**TransParto L.L.C.**
Republic of Kosovo, Prishtine
contact@transparto.com
**Last updated: February 24, 2026**
---
**1. Introduction**
TransParto L.L.C. ("TransParto", "we", "us", or "our") operates the TransParto platform, accessible via the website at transparto.com and through our mobile applications (collectively, the "Platform"). This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our Platform.
By creating an account or using the Platform, you agree to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our services.
---
**2. Data Controller**
The data controller responsible for your personal data is:
TransParto L.L.C.
Prishtine, Republic of Kosovo
Email: contact@transparto.com
---
**3. Data We Collect**
We collect and process the following categories of personal data:
**3.1 Account and Profile Data**
- First name and last name
- Email address
- Phone number (optional)
- Profile photo (optional)
- Preferred language
- Account type (client or transporter)
- Password (stored in encrypted/hashed form; we never have access to your plain-text password)
**3.2 Company Data (for Transport Companies and Client Companies)**
- Company name
- Unique Identification Number (UIN / business registration number)
- Company address (street, city, postal code, country)
- Contact email and phone number
- Company website (optional)
- Company bio/description (optional)
- Company logo and gallery images (optional)
- Business documents (e.g., business certificates, transport insurance, other insurance documents), including document type, file name, validity date, and verification status
- Banking information (account holder name, IBAN, BIC, bank name) for payment processing purposes
**3.3 Shipment and Transport Data**
- Shipment details: pickup and delivery locations, dates, cargo descriptions, weight, dimensions, packaging type, and special requirements
- Shipment images and documents
- Shipment status and event history (e.g., posted, in transit, delivered, completed, cancelled)
- Offers submitted by transport companies, including pricing and terms
- Transport tour details, including assigned drivers, trucks, routes, and schedules
**3.4 Driver Data (managed by Transport Companies)**
- Driver name, email, and phone number
- Driver profile photo (optional)
- Driver license validity date
- Driver status (active/inactive)
**3.5 Vehicle Data**
- Truck/vehicle details including type, license plate, capacity, and associated transport company
**3.6 Communication Data**
- Messages exchanged between users through the Platform's messaging system
- File attachments sent within messages (images, documents)
**3.7 Ratings and Reviews**
- Star ratings and written comments left by users about transport companies or other users in connection with completed shipments
**3.8 Notification and Preference Data**
- Your notification preferences (push notifications and email notifications for shipment updates, offer updates, tour updates, messages, and system notifications)
**3.9 Technical and Device Data**
- Device type (when using our mobile application)
- Push notification identifiers (OneSignal player ID) for delivering push notifications
- Push notification registration logs (for troubleshooting notification delivery)
- Browser user agent string
**3.10 Usage Data**
- Timestamps of account creation, profile updates, and other platform activity
- Login and authentication events
---
**4. How We Use Your Data**
We process your personal data for the following purposes:
**4.1 Providing and Operating the Platform**
- Creating and managing your account
- Enabling clients to post shipments and receive offers from transport companies
- Enabling transport companies to browse available shipments, submit offers, and manage transport operations
- Facilitating communication between clients and transporters through in-app messaging
- Managing transport tours, driver assignments, and shipment tracking
- Processing and displaying ratings and reviews
**4.2 Notifications and Communications**
- Sending push notifications about shipment status changes, new offers, tour updates, and messages (based on your preferences)
- Sending email notifications about platform activity (based on your preferences)
- Sending system notifications such as welcome messages, application status updates, and administrative alerts
**4.3 Security and Platform Integrity**
- Verifying transport company credentials and documents
- Reviewing reported shipments and flagged content
- Processing account deletion requests
- Preventing fraud and unauthorized access through authentication and access controls
**4.4 Platform Improvement**
- Monitoring platform performance and troubleshooting technical issues (e.g., push notification delivery diagnostics)
- Understanding usage patterns to improve the user experience
---
**5. Legal Basis for Processing**
We process your personal data based on the following legal grounds:
- **Contract Performance**: Processing necessary to provide the services you have requested by creating an account and using the Platform (Article 6(1)(b) GDPR equivalent).
