Privacy policy

Tuggo is a marketplace for tugs, barges and towage services. This page explains what we collect when you use it, why we hold it, and what you can ask us to do with it.

The controller of your personal data is the company that operates Tuggo. Write to hello@tuggo.app about anything on this page.

What we collect

Your account

Your name, work email address and the company you signed up for. Passwords are stored as one-way hashes by our authentication provider; we never see them.

Your company and its listings

Company name, country, contact details, description, logo, and whatever you publish about your vessels, crewing, maintenance, port agency or supply services, including photos and certificates. This is business information, and most of it is meant to be public. The documents you upload with a certificate are not: they are stored privately and shown only to your own team.

Messages

Enquiries and replies sent inside Tuggo, so both sides keep the thread. We do not read them except where we have to, for example to look into a report of abuse.

Technical data

Our hosting and database providers log IP addresses and request details to run the service and keep it secure. We use a strictly necessary cookie to keep you signed in, and the browser's local storage to remember your cookie choice and your language.

Analytics, only if you agree

If you accept analytics, Google Analytics sets cookies that tell us which pages are used and how people arrive. If you decline, the script is never loaded and any analytics cookies from an earlier visit are cleared. You can change your mind at any time: Cookie settings.

Why we are allowed to hold it

• To provide the service — running your account, publishing your listings and delivering your messages. Without this data there is no service to give you.
• Our legitimate interest — in checking that a company signing up is real, keeping the platform secure and preventing abuse. A catalogue nobody vets is a catalogue nobody can trust.
• Your consent — for analytics cookies, and for nothing else. You can withdraw it whenever you like.
• Legal obligation — where we have to keep records, for example accounting records once we charge for something.

Who else sees it

Other members of the network see what you publish: your company profile, your listings, and the name and company of whoever sends or answers an enquiry. Your private documents and your internal notes are not part of that.

We use a small number of processors to run the service:

• Vercel — hosting and delivery of the website.
• Supabase — database, authentication and file storage.
• Resend — sending the emails Tuggo generates.
• Google Analytics — only if you accepted analytics cookies.

Each of them processes data on our instructions. Where a provider processes data outside the European Economic Area, that transfer is covered by the European Commission's standard contractual clauses. We do not sell your data, and we do not share it for anyone else's advertising.

How long we keep it

Your account and your company's data stay for as long as the account is open. Ask us to delete the account and we remove it, along with its listings, photos and documents. Messages are kept for the other side of the conversation as well, so a thread stays readable for them with your account removed from it. Anything we have to keep by law is kept for as long as the law says and no longer.

Your rights

Under the GDPR you can ask us for a copy of your data, to correct it, to delete it, to limit what we do with it, or to object to processing we base on legitimate interest. You can also ask for your data in a portable form. Write to hello@tuggo.app and we will answer within one month.

Most of it you can do yourself: your profile, your company and your listings are editable in the dashboard at any time.

If you think we have handled your data badly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or to the supervisory authority where you live.

Changes

If we change this policy we update the date at the top. If a change matters to you, we will say so by email rather than leave you to find it here.