1. Who We Are

ContainerHub is a SaaS product for container depot management offered by DEEVLY LABS LTD (Deevly Labs; Companies House company number 16506991) (“Deevly Labs”, “we”, “us”, or “our”). Company website: deevlylabs.com. Product site: containerhub.ai. Registered office: 128 City Road, London, United Kingdom, EC1V 2NX.

For privacy matters, you can contact us at: info@containerhub.ai

2. What Data We Collect

We collect the following categories of personal data:

Account data: name, email address, job title, company name, and password (hashed) provided during registration.
Usage data: pages visited, features used, session duration, IP address, browser type, and device information collected automatically.
Operational data: container records, gate movements, inspection reports, damage and repair records, quotations, and related documents you enter into the platform.
Communication data: emails or messages you send us for support purposes.
Payment data: billing name, email, and payment method details processed by our payment provider (Stripe). We do not store full card numbers on our servers.
Cookies and tracking: see our Cookie Policy for details.

3. How We Use Your Data

To provide, operate, and improve the ContainerHub platform.
To authenticate users and manage access control.
To process payments and issue invoices.
To send transactional emails (account confirmation, password reset, billing receipts).
To provide customer support.
To detect and prevent fraud, abuse, or security incidents.
To comply with legal obligations.

We do not sell your personal data to third parties, and we do not use it for advertising purposes.

4. Legal Basis for Processing (GDPR)

Where the GDPR applies, we process your data under the following legal bases:

Contract performance: processing necessary to provide the service you signed up for.
Legitimate interests: platform security, fraud prevention, product analytics.
Legal obligation: compliance with applicable laws (e.g., tax records).
Consent: for optional cookies and marketing communications.

5. Data Sharing

We share your data only with:

Infrastructure providers: Vercel (hosting), Supabase (managed PostgreSQL database and object storage), and Vercel Blob where used for legacy file storage — all subject to appropriate data processing agreements.
Authentication provider: Stack Auth, used for identity management.
Payment processor: Stripe for subscription billing and payment method handling (see Section 5A).
AI providers: OpenRouter for AI assistant features. Queries may be processed by third-party AI models; do not submit sensitive personal data via the AI chat.
Voice demo provider: Vapi, which powers the optional live AI product demo. If you start a voice demo, the call audio is recorded and transcribed, and the conversation is analysed by AI to extract business details (such as your company name, country and depot size) so we can prepare your account. Starting the demo is entirely voluntary, the recording notice is shown before the call begins, and you can end the call at any time. Do not share sensitive personal data during the call.
Legal authorities: when required by law, court order, or to protect our rights.

5A. Payments and Stripe

We use Stripe to process payments, manage subscriptions, and provide related business services. Stripe may collect personal data including via cookies and similar technologies. The personal data Stripe collects may include transactional data and identifying information about devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud prevention and detection, authentication, analytics related to the performance of its services, and to enhance and customize the user experience.

You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.

6. Data Retention

We retain your account and operational data for as long as your account is active. After account deletion we retain anonymised records for up to 12 months for audit purposes, and billing records for 7 years as required by tax law.

7. Your Rights

Under applicable data protection laws (including the GDPR), you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request erasure of your data (“right to be forgotten”).
Restrict or object to certain processing activities.
Receive your data in a portable format.
Withdraw consent at any time (where processing is based on consent).
Lodge a complaint with your local data protection authority.

To exercise any of these rights, email info@containerhub.ai. We will respond within 30 days.

8. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, role-based access control, and regular security reviews. Card payments are handled by Stripe, a PCI DSS certified payment processor; we do not store full payment card numbers. However, no system is completely secure and we cannot guarantee absolute security.

9. International Transfers

Your data may be processed in countries outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses approved by the European Commission).

10. Children

ContainerHub is a B2B platform intended for business use only. We do not knowingly collect personal data from individuals under the age of 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or by a prominent notice in the platform at least 14 days before they take effect.

12. Contact

DEEVLY LABS LTD (Deevly Labs)
Product: ContainerHub
Company number: 16506991
Registered office: 128 City Road, London, United Kingdom, EC1V 2NX
Company website: deevlylabs.com
Product support: info@containerhub.ai