Privacy Policy

This Privacy Policy explains how Logisticode collects, accesses, uses, stores and shares personal information, including information obtained through Google Sign-In and Gmail integration.

Last updated: 4 November 2026

1. Who We Are

Logisticode is a cloud-based logistics management platform developed and operated by Knapeto s.r.o., a company registered in the Czech Republic.

Legal entity: Knapeto s.r.o.
Company ID (IČO): 30028795
Registered office: 28. pluku 906/38, Vršovice, 100 00 Prague 10, Czech Republic
Commercial Register: Municipal Court in Prague, Section C, File 456060

Privacy contact: privacy@logisticode.io

Knapeto s.r.o. acts as a data controller for personal data processed for its own account administration, website operations, security and business purposes. Where Logisticode processes transport or customer information on behalf of a business customer, Knapeto s.r.o. may act as a data processor and the business customer as the data controller, subject to the applicable service agreement.

2. Information We Collect

Depending on the services you use and the permissions you grant, Logisticode may process the following categories of information.

2.1 Google Account Information

When you sign in using Google, we access basic account information through the following OpenID Connect scopes:

• openid — Google account identification.
• email — Your Google email address.
• profile — Your name, profile picture and basic profile information made available by Google.

This information is used to authenticate users, identify their accounts, manage access permissions and provide the Logisticode platform.

2.2 Gmail Information

Logisticode offers an optional Gmail integration that allows authorized users to process incoming transport inquiries.

When you explicitly authorize Gmail access, Logisticode may access information permitted by the Google OAuth permissions granted, including:

• Email message identifiers and metadata.
• Sender and recipient email addresses.
• Message subjects and timestamps.
• Email body content.
• Relevant attachments and documents.
• Information required to identify and process transport inquiries.

Gmail access is used for transport inquiry processing and related logistics workflows. The Gmail integration is not required to browse the public Logisticode website.

2.3 Logistics and Transport Information

Information obtained from authorized inquiries may include:

• Customer and business contact details.
• Pickup and delivery addresses.
• Shipment dates and requested delivery times.
• Cargo descriptions, quantities, weights and dimensions.
• Order and shipment reference numbers.
• Other operational information relevant to a transport request.

2.4 Platform and Technical Information

We may also process user account information, organization membership, access permissions, application activity, IP addresses, timestamps, authentication events and technical logs necessary for operating and securing the platform.

3. How We Use Personal Information

Logisticode processes personal information for the following purposes:

• Authenticating users through Google Sign-In.
• Managing user accounts and organization access.
• Connecting authorized Gmail accounts.
• Identifying incoming transport inquiries.
• Extracting relevant logistics information from messages.
• Preparing draft transport orders for user review.
• Managing logistics and transport workflows.
• Maintaining service availability and security.
• Providing support and meeting applicable legal obligations.

We do not use Google user data to create advertising profiles, deliver targeted advertising or sell personal information.

4. Gmail Integration and AI Processing

Logisticode provides an optional Gmail integration for automated processing of incoming transport inquiries.

After a user authorizes Gmail access, Logisticode retrieves relevant email messages and transmits their content to the Anthropic Claude API solely for extracting structured transport information.

Extracted information may include pickup and delivery locations, shipment dates, cargo descriptions, quantities, customer references and contact details.

The extracted information is returned to Logisticode and used to prepare a draft transport order for review by an authorized user.

4.1 External AI Service Provider

Logisticode uses Anthropic PBC as an external artificial intelligence service provider.

Relevant Gmail message content is transmitted to the Anthropic Claude API only for the purpose of processing the transport inquiry requested by the user.

Logisticode does not use Gmail data to train, develop or improve generalized artificial intelligence models.

Under Anthropic's standard commercial API terms, submitted inputs and generated outputs are not used for model training by default.

Anthropic generally deletes API inputs and outputs within 30 days, subject to applicable contractual, safety and legal exceptions.

Further information about Anthropic's data processing practices is available at Anthropic Privacy Center .

4.2 Purpose Limitation

Gmail data is accessed and processed exclusively to provide the user-authorized transport inquiry extraction functionality.

Gmail content is not used for advertising, marketing profiling, sale of personal data or training generalized AI models.

5. Google OAuth Permissions and User Control

Google Sign-In and Gmail integration serve different purposes.

Google Sign-In uses the openid, email and profile scopes for authentication and account identification.

Gmail integration requires additional authorization for accessing email information. The permissions requested are displayed during the Google OAuth authorization process.

Users control whether to authorize the Gmail integration and can revoke access through their Google Account settings:

Manage Google Account connections

Revoking authorization prevents further access using the revoked connection. Previously created transport records may remain subject to applicable retention requirements and deletion procedures.

6. Data Storage and Retention

When a user enables Gmail integration, Logisticode retrieves authorized email messages and stores their original content in its PostgreSQL database, hosted on infrastructure operated by Hetzner.

