Privacy Policy for Cargors in ChatGPT

1. Who we are and what this policy covers

Cargors B.V. (“Cargors”, “we”, “us”, or “our”) operates the Cargors integration available through ChatGPT. We are responsible for the personal data we process to operate this integration.

You can contact us about privacy at operations@cargors.com, or write to Cargors B.V., Science Park 608, 1098 XH Amsterdam, the Netherlands. Our Dutch Chamber of Commerce registration number is 77339096.

The integration provides road freight pricing for standard pallet shipments within the Netherlands and across Europe. It returns the number of available transport options and the lowest available all-in price in EUR, excluding VAT. It does not create shipments, make bookings, send manual quotation requests to carriers, process payments, or disclose carrier identities.

This policy explains Cargors' handling of data received through this integration. If you visit our website or continue to the Cargors platform to book transport, the general Cargors privacy policy applies to those separate services. OpenAI's handling of your ChatGPT conversations and account is governed by OpenAI's own privacy notices and your applicable ChatGPT settings.

2. Information we receive

Shipment information. When ChatGPT calls the pricing tool, Cargors receives the shipment details included in that request: pickup and delivery locations, pallet quantity, pallet type, total weight, pallet height, and an optional pickup date. Standard pallet type determines the pallet's length and width. The service also calculates route locations, coordinates, applicable dates, pricing assumptions, and rate results. Shipment locations can constitute personal data when they relate to an identifiable person.

Use a city or postcode together with its country where possible. Exact street addresses and device location are not needed for the standard pricing workflow. If you include personal information in a location field, that information can be processed by the pricing and location services described below.

Technical information. Our service receives network and request information needed to handle the connection. Application and infrastructure logs can contain request times, endpoint paths, response status, processing duration, connection IP addresses, and diagnostic errors. Connection IP addresses may belong to OpenAI or another intermediary rather than to your device. Error records can include the location text involved in a failed lookup. The optional standalone rate server sends shipment parameters to the Cargors public rates API in the request URL, which can also appear in access logs.

Support information. If you contact us, we receive the contact details and information you include in your message.

The pricing workflow does not require a Cargors account or your name, email address, phone number, payment information, identity documents, password, or API keys. The tool does not request your full ChatGPT conversation or access to other conversations. Please do not include sensitive personal information, secrets, or unrelated third-party information in your request.

3. Why we use information

We use the information to resolve the shipment route, calculate available transport rates, return the result to ChatGPT, handle errors, maintain service availability and security, and respond to support or privacy requests. We also process information where necessary to comply with legal obligations or establish, exercise, or defend legal claims.

We do not use information received through this integration for advertising, behavioral profiling, selling personal data, or training our own AI models. These commitments concern Cargors' use of integration data; they do not describe OpenAI's separate processing.

Where the GDPR applies, the legal basis is taking steps at your request before entering into a contract or providing a contracted service, where applicable (Article 6(1)(b)); our legitimate interests in providing requested business pricing, maintaining a secure and reliable service, and handling support, subject to your rights (Article 6(1)(f)); or compliance with applicable legal obligations (Article 6(1)(c)). Simply using the integration does not constitute consent to unrelated processing.

4. Who receives information

OpenAI / ChatGPT: ChatGPT sends the tool request to Cargors and receives the pricing response, including the result, resolved route, shipment assumptions, and a link to the Cargors platform.

Google Maps services: We send shipment location queries and derived coordinates to Google Maps geocoding services to resolve and validate pickup and delivery locations. Google's handling of information is subject to the applicable Google Maps terms and privacy notices.

Infrastructure and support providers: Providers operating our hosting, networking, logging, security, and support systems can process information to deliver those services. The pricing service runs on Amazon Web Services in the eu-north-1 region (Stockholm, Sweden), which is inside the European Economic Area. The pricing lookup only reads carrier tariff and reference data from Cargors’ own systems; it does not write your request to our database.

Authorized Cargors personnel: Personnel can access information where needed to operate the service, resolve problems, or handle your request.

