Privacy policy

DockCount, based in the Philippines, decides how the data described here is handled. Questions, requests and complaints go to privacy@dockcount.com, and a person reads them.

For the records your team creates inside the product, the relationship runs the other way: your business decides what goes in, and we act on your instructions.

• Account details. Name, work email address, and a one-way scramble of the password. We never store the password itself and cannot recover it.
• Who did what. Which user signed for which delivery, and when. That attribution is the point of a receiving log, so it stays on the record.
• What you upload. Photographs of packing slips and of damaged goods. A slip sometimes carries a driver's name or signature, which means a photograph of it can carry personal data.
• Billing. Whether the account is paid, which plan it is on, and when it renews. Card numbers go to Lemon Squeezy at checkout and never reach us.

There is no advertising on the site, no tracking pixel, and no analytics script. We do not build a profile of you, because we have nothing to do with one.

To run the service you asked us to run, which is the contract between us. To keep the service secure and working, which is our legitimate interest and yours. To keep the records the law requires us to keep, which mostly means invoices.

On plans that include slip reading, the photograph you upload is sent to Anthropic, which returns the text on it. Anthropic processes it to answer that one request. The image is not used to train a model, and nothing else is sent with it.

On plans without slip reading, the photograph is stored and shown to your team and goes nowhere else. If you would rather no image ever left our systems, say so and we will turn slip reading off for your account.

Five companies, each doing one job, each named on the subprocessor page with what they do and where they are. All of them are in the United States, so data about your team leaves its home country to reach them.

We do not sell data, and we do not share it with anyone outside that list, except where a court or the law requires it. If that ever happens and we are allowed to tell you, we will.

Receiving records stay for as long as the account is open, because a receiving log with a hole in it is worse than no log. Close the account and we delete everything within thirty days, apart from invoices, which tax rules make us keep for longer.

Ask us to delete something sooner and we will, unless the law says we cannot.

• A copy of everything we hold about you.
• A correction, if something is wrong.
• Deletion, where we do not have to keep it.
• An export in a form another system can read.
• That we stop a particular use of it.

Write to privacy@dockcount.com and we will answer within thirty days. There is no charge. If our answer does not satisfy you, you can complain to the data protection authority where you live.

Passwords are hashed with bcrypt. The session cookie cannot be read by scripts in your browser, and outside local development it only travels over an encrypted connection. Every query is scoped to your organisation at the point it runs, so one business cannot reach another's records even by guessing an address. Uploaded photographs are served only to people signed in to the account that owns them.

If we ever have a breach that puts people at risk, we will tell the affected accounts and the relevant authority, and we will say what happened rather than what we wish had happened.

This is a tool for warehouses. It is not for anyone under 16, and we do not knowingly hold data about children.

If this policy changes in a way that affects you, we will email the account admins before it takes effect. The date at the top always says which version you are reading.