Privacy Policy
Plain version: we hold what you type in to run your stockroom, nothing more, and we don't sell or advertise with it.
Who this is
Cargohold is operated by SteadyKeel, a UK sole trader. Email hello@steadykeel.co.uk with any question.
What we collect
- Your email address, to sign you in (no password — a one-time link) and for account emails.
- Your business name, so the app can label your own stockroom.
- What you track and log — item names, units, quantities, and any price/note you choose to enter. Only ever what you type in.
We don't use tracking cookies, ad pixels, or identifying analytics. The only cookie is a session cookie that keeps you signed in.
Why we hold it
To run the account and stockroom you've set up, nothing more. We don't sell or share your data, except with the services that make the app work: Cloudflare (hosting, database), Resend (sending your sign-in and notification email), Stripe (subscription payments — we never see or store your card details) and Anthropic (the AI features below).
Who we are
Cargohold is operated by SteadyKeel, a sole trader established in the United Kingdom. Contact: hello@steadykeel.co.uk. Our trading address is shown in the Terms of Service.
Our lawful basis
For running your account, providing the service and billing you: performance of our contract with you. For keeping the service secure, detecting misuse of the AI features and preventing fraud: our legitimate interests in operating a safe service, balanced against your interests — which is why the security log keeps only what it needs and for a limited time.
What we collect
- Your account — email address, company name, sign-in times, and a Stripe customer reference if you subscribe. We never see or store card details.
- Your business records — suppliers, materials, products, stock movements, purchase and sales orders, storefront listings.
- Data about other people that you enter — your customers and supplier contacts: names, whatever contact details and notes you choose to add, and, if you use the shipping fields, delivery addresses and courier tracking references.
- What you type into the AI features, and what the system did with it.
- Messages you send us through the support form.
- Page-view counts for the public pages — a count per page per day, with no visitor identifier, no cookie, no IP address and no device information.
Who else processes it
| Provider | Purpose | Where |
|---|---|---|
| Cloudflare | Hosting, database, storage | EU/UK |
| Resend (and Amazon SES) | Sign-in links and notifications | EU |
| Stripe | Subscription billing | EU/UK |
| Anthropic | The AI features | US |
| Microsoft (OneDrive) | Encrypted off-site backup copies | EU/UK |
The transfer to Anthropic in the US is covered by the EU standard contractual clauses as extended by the UK International Data Transfer Addendum, with a transfer risk assessment we will share on request.
How long we keep it
Your business records are kept until you delete them — we do not apply a retention schedule of our own to them, because they are yours. You can set your own periods under Your data in the app and we will act on that. What we keep for our own purposes:
- Account details — while your account exists
- AI query log — at most 180 days (you can ask for less)
- Support messages — 24 months
- Price-check and payment event records — 400 days
- Page-view counts — 25 months
- Encrypted backups — 14 dated copies, normally the last 14 days
Your rights
You have the right to access your data, to have it corrected, to have it deleted, to restrict or object to processing, and to portability — a copy in a usable format. Most of these you can exercise yourself, immediately, and whether or not you are subscribed: export, correct and delete all work in the app. For anything else, email hello@steadykeel.co.uk and we will respond within one month.
If you are unhappy with how we have handled your data, tell us first — and you can complain to the UK Information Commissioner's Office at ico.org.uk.
Data about your customers and suppliers
When you store information about other people — your customers, your supplier contacts — you decide what happens to it and we act only on your instructions. You also set your retention for those records — we keep them until you tell us otherwise, and never apply a schedule of our own to them (see Your data in the app). Those obligations are set out in our Data Processing Agreement, which forms part of the Terms of Service.
The AI features
The chat box, the Assistant and bulk import send what you type to Anthropic to turn it into stock and product actions. Along with your message we send the names and units of your existing materials and products, so it can match what you mean to what you already have — never your prices, customers, orders or contact details.
We keep a record of what is typed into those three boxes, together with what the system did with it. It is used for two things only: fixing the tool when it misreads something, and spotting misuse — attempts to manipulate the AI, or use of a stock tool as a general-purpose chatbot. Those records are visible only to SteadyKeel, are never sold or shared, and you can ask us to delete yours at any time by emailing hello@steadykeel.co.uk.
Anthropic does not train its models on data sent through its API.
How long we keep it
For as long as your account is active. Email us to delete your account and everything in it.
Children
Cargohold is a business tool and isn't intended for children.
Changes
If this changes in a way that matters, we'll update the date below.
Last updated 19 September 2026.
Questions or a complaint
Email hello@steadykeel.co.uk first. You can also complain to the UK Information Commissioner's Office at ico.org.uk.