Who we are
CocoRoute is a CRM and operating system for freight forwarders. It is built and operated by CocoLabs OÜ (“we”, “us”). This policy covers this website, the public demo workspace, and the CocoRoute application.
Questions about anything here go to hello@cocoroute.co. A person reads that inbox.
Two different situations
It matters which of two situations you are in, because a different party decides what happens to your data.
You are visiting our website or asking us for a demo
We decide how that information is used, and this policy is the full account of it.
You use a workspace that a freight forwarder runs on CocoRoute
You might be that forwarder’s employee, or a shipper using their customer portal, tracking page or enquiry form. The forwarder decides what is collected and why. We store and process it on their instructions, under our agreement with them. Their privacy notice applies to you, and requests about that data should go to them first. If you write to us instead, we pass the request to the forwarder concerned.
What we collect
When you request a demo
Your name, work email, company, role, monthly shipment volume, and anything you type in the message box. With it we store the page you sent it from and any campaign tags in the link that brought you. Your IP address and browser type are stored alongside the request so we can stop automated abuse of the form. They are not shown to our sales staff.
When you use the public demo workspace
The demo is one shared workspace that anyone can sign in to with the credentials printed on its sign-in page. Whatever is typed there is visible to every other visitor until the nightly reset erases it. Please do not enter real personal or commercial information. The demo sends no email to anyone.
When you browse this website
We use Google Analytics, loaded through Google Tag Manager, to measure which pages are read and whether the demo form is started and sent. Our product videos play through YouTube’s privacy-enhanced player, which loads only when you press play; from then on YouTube’s own privacy policy applies. Your browser also remembers two small preferences on your own device: the day or night theme, and the last workspace address you signed in to. Neither is sent to us.
When you use the free tools
The rate estimator and the cargo advisor process what you type in order to answer you. Do not put personal information into them; they do not need it.
When you have an account in a workspace
On the forwarder’s behalf we hold your name, email, role, sign-in records, and the business records you and your colleagues create: enquiries, quotations, shipments, documents, messages, invoices and payments. We also keep an audit trail of who changed what.
What we use it for
- To reply to your demo request and arrange the conversation you asked for. We do not add you to a newsletter.
- To run the application for the forwarders who subscribe to it, including sign-in, notifications and transactional email sent in their name.
- To keep the service secure: rate limiting, abuse prevention, audit logging and backups.
- To understand, in aggregate, which parts of the website are useful.
We do not sell personal information, and we do not use the contents of any customer’s workspace for advertising or to train AI models.
Who processes it for us
We run on a small number of infrastructure providers. Each handles data only to provide its service to us.
| Provider | What it does | Where |
|---|---|---|
| Neon | The databases. Each organisation has its own. | Singapore |
| Railway | Runs the application servers. | Singapore |
| Vercel | Serves the website and the application’s pages. | Global edge network |
| Google Firebase | Sign-in and file storage. Each organisation has its own project. | Google Cloud |
| Google Gemini | Reads documents and emails a user submits for AI capture, and powers the assistant. | Google Cloud |
| Resend | Delivers transactional email. | United States |
| Redis Cloud | Job queues and short-lived caches. | United States |
| Google Analytics and Tag Manager | Website measurement. | Google Cloud |
| YouTube | Plays the product videos on this website, only when you press play. | Google Cloud |
| ShipsGo | Carrier tracking. Receives container and booking numbers, not personal data. | — |
Some of these providers are outside your country. Where the law requires a safeguard for that transfer, we rely on the provider’s standard contractual terms.
How long we keep it
- Demo requests are kept while we are in conversation with you, and deleted when you ask.
- The demo workspace is wiped and rebuilt every night.
- Workspace data is kept for as long as the forwarder’s subscription runs, and is returned or deleted at the end of it as our agreement with them provides.
- Audit records are kept for five years for operations and seven years for finance, because freight and financial rules expect a forwarder to be able to produce them.
- Backups roll off on a schedule and are not used for anything except recovery.
How we protect it
- Every organisation has its own database, its own sign-in project and its own file storage. A login issued for one cannot be used against another.
- Access inside a workspace is by role, and the forwarder’s administrator controls which roles can see which modules.
- Traffic is encrypted in transit. Databases have point-in-time recovery, and a snapshot is taken before every release.
- Changes to shipments, finance records and permissions are written to an audit log.
No system is perfectly secure. If we learn of a breach that affects your information, we will tell the affected forwarder, or you directly where we are the one responsible, without undue delay.
Your choices and rights
Depending on where you live, you may have the right to see the personal information held about you, correct it, have it deleted, object to or restrict its use, or receive a copy of it. You can also withdraw a consent you gave.
For a demo request or anything else on this website, write to hello@cocoroute.co and we will act on it within thirty days. For data in a forwarder’s workspace, ask that forwarder; we help them respond.
You can block website measurement with your browser’s tracking protection or a content blocker. The website works the same without it.
Changes and contact
When this policy changes we update the date at the top. If a change materially affects customers, we tell their administrators before it takes effect.
CocoLabs OÜ · hello@cocoroute.co. See also the Terms of Use.