Privacy Policy

Last updated: 23 September 2026

MyCoreGrid ("we", "us") operates mycoregrid.com, a business marketplace and logistics platform. This policy explains what personal data we collect when you use the platform, why we collect it, who we share it with and what rights you have. It applies to the website, the dashboard and the emails we send you.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the laws of the Republic of Lithuania.

1. Data we collect

We collect the following data, depending on how you use the platform:

  • Account data: your name, email address and password (stored only as a secure hash), and the profile details you choose to add, such as a photo, company, city, country, industry, phone number and bio.
  • Sign-in with Google, LinkedIn or Facebook: your name, email address and profile picture as provided by that service. We do not receive your password for those services and we never post on your behalf.
  • Content you create: product listings, freight and shipment records, CMR documents, invoices, connections and messages exchanged with other users.
  • Technical data: IP address, browser and device type, pages visited, timestamps and error reports, collected in server logs and by our monitoring tools to keep the platform secure and working.
  • Payment data: if you pay for a service, your card details are handled by Stripe, our payment processor. We store only a customer reference and the transaction history, never full card numbers.

2. How we use your data

We use your data to:

  • Provide the platform: create and secure your account, display your listings and profile, connect you with other businesses and generate the documents you request.
  • Communicate with you: send verification links, password resets, security notices and other transactional emails. Marketing emails are sent only if you opt in, and you can opt out at any time in your settings.
  • Protect the platform: detect abuse, limit repeated sign-in attempts, investigate errors and enforce our terms.
  • Improve the platform: understand which features are used so we can maintain and develop them.
  • Comply with the law: keep records where accounting, tax or other legal obligations require it.

4. Who we share data with

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, and only as needed to run the platform:

  • Resend: delivery of transactional and, if you opt in, marketing emails.
  • UploadThing: storage of images and files you upload.
  • Stripe: payment processing.
  • Mapbox: maps, address search and route display.
  • Sentry: error monitoring, which may include technical data about your session.
  • Google, LinkedIn and Facebook: only when you choose to sign in with them, and only to confirm your identity.

Other users of the platform see the profile and listing information you choose to publish. We may also disclose data where required by law or to protect our rights, and to the hosting providers that store our systems.

5. Cookies

We use only the cookies needed for the platform to work:

  • A session cookie that keeps you signed in.
  • A locale cookie that remembers your language.
  • A security cookie that protects forms against cross-site request forgery.

We do not use advertising or cross-site tracking cookies. Because these cookies are strictly necessary, no consent banner is shown.

6. How long we keep data

We keep your account data for as long as your account exists. When your account is deleted, we delete or anonymise your personal data within 30 days, except for records we must keep by law (for example invoices, which are retained for the period required by accounting legislation) and data needed to resolve disputes or enforce our terms. Server logs are kept for a limited period and then deleted.

7. Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you.
  • Have inaccurate data corrected.
  • Have your data deleted (see the next section).
  • Restrict or object to certain processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time, without affecting processing that took place before.

To exercise any of these rights, contact us at the address in the Contact section. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (VDAI) or the supervisory authority in your country.

8. Deleting your account and data

You can ask us to delete your MyCoreGrid account and all personal data associated with it at any time:

  • Send an email from the address registered to your account with the subject "Delete my account".
  • We will confirm the request and delete your account, profile, listings, messages and other personal data within 30 days. Records we are legally required to keep are retained only for as long as the law requires.
  • If you signed in with Google, LinkedIn or Facebook, you can also remove MyCoreGrid from the connected apps in that service's settings. This ends the connection but does not delete your MyCoreGrid account; send us the email above for that.

Send deletion requests to:

info@mycoregrid.com

9. Children

MyCoreGrid is a platform for businesses and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy as the platform develops. The date at the top shows when it was last changed. For significant changes we will notify you by email or with a notice on the platform.

11. Contact

For any question about this policy or your personal data, write to us at:

info@mycoregrid.com