Privacy Policy
Last updated: July 2026
This Privacy Policy explains what personal data Snugload ("Snugload", "we", "us") collects, why we collect it, the legal bases we rely on, and the rights you have. Snugload is a browser-based cargo load-planning service. The operator and data controller is Ivan Zhugan (individual operator). Contact: iezhugan@gmail.com.
1. Summary at a glance
| What we collect | Why | Legal basis (GDPR/UK GDPR) | Retention |
|---|---|---|---|
| Account data (email, verification status, sessions, entitlement & billing status) | Create and secure your account; provide the service | Contract; legitimate interests (security) | Until account deletion + legally required periods |
| Plan data (vehicle/surface settings, load lines, placements, plan metadata) | Save and display your plans and exports | Contract | Until you delete the plan or your account |
| Security data (hashed audit identifiers, auth events, rate-limit data) | Protect the service and your account from abuse | Legitimate interests; legal obligation | Limited period necessary for security |
| Billing status (via Stripe) | Process subscriptions and comply with tax/accounting law | Contract; legal obligation | As required by law (e.g. tax records) |
| Optional product analytics (e.g. gate views, exports, saves, language changes, validation events) | Understand usage and improve the product | Consent | Until consent withdrawn |
| Share-link tokens | Enable read-only public sharing you choose to create | Contract (at your request) | Until you revoke the link or delete the plan |
2. Data we process
- Account data — your email address, email-verification status, session records, entitlement state (trial/subscription), and billing status.
- Plan data — the vehicle and surface settings, load lines, placements, and saved plan metadata you create in the app.
- Security data — hashed audit identifiers, authentication events, and rate-limit data used to protect the service.
- Optional analytics — if (and only if) you grant analytics consent, we record product events such as gate views, exports, saves, language changes, and validation events. Cargo contents are not collected in analytics events.
- Share-link tokens — when you create a public share link, we generate a capability token so that anyone with the link can view that plan read-only.
Snugload is a professional tool for freight dispatchers. Please do not enter other people's personal data into plans; plan content is intended for your own operational planning.
3. Purposes and legal bases
Under the EU GDPR and UK GDPR, every processing activity has a legal basis:
- Performance of a contract — authenticating you, saving plans, generating exports, enforcing your entitlement, and processing your subscription.
- Legitimate interests — securing the service, preventing abuse, and maintaining service integrity (balanced against your rights; you may object — see Section 8).
- Legal obligation — retaining billing/tax records and responding to lawful requests.
- Consent — optional product analytics. You can withdraw consent at any time in the app; withdrawal does not affect processing carried out before withdrawal.
4. Cookies and similar technologies
We use strictly necessary browser storage to keep you signed in and to operate the service (for example, session and authentication tokens). These are required for the app to function. Separately, product analytics run only after you grant consent, and you can withdraw that consent at any time using the in-app analytics toggle.
5. Sharing and service providers (subprocessors)
We do not sell your personal information. We share data only with providers that help us run the service:
- Google Firebase (Authentication, Firestore, Hosting) — account, authentication, and plan data storage.
- Stripe — payment processing, subscriptions, and invoicing. Your card details are handled by Stripe, not stored by us.
In addition, public share links you create expose the shared plan's content to anyone who has the link. That exposure results from your own action; revoke the link or delete the plan to stop sharing.
6. International data transfers
Snugload is operated from the United States, and data is processed in the United States and other countries where our providers operate. Where we transfer personal data of individuals in the EU/EEA, the UK, or Switzerland to the United States, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum / Swiss equivalents) together with our providers' transfer mechanisms.
7. Retention and deletion
You can delete your account from within the app. Account deletion removes your saved plans and marks your account data for deletion. Security and billing records may be retained where legally required (for example, tax and fraud-prevention obligations). You can also export your account data at any time from the app.
8. Your rights (EU/EEA and UK)
If you are in the EU/EEA or the UK, you have the right to:
- access the personal data we hold about you;
- rectify inaccurate data and complete incomplete data;
- erase your data ("right to be forgotten");
- restrict or object to processing based on legitimate interests;
- data portability (receive your data in a portable format — use the in-app export);
- withdraw consent for analytics at any time; and
- lodge a complaint with a supervisory authority. In the UK this is the Information Commissioner's Office (ICO); in the EU/EEA it is your local data-protection authority.
To exercise these rights, use the in-app tools or contact iezhugan@gmail.com.
9. Your rights (California — CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you specific rights. In the preceding 12 months we may have collected the categories of personal information described in Sections 1–2 (identifiers such as email, commercial information such as subscription status, internet/usage activity such as analytics events, and the plan content you create). We collect this information for the business purposes described in Section 3.
We do not sell or share (for cross-context behavioral advertising) your personal information.
Subject to legal limits, you have the right to:
- know what personal information we collect and how we use it;
- access and delete your personal information;
- correct inaccurate personal information;
- limit the use of sensitive personal information (we do not use sensitive personal information for purposes requiring an opt-out); and
- not be discriminated against for exercising these rights.
To exercise these rights, use the in-app export/delete tools or email iezhugan@gmail.com. We will verify your request using your account email.
10. Children
Snugload is a professional tool and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will change the "Last updated" date above and, for material changes, provide a more prominent notice.
12. Contact
Data controller: Ivan Zhugan. Questions or privacy requests: iezhugan@gmail.com.