Last updated: September 2026
Contact and lead forms. When you send us a question, download an intelligence brief, or ask to be notified about new reports, we collect your name, company, email, phone number (if provided), and anything you write in the message field. This is handled by Formspree on our behalf and used only to respond to you and follow up on your request.
Account and billing data. If you subscribe to a monitoring product, we collect your company name and contact email in our own database, and a password (stored only as a salted hash — we never store or see your plaintext password). Payment details are collected and processed entirely by Stripe; we never see or store your card number.
Monitored-entity data (Compliance and Tariff subscribers specifically). To run your subscription, we store the vendor, customer, freight-partner, or product/HTS data you provide us to monitor. This is business data you submit for the specific purpose of screening it against public denied-party lists and tariff schedules. We do not sell it, share it with any third party outside of running your subscription, or use it for any purpose other than delivering your alerts.
Cookies and analytics. This site does not currently run third-party analytics or advertising trackers. Your session token, if you're a signed-in subscriber, is stored in your browser's local storage, not a tracking cookie.
To respond to inquiries, deliver the monitoring service you've subscribed to, process payment through Stripe, and — only if you've asked to be notified — let you know about new intelligence briefs. We do not sell your personal information or your monitored-entity data to anyone.
Data in transit is encrypted (HTTPS). Account passwords are hashed with bcrypt, never stored in plain text. Our database runs on a managed Postgres instance; API access requires a signed authentication token.
We retain account and monitored-entity data for as long as your subscription is active, plus a reasonable period afterward for billing records. You can request deletion of your account and monitored data at any time by contacting us — see below.
You can ask us what data we hold about you, correct it, or ask us to delete it, by reaching out through our contact page. If you no longer want to receive report notifications, every notification email includes a way to opt out.
Questions about this policy or your data can be sent through our contact page.
We'll update the date at the top of this page if this policy changes materially, and post the updated version here.