Last updated: 8 September 2026

This Privacy Policy describes how Nowlun Co. ("Nowlun", "we", "us" or "our") collects, uses, shares and retains information, and what choices you have over it.

It covers every way you can reach us:

• The Nowlun web platform at nowlun.com, including freight search, quotations, bookings, shipment tracking and document handling.
• The Nowlun mobile application (the "App"), available on the Google Play Store and the Apple App Store.
• Guest tracking, which lets anyone follow a shipment by its number without a Nowlun account, from our site, from the App, or from an integration we publish for another platform. Section 3 covers it.

By using any of these, you agree to the collection and use of information as described here. If you do not agree, please do not use them.

1.1 Account and company information. When you register, we collect your name, email address, phone number, and the company you work for, including the details we need to verify that company as a customer.

1.2 Shipment information. When you search, quote, book or track, we collect the information you give us for that purpose: origin and destination, cargo description, weights and volumes, container and equipment details, tracking numbers, and the shipping documents you upload, which may name other parties to the shipment such as shippers, consignees and notify parties.

1.3 Communications. We keep the messages you send us and we send you, including email and WhatsApp support conversations, together with any attachments.

1.4 Technical and usage information. We collect your IP address, device type, operating system, browser or app version, mobile network information, and records of your activity on the service, such as pages viewed and features used. Our servers also write standard request logs, and our error monitoring captures diagnostic information when something fails.

1.5 Guest tracking. Tracking a shipment without an account collects far less than any of the above. Section 3 sets out exactly what it takes and what it returns.

We do not ask for and do not want payment card numbers, government identity numbers, health information, or any other special category of personal data. Please do not send them to us.

We use the information above to:

• Provide the service: run freight searches, produce quotations, create and manage bookings, and track shipments.
• Query shipping lines, carriers and tracking data providers on your behalf, which requires sending them the tracking or booking number concerned.
• Read the shipping documents you upload so the details on them can be filled in for you, and extract prices from rate emails sent to us.
• Communicate with you about your account, your quotations, your bookings and the status of your shipments.
• Provide customer support, including over WhatsApp and email.
• Keep the service secure and available: authenticate users, apply rate limits, detect and prevent abuse and fraud, and diagnose faults.
• Understand how the service is used in aggregate so we can improve it.
• Meet our legal, customs, tax and accounting obligations, and establish, exercise or defend legal claims.

We do not sell personal information. We do not share it for advertising, and we do not use it to build advertising profiles.

Anyone can follow a shipment by its number without registering, from our site, from the App, or from an integration we publish for another platform, such as our Nowlun Tracking app in ChatGPT. This section covers all of them.

3.1 What we receive. The number you are asking about and, only where we cannot work out the carrier from the number itself, the shipping line you name. To return to a shipment already being followed, we receive an encrypted reference we issued for it, which carries no readable identifier and works only for the person it was issued to. Where the request reaches us through another platform, that platform also provides a pseudonymous identifier for the person making it, which we store only as an irreversible derivation, so that one person's lookups stay separate from another's. We do not receive your name, your email address, your phone number, or anything else from the session or conversation you are in.

3.2 What we create, and what comes back. Tracking a shipment creates a record holding the number you gave, the carrier, the ports of loading and discharge, the sailing dates and the status: we cannot ask a carrier for a status without recording the query. No account is created for you and no password exists. What comes back is the shipment reference, its status, the carrier, the two ports, the estimated departure and arrival dates, the transport mode, and whether the carrier is still being queried. Nothing else: no cargo descriptions, no container numbers, no prices, no customer or company names, and no internal identifiers. Guest tracking cannot reach any Nowlun customer account, quotation, price or document, cannot create, change or cancel anything, and cannot show what somebody else has tracked.

3.3 Limits and your controls. Guest tracking is capped at three shipments per person per seven days, alongside overall ceilings. You can stop at any time by removing the integration or leaving the page. To have a record deleted, email ops@nowlun.com with the number concerned; we action deletion requests within 30 days. The number itself goes to the shipping line or its tracking data provider, as section 5 describes, and retention is set out in section 6.

Where data protection law requires a legal basis, we rely on: performance of a contract, for providing the service you or your company asked for; our legitimate interests in operating, securing and improving the service, and in answering a tracking request you made; compliance with legal obligations, for customs, tax and accounting records; and your consent where we ask for it, which you may withdraw at any time.

• Shipping lines, carriers, their agents and tracking data providers, so a shipment can be booked, moved and tracked.
• Service providers who process information on our behalf under contract, and only on our instructions: cloud hosting and storage, error monitoring, email delivery, the WhatsApp Business messaging platform, and AI providers who read shipping documents and messages so their contents can be extracted.
• The platform an integration runs on, where you reach us inside someone else's product rather than our own. It carries the request to us and the answer back under its own privacy policy, and for our ChatGPT app that platform is OpenAI.
• Your own company. The Nowlun platform is a business tool: colleagues on your company account, and the account administrators of that company, can see the shipments and bookings made under it.
• Professional advisers, such as our auditors and lawyers, where they need it.
• Competent authorities, where we are required to disclose by law or valid legal process, or where it is necessary to protect our rights, our users or the public.
• An acquirer or successor, if Nowlun is involved in a merger, acquisition or sale of assets. This policy continues to apply to the information transferred.

We do not share your personal information with anyone else, and we never sell it or rent it.

• Account and profile information: for as long as your account is open. If you delete it, see our account deletion page for what is removed and when.
• Shipment, booking and quotation records: as business and accounting records, for as long as our customs, tax and accounting obligations require.
• Shipping documents you upload: with the shipment they belong to, under the same rule. Documents uploaded by a guest that are never attached to a shipment are purged automatically.
• Guest tracking records, described in section 3.2: retained for as long as we offer guest tracking, so a shipment already asked about is not looked up and paid for twice, and deleted within 30 days of a request to ops@nowlun.com.
• Rate limiting counters: they expire automatically after one hour, one day or thirty days, and hold no identifiers.
• Server request logs and error reports: kept for a limited period for security, fault diagnosis and abuse investigation, then discarded.

Subject to applicable law, you may ask us to give you a copy of the personal information we hold about you, correct it if it is wrong, delete it, restrict or object to how we use it, or provide it in a portable form. You may also withdraw any consent you have given.

To exercise any of these, email ops@nowlun.com from the address on your account, or, for a guest tracking record, quoting the tracking number. We answer within 30 days. You also have the right to complain to your local data protection authority.

You can delete your Nowlun account from the App, or by contacting us. See our account deletion page.

Some information we cannot delete on request, because we are required to keep it: shipment and customs records are the usual case. Where that applies we will tell you.

Access to customer data is restricted to the people who need it to do their job, credentials are held in a managed secrets vault rather than in our code, and traffic to our services is encrypted in transit. No system is perfectly secure, but we take these measures seriously and review them.

Our systems are hosted in the European Union, in Amazon Web Services' Frankfurt region. Some of our service providers, and the carriers we query on your behalf, operate outside the country you are in, so your information may be processed elsewhere. Where personal data leaves the European Economic Area we rely on appropriate safeguards, such as the European Commission's standard contractual clauses.

Our services link to sites and services we do not control, including carrier tracking pages. We are not responsible for their content or their privacy practices, and we encourage you to read their policies before giving them information.

Nowlun is a business service and is not intended for anyone under 18, and in no case under 13. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

We may update this policy. When we do, we change the date at the top of this page and post the revised version here. If a change materially affects how we use information about you, we will make that clear.

For any question, concern or request about this policy or about your information, contact Nowlun Co. at ops@nowlun.com