Privacy policy

SAW SOLUTIONS (17 rue Narvick, 69008 Lyon, France) is the controller for account, billing and contact data.

For the shipping documents that a customer uploads (which may contain names and addresses of shippers, consignees or contacts), ClearBerth acts as a processor: it processes them only to provide the verification service, on the customer's instructions.

Contact for any question about your data: contact@clearberth.com.

Account: company name, tax identifier, country, users' names and email addresses, password (stored only as a salted hash, never in clear).

Service: uploaded shipping documents, data extracted from them, reports and the decisions recorded on them.

Connected inbox (optional): server settings, access password encrypted with AES-256-GCM, and the attachments of the messages received.

Contact form: name, company, email, phone, country and message.

Technical: connection logs kept by the hosting providers for security purposes.

Providing the service and managing the account — performance of the contract.

Billing — legal obligation.

Security, fraud prevention and service improvement — legitimate interest.

Answering contact requests — pre-contractual steps taken at your request.

ClearBerth does not sell data and does not use it for advertising. Customer documents are not used to train any model.

Account data and customer documents: for the duration of the contract. At the end of the contract they are deleted at the customer's request, and at the latest twelve months after the contract ends.

Invoices: for the period required by accounting law.

Contact requests without follow-up: three years after the last exchange.

Technical logs: for a limited period, at most twelve months.

Vercel Inc. — US company, processing in Ireland — hosting of the website and application.

Supabase Inc. — European Union (Ireland) — database and document storage.

Contabo GmbH — Germany — document processing server.

Mistral AI — France — reading of scanned documents (character recognition).

OpenRouter Inc. et Anthropic PBC — United States — extraction of data from documents.

Google LLC (Gmail) — United States — sending of service emails.

Transfers outside the European Union rely on the safeguards provided for by the GDPR (European Commission standard contractual clauses or adequacy decision).

Encrypted connections (HTTPS), passwords stored as salted hashes, inbox passwords encrypted, strict separation between customer accounts, access limited by role (administrator, operator).

ClearBerth only sets cookies that are strictly necessary: cargo_session (keeps you signed in, 7 days) and cargo_langue (remembers the interface language, 1 year).

No advertising or audience-measurement cookies are used, which is why no consent banner is shown.

You have the right to access, rectify and erase your data, to restrict or object to its processing and to data portability. Write to contact@clearberth.com; we reply within one month.

If the data concerns a document uploaded by one of our customers, we will forward your request to that customer, who decides on it.

You may also lodge a complaint with the data protection authority of your country (for example the CNIL in France or the CNDP in Morocco).