Privacy policy
Effective 2026-09-14. This is Phase I's policy, for the beta only.
Phase I is synthetic data only. No real commercial shipment ever enters the beta. Everything below describes what the systems are technically capable of collecting, so it applies fully once real shipments do.
Who we are
CruzLink is built and operated by GoalSight LLC, Saint Croix, U.S. Virgin Islands. This policy covers both this portal (cruzlink.app) and the CruzLink mobile app.
What this portal collects
The beta access request form collects the email address, role, organization name, and any message you choose to write. This site sets no cookies and loads no third-party scripts or analytics; the only data that reaches us is what you type into that form.
What the app collects
| Category | When |
|---|---|
| Email address | Sign-in, via a magic link. We do not use passwords. |
| Role and organization | Assigned by us, server-side, after you're invited to the beta. |
| Shipment records you create | Reference numbers, declared values, and the documents you attach. |
| Location | Captured only when you record a custody event (pickup, handoff, arrival, inspection, or receipt), never in the background. |
| Device identifier | Recorded on each custody event, to show which device captured it. |
| Photos | Only if you attach one to a custody event. |
Where it's stored, and who can see it
Data lives in a Supabase-hosted database operated by GoalSight LLC. Row-level security means a user can only see shipments tied to their own organization and role; we do not build cross-org visibility into the product. Custody events are chained, so a record cannot be quietly edited after the fact.
Who else touches it
Supabase (database, authentication, file storage) and Cloudflare (hosting and this form's handler) process data on our behalf as infrastructure providers, not as parties who use it for their own purposes. Apple and Google handle app distribution and their own standard installation telemetry, governed by their own policies.
What we don't do
We don't sell your data, use it for advertising, or share it outside GoalSight LLC's own operation of the beta.
Your choices
To see what we hold about you, correct it, or ask us to delete it, contact support.
Changes to this policy
If this policy changes, we'll update the effective date above and describe what changed, rather than editing it silently.