Stored email information may include the message body, subject, sender and recipient information, timestamps, message identifiers and other information contained in the transport inquiry.

Logisticode submits the relevant email content to the Anthropic Claude API for automated extraction of transport-related information. The extracted data may then be stored as structured transport inquiry or order records within the Logisticode platform.

Original email messages and extracted transport information are retained to support the logistics workflows of the relevant business customer. Retention is subject to applicable customer agreements, deletion requests and legal obligations.

Anthropic processes submitted information according to its commercial API data retention policy. Under the standard policy, API inputs and outputs are generally deleted within 30 days, subject to applicable exceptions.

Users may request access to or deletion of their stored personal information by contacting privacy@logisticode.io .

Disconnecting a Google account prevents further access through the revoked authorization. It does not automatically delete previously imported email messages or transport records.

7. Data Deletion and Account Disconnection

Users can revoke Logisticode's access to their Google Account at any time through Google's account connection settings.

Users may also request deletion of personal information associated with their Logisticode account by contacting:

privacy@logisticode.io

Requests are reviewed in accordance with applicable data protection law and the contractual relationship governing the data.

When a request concerns information controlled by a business customer, we may refer the request to that customer or assist the customer in fulfilling it.

Information may be retained where necessary to comply with legal obligations, resolve disputes, maintain required business records or protect the security and integrity of the service.

8. Data Sharing and Service Providers

Logisticode does not sell personal information or share Google user data with advertising networks for targeted advertising.

Personal information may be processed by authorized service providers where necessary to deliver the functionality requested by users.

These categories of service providers include:

• Infrastructure providers: Hosting, server infrastructure, storage and related technical services.
• Artificial intelligence providers: Processing relevant email content to extract structured transport inquiry information.
• Technical service providers: Services necessary for application operations, security and support, where applicable.

Logisticode uses Hetzner infrastructure for server hosting. Other providers may be involved in specific integrations and processing operations.

Access to personal information is limited to authorized persons and service providers with a legitimate need to process the data.

Human access to information obtained through Google APIs is limited to circumstances permitted under Google's applicable user data policies.

9. Google API Services User Data Policy

Logisticode's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements.

Information received from Google APIs is used to provide or improve the user-facing functionality described in this Privacy Policy.

Google user data is not used for targeted advertising, sold to data brokers, or transferred for purposes unrelated to the authorized functionality, except where permitted by the applicable Google API Services User Data Policy.

10. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) applies, the legal basis for processing depends on the nature and purpose of the activity.

• Performance of a contract: Providing the platform and services requested by users or customers.
• Legitimate interests: Maintaining platform security, preventing misuse and ensuring reliable operation, subject to applicable balancing requirements.
• Legal obligations: Processing required by applicable law.
• Consent: Processing where consent is the appropriate legal basis and is required by law.

Google OAuth authorization determines the technical permissions granted to Logisticode. It does not by itself establish the GDPR legal basis for every subsequent processing activity.

11. Data Security

Logisticode uses technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration and loss.

These measures include HTTPS for encrypted communication, application authentication, access permissions and security-related monitoring.

Access to Gmail-derived information and authentication credentials must be restricted to authorized application components and personnel.

No internet-based service can guarantee absolute security. Security controls are reviewed and adapted according to the risks associated with the service.

12. Cookies and Local Storage

The public Logisticode website may use technical resources necessary for website functionality.

The Logisticode portal may use cookies or browser storage to support authentication, session management, user preferences and application operation.

Any optional analytics or tracking technologies must be disclosed and, where required, enabled only after obtaining appropriate consent.

13. International Data Transfers

Personal information may be processed in countries where Logisticode's authorized service providers operate.

Where personal information is transferred outside the European Economic Area, applicable data protection requirements and appropriate transfer safeguards must be observed.

Information about specific service providers and relevant international transfers can be requested through our privacy contact.

14. Your Data Protection Rights

Subject to applicable law, individuals may have the right to:

• Request access to their personal information.
• Request correction of inaccurate information.
• Request deletion of personal information.
• Request restriction of processing.
• Object to certain processing activities.
• Request data portability where applicable.
• Withdraw consent where processing relies on consent.
• Lodge a complaint with a competent data protection authority.

To exercise these rights, contact privacy@logisticode.io .

In the Czech Republic, the competent supervisory authority is the Office for Personal Data Protection .

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, integrations, legal requirements or data processing practices.

The current version will be published on this page with an updated revision date.

16. Contact Information

For questions about this Privacy Policy, Google account integration, Gmail data processing or requests concerning personal information, contact:

Knapeto s.r.o.
Company ID: 30028795
28. pluku 906/38, Vršovice
100 00 Prague 10
Czech Republic

Email: privacy@logisticode.io