Privacy Policy

3PL Audit ("we", "us") is operated by Zain Ikram, based in Pakistan. This policy explains what we collect when you use 3PL Audit, why, and the choices you have. Questions: support@zingcalc.com.

The short version

• We use your contracts and invoices only to audit them for you.
• We never contact your 3PL, and we never sell or share your data.
• The free audit runs entirely in your browser. The file is not uploaded.
• Deleting your account permanently deletes everything in it, immediately.
• We use no advertising or tracking cookies.

What we collect

• Account details: your name, email address and password. Passwords are stored by our authentication provider as a one-way hash; we never see them.
• Contract details you enter: 3PL name, rates, billing units, tiers, minimums and any contract wording you paste.
• Invoices you upload: the invoice number, date, total and every line of the CSV file, kept so each finding can show the line it came from.
• Audit results: the overcharges we find and the status you give them (disputed, credited, dismissed).
• Technical logs: our hosting provider records standard request logs (such as IP address, browser and pages requested) to run and secure the service.

The free audit

On the free audit page, your invoice file is read and audited inside your own browser and is never sent to our servers. If you choose to sign up, the rates you typed are kept in your browser's local storage so you don't have to retype them. The invoice is not stored.

How we use it

• To run audits, show your findings and build your dispute pack.
• To send emails you need: account confirmation, password resets and, if switched on, dispute deadline alerts.
• To keep the service secure, fix problems and answer your support requests.

We do not use your contracts or invoices for advertising, and we do not sell any data.

Who processes it for us

We use a small number of providers who process data only on our instructions:

• Supabase: database and sign-in. Data is encrypted in transit and at rest.
• Vercel: hosting of the website and app.
• Resend: sending account and alert emails.
• Paddle.com: our Merchant of Record for paid plans. Paddle collects and processes your payment details, billing address and tax information under its own privacy notice; we never see or store your card number.

These providers may store data in countries other than yours, including the United States.

Cookies

We use only the cookies needed to keep you signed in. They are HTTP-only and secure, so scripts on the page cannot read them. We use no analytics, advertising or tracking cookies.

How long we keep it

We keep your data while your account is open. When you delete your account in Settings, your account, contracts, invoices and findings are deleted immediately. Copies may remain in our providers' encrypted backups for a limited period until those backups expire.

Your choices and rights

• Change your name or password, or switch off deadline alerts, in Settings.
• Delete your account and all its data in Settings at any time.
• Ask for a copy of your data, or ask any question about it, by emailing support@zingcalc.com.

Depending on where you live, you may have further rights under local law; contact us to use them.

Security

Each account's data is only accessible to that account. Connections are encrypted, data is encrypted at rest, and sign-in tokens are kept in secure, HTTP-only cookies. No system is perfectly secure; if we ever learn of a breach affecting your data, we will tell you without undue delay.

Children

3PL Audit is a business tool and is not intended for anyone under 18.

Changes

If we change this policy, we'll update the date at the top, and email you about significant changes before they take effect.