Authorities and professional advisers: We may disclose information where required by law or necessary for legal proceedings and the protection of legal rights.

The current rate calculation uses carrier pricing information held within Cargors' systems. A pricing lookup does not create a booking or initiate a manual quotation request to carriers. Any later booking is a separate interaction on the Cargors platform.

5. How long we keep information

The pricing service uses temporary caches to reduce repeated calculations and location lookups. The periods below are taken from the running service:

• Shipment lookup parameters and rate results — cached in application memory and eligible for reuse for 15 minutes.
• Successful location lookups and derived location data — cached in application memory and eligible for reuse for 24 hours.
• Unsuccessful location lookups — cached in application memory and eligible for reuse for 10 minutes.
• Application, error, access, and security logs — retained for up to 90 days and then deleted.
• Support correspondence — retained for up to 24 months after the request is closed.
• Database backups — a pricing lookup is read-only and writes no record of your request to our database, so no record of it is contained in database backups.

The cache periods above describe when an entry can be reused; they are not guaranteed deletion deadlines. Expired entries are not reused. They are removed when accessed again, evicted as the cache fills, or cleared when the application process restarts. The current cache implementation does not schedule deletion at the moment an entry expires.

The pricing workflow does not create a shipment, booking, or customer account record for a rate lookup. Separate technical logs and any support correspondence remain subject to the retention periods above. Information needed for a legal obligation or an active legal dispute may be retained for that purpose until the obligation or dispute ends.

6. International processing

The Cargors pricing service is hosted on Amazon Web Services in the eu-north-1 region (Stockholm, Sweden), inside the European Economic Area. Our own processing of integration data therefore takes place in the EEA.

Two recipients are established outside the EEA. OpenAI, based in the United States, sends the tool request and receives the pricing response. Google, based in the United States, provides the geocoding services used to resolve pickup and delivery locations. Transfers to these recipients rely on a transfer mechanism recognised under Chapter V GDPR, which for both is the European Commission's adequacy decision for the EU-US Data Privacy Framework where the recipient is certified under it, and otherwise the European Commission's Standard Contractual Clauses.

You can ask us for information about the safeguards that apply to a specific transfer by writing to operations@cargors.com.

7. Your choices and privacy rights

You can limit the information you provide, use city or postcode information instead of an exact street address, and stop using or disconnect the integration through ChatGPT. Disconnecting stops future use of the connection; it does not automatically delete existing logs, support records, or your ChatGPT conversation.

Subject to applicable law, you may request access to, correction of, deletion of, or restriction of processing of your personal data, object to processing based on legitimate interests, and request data portability where that right applies. If processing relies on consent, you may withdraw it without affecting earlier lawful processing.

To exercise your rights, email operations@cargors.com with the subject “ChatGPT integration privacy request”. Include only the information needed to locate the relevant request, such as its approximate date and route. We may need proportionate information to verify your identity and locate records; do not send identity documents or secrets unless we have established a necessary, secure process with you. We respond within one month, or explain within that period if a lawful extension is needed.

Because the pricing tool does not require an account identifier, we may be unable to link a request to you from your email address alone. Deletion requests to Cargors do not delete records independently held by OpenAI or other independent controllers.

You may also lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, or another competent supervisory authority.

8. Security

We use HTTPS for the public pricing connection and measures designed to protect information against unauthorized access, disclosure, alteration, and loss. Access to operational information is limited according to role and operational need. No system or transmission method can guarantee complete security.

9. Cookies and automated pricing

The MCP pricing endpoint does not set browser cookies or use advertising trackers. Visiting the Cargors website or booking platform is a separate interaction subject to those services' privacy and cookie notices.

The integration automatically calculates transport pricing from shipment details and available tariffs. It does not use a personal profile to decide eligibility for transport, enter into a transport contract, or make a booking on your behalf.

10. Changes and contact

We may update this policy to reflect changes to the integration or our data practices. We will update the effective date and provide any additional notice required by applicable law.

For questions or requests about this policy, contact operations@cargors.com

Last update: 29 October 2026