Privacy Policy

Last updated: 12 October 2026

This Privacy Policy explains how the operator of the Arachi platform ("Arachi", "we") collects, uses and protects your company and personal data when you use the Arachi platform (arachi.co and related services).

1. Data controller and contact

Arachi. For questions and requests about data: info@arachi.co.

2. What we collect

• Account data: company name, email, login details (the password is stored in protected form), account type and plan, profile details (for forwarders: description, services, coverage, contacts).
• Logistics data: loading and unloading places, cargo description, weight, volume, HS code, dates, special requirements, documents you upload (invoices, packing lists, etc.), your carrier base and categories.
• Carrier data and offers: the carrier's company name, email, and the price, currency, time, notes and documents it sends.
• AI chat data: your conversation with the AI assistant, files you upload and the results the AI prepares.
• Technical data: IP address, browser and device information, login time, security and error logs, session data.
• Email tracking: when the request email or link sent to a carrier is opened (for the request's «viewed» status).

3. How we use it

• to deliver your requests to the carriers you choose and to collect and compare offers;
• to send email notifications, reminders and automatic reminders on your instruction;
• to fill in a request with AI features and run the chat assistant;
• to prepare reports, statistics and past price information for your panel (based on your own data only);
• to protect accounts, logins and documents, prevent abuse and improve the Service.

Legal basis: performance of the contract with you under the Terms, your consent (registration and use of AI features), our legitimate interests (security) and legal requirements.

4. Artificial intelligence (AI) processing

When you use AI features (filling the form from text or a file, the AI chat assistant) the following are sent to third-party AI providers: the text you write, the document or image you upload, the conversation history and the request or carrier data needed.

Providers: OpenAI, Google (Gemini) and/or Anthropic. Data is sent only to process your request. Processing by the providers is governed by their own terms and privacy policies.

Using AI features is optional. Do not process highly sensitive documents with AI.

5. Who the data is shared with

• The carriers you select: the request details and, if you choose, the file attached to the request. Prices and offer history are kept between the customer and the carrier that replied.
• Through a public link: if you create a public link, anyone who has it can see the RFQ details and send an offer.
• Public forwarder profile: the company description and contact details (phone, WhatsApp, Telegram, email) you place in the catalogue are visible to all users. You can hide the profile at any time.
• Service providers (processors): database and hosting (Supabase and the server (hosting) provider), email delivery service, AI providers, and Google Fonts for loading fonts.
• Competent public authorities where legally required.

We do not sell your data.

6. Transfers abroad

The servers of third-party providers (AI, database, email) may be outside Azerbaijan. Data is transferred only for the purposes above and under the conditions required by law. The database is hosted in Supabase regions in India (Mumbai) and South Korea (Seoul).

7. Retention

• Account and business data is kept while your account is active.
• When you delete the account from the panel, requests, offers, carrier base, profile and uploaded files are deleted. They may remain in backups for a limited period.
• Security logs are kept for a limited period.
• Data may be kept longer where the law requires it.

8. Security

We use encrypted connections (HTTPS), protected password storage, account access control and time-limited signed links for documents. Documents and panel pages are kept out of search engine indexes. No system is absolutely secure, so do not place unnecessary sensitive data in documents.

9. Your rights

• access your data and receive a copy;
• have inaccurate data corrected;
• have data deleted: you can delete the account yourself from the panel (the «Account» menu);
• withdraw consent and object to processing;
• complain to the competent authority.

For requests: info@arachi.co.

10. Cookies and browser storage

We use browser storage that is necessary to keep you logged in (session/token), remember your language choice and for security. We currently do not use advertising or analytics cookies or tracking tools.

11. Children

The Service is for business users and is not intended for persons under 18.

12. Changes

We may update this Policy. The new version is published on this page with the date above.