- **Legitimate Interest**: Processing for platform security, fraud prevention, service improvement, and troubleshooting (Article 6(1)(f) GDPR equivalent).
- **Consent**: Where you have provided optional data (e.g., profile photo, company gallery) or opted in to specific notification channels. You may withdraw consent at any time.
- **Legal Obligation**: Where processing is required to comply with applicable laws and regulations.
---
**6. Data Sharing and Third Parties**
We share your personal data only as necessary to operate the Platform:
**6.1 Other Platform Users**
- When a client posts a shipment, transport companies can see the shipment details and the client's company information.
- When a transporter submits an offer, the client can see the transport company's profile, including company name, ratings, and contact details.
- Messages are shared only between the conversation participants.
**6.2 Third-Party Service Providers**
We use the following third-party services to operate the Platform:
- **Postmark** (Wildbit, LLC): For sending transactional email notifications. We share your email address and notification content with Postmark solely for email delivery purposes.
- **OneSignal** (OneSignal, Inc.): For delivering push notifications to your mobile device. We share a device identifier with OneSignal to enable push notification delivery.
- **Natively** (Build Natively): Our mobile application wrapper provider. Natively facilitates the delivery of our web application as a native mobile app experience.
- **Cloud Infrastructure Provider**: Our backend infrastructure (database, authentication, file storage, and serverless functions) is hosted on secure cloud infrastructure with data centers in the European Union.
We do not sell your personal data to any third party.
**6.3 Legal Requirements**
We may disclose your data if required to do so by law, regulation, legal process, or enforceable governmental request.
---
**7. Data Storage and Security**
**7.1 Data Storage**
Your data is stored on secure cloud infrastructure. Files (documents, images, profile photos) are stored in secure cloud storage with access controls.
**7.2 Security Measures**
We implement the following security measures to protect your data:
- All data transmission is encrypted using TLS/SSL (HTTPS)
- Passwords are hashed and never stored in plain text
- Row-Level Security (RLS) policies are enforced on all database tables, ensuring users can only access data they are authorized to see
- Authentication tokens are used to verify user identity for every data request
- Role-based access control (client, transporter, company admin, company manager, driver, platform administrator) restricts data access to authorized personnel only
- File uploads are stored in secure, access-controlled storage buckets
- API endpoints are protected against unauthorized access
- HMAC-SHA256 signed tokens are used for secure email unsubscribe links
**7.3 Data Retention**
We retain your personal data for as long as your account is active or as needed to provide you with our services. If you request account deletion, we will process your request and delete your data in accordance with our deletion procedures, subject to any legal retention obligations.
---
**8. Your Rights**
You have the following rights regarding your personal data:
**8.1 Access**: You may access your personal data through your profile and account settings within the Platform.
**8.2 Rectification**: You may update and correct your personal data at any time through your profile settings, company settings, or by contacting us.
**8.3 Deletion**: You may request deletion of your account and associated data through the Support page in the Platform or by emailing us at contact@transparto.com. Upon receiving a deletion request, we will review and process it. Please note that some data may be retained as required by law.
**8.4 Notification Preferences**: You may manage your email and push notification preferences at any time through the notification settings in your profile. You may also unsubscribe from all email notifications using the unsubscribe link provided in every email we send.
**8.5 Data Portability**: You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format.
**8.6 Objection and Restriction**: You have the right to object to or request restriction of certain processing activities.
To exercise any of these rights, please contact us at contact@transparto.com.
---
**9. Cookies and Tracking**
The Platform uses essential cookies and local storage for authentication and session management purposes only. We use local storage to save your language preference and authentication state. We do not use third-party tracking cookies or analytics cookies.
---
**10. Children's Privacy**
Our Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete such data promptly.
---
**11. International Data Transfers**
Your data may be processed by our third-party service providers in countries outside of Kosovo or the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place to protect your data, including standard contractual clauses or equivalent protections.
---
**12. Changes to This Privacy Policy**
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date at the top of this document. We encourage you to review this Privacy Policy periodically.
---
**13. Contact Us**
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at:
TransParto L.L.C.
Prishtine, Republic of Kosovo
Email: contact@transparto.com