Privacy

Documents you upload

Quotations are processed in memory and discarded. There is no copy afterwards — not on a server, not in a backup, not with a subprocessor. If you close the tab, nothing of your document remains anywhere.

Document checking that requires storage is not open yet, precisely because storing other companies' commercial documents is a responsibility that has to be set up properly first.

What is kept about you

• Your IP address is never stored. Where rate limiting needs to recognise repeat requests, a salted hash is stored instead of the address.
• Analytics are counts and coarse buckets. No document text, no identifiers, and amounts only as ranges.
• An email address, only if you give one. Joining the waitlist stores your email and anything you chose to write. Nothing else, and it is not shared.

The benchmark, and your part in it

ChargeBasis can show how a charge compares to what other importers were billed. That is only possible because people contribute, and contributing is optional and off unless you turn it on.

A contributed record contains the charge type, the amount, the destination city and the month. It does not contain your company, your provider's name, your references, or any part of a document. A single record is useless on its own, and comparisons are never shown from fewer than eight of them.

Cookies, and why there is no banner

This site sets two cookies. Both are strictly necessary to make it work, neither tracks you, and neither is readable by JavaScript.

• lp_session keeps you signed in. Set only when you sign in, and removed when you sign out.
• lp_scan links you to a check you ran without an account, so the result is still yours when the page reloads. It expires with the check itself.

There are no advertising cookies, no analytics cookies, and no third-party scripts of any kind. Nothing on these pages contacts another company's server — fonts are served from this domain rather than from a font provider, so loading a page tells nobody but us that you visited.

That is why there is no consent banner. Cookies strictly necessary to deliver a service you asked for do not require one, and we do not set any other kind. If that ever changes, you will be asked before it does, not after.

Where your data is held

Data is stored in Canada. The database and document storage run in a Canadian region with Supabase, and the application is served by Vercel. Those two are our only subprocessors for your data, alongside Stripe for payment (which receives your billing details directly and never routes card data through us) and Resend for transactional email such as password resets.

No analytics provider, advertising network, or data broker receives anything.

Documents are treated as untrusted

Text inside a file you upload is data, never an instruction. It cannot change what the software does, reveal anything, or affect another customer. Where analysis uses a language model, that model is given no tools and its output can only fill in fields that deterministic code then checks.

Your rights

Under Canadian federal privacy law you may ask what personal information is held about you, why, and who it has been given to; ask for it to be corrected; and withdraw consent. You can delete your organization's documents and analysis at any time from settings, without asking anyone.

For anything else, write to support@chargebasis.com. We answer within 30 days, and there is no charge. If you are not satisfied with the answer you may complain to the Office of the Privacy Commissioner of Canada.

What this product is not

ChargeBasis produces document-based assessments of freight charges. It is not a law firm, does not provide legal advice, and does not guarantee that any amount is recoverable. Findings describe what the documents you supplied do and do not support.