Privacy policy

Who is responsible for your data?

For the accounts of forwarders and their teams, TCH-S SARL is the data controller.

For the forwarders' customers (parcel senders and recipients), the forwarder decides which data is recorded: the forwarder is the controller, and TCH-S SARL processes the data on its behalf, only to provide the service.

Which data?

Accounts: name, email address, password (stored with irreversible encryption), role, company, language, two-factor authentication, sign-in log.

Forwarders' customers: name, phone, WhatsApp number, email, delivery addresses, language, notification preferences.

Parcels: description, weight, dimensions, parcel photos, tracking steps, amounts, payments and payment proofs sent by the customer.

No bank data is stored: payments are made outside KoraKargo.

Why?

To record and track parcels, inform customers of progress (WhatsApp, email), allow secure pickup (pickup code), manage declared payments, secure accounts and keep a record of sensitive actions (audit log), and invoice forwarders.

No data is sold or used for advertising.

Who has access?

Each forwarder only sees its own data: it is strictly separated from other forwarders. The KoraKargo team only accesses it for support, read-only, with a reason recorded in the forwarder's log.

Technical providers: OVHcloud (server and photo hosting), Cloudflare (site protection and acceleration), and the email and WhatsApp sending services chosen by TCH-S SARL. They only use the data to provide their service.

How long?

Data is kept as long as the forwarder uses KoraKargo, then erased at its request or at the end of the contract, subject to legal retention obligations (notably accounting).

One-time codes expire within minutes. Backups are kept 30 days (daily) and 12 months (monthly): erased data disappears from backups when they expire.

Security

Encrypted connection (HTTPS), encrypted passwords, two-factor authentication, photos and proofs in private storage reachable through temporary links, attempt limits, a log of sensitive actions and encrypted backups in another region.

Your rights

You can request access to your data, its correction or its erasure.

Customers of a forwarder: first contact your forwarder, who can download and erase your data from KoraKargo. Team members: you can delete your account yourself (see “Data deletion”).

You can also write to contact@tch-solution.com. We reply within one month.

Changes

This policy may change. The update date is shown at the top of the page; forwarders are informed of any significant change.