date at the top of this page reflects the date of the most recent revision.