Privacy Policy

Version 1.0 · Effective August 23, 2026

This Privacy Policy explains how 【Exsigo - legal entity name and address to be completed】 (“Exsigo”, “we”, “us”) collects, uses, and shares information when you use the Exsigo platform, website, and AI-assistant connectors (together, the “Service”). Exsigo is a business-to-business product; we process personal data mainly in the context of professional use.

1. Information we collect

• Account information. Email address, name, and a securely hashed password (or your Google account identifier if you sign in with Google). We never store plain passwords.
• Billing information. Payments are processed by Stripe. We receive plan and subscription status; we do not store your card details.
• Usage information. The searches and filters you run (for example HS codes, product terms, date ranges), the credits/units consumed, pages viewed, and standard log data (IP address, browser type, timestamps). We use this to operate metering, prevent abuse, and improve the product.
• Support communications. Messages you send to our support address or through in-product feedback.

2. AI assistant connectors

Exsigo can be connected to third-party AI assistants (for example Claude or ChatGPT) as a data connector. When you use the connector:

• Sign-in is handled through our authentication partner WorkOS and Exsigo’s own login. We receive your email address and name to link the connector to your Exsigoaccount; your password is never shared with the AI platform or WorkOS.
• Your conversations stay with your AI provider. We do not receive your chat history. We receive only the specific tool requests the assistant makes on your behalf (for example “market brief for HS 3105 in Brazil”), and we return the requested trade data.
• Tool requests are logged like any other usage (query parameters, credits consumed) for metering, abuse prevention, and support.
• The AI provider processes our responses under its own terms and privacy policy. You can disconnect the connector at any time in your AI assistant’s settings, which stops any further access.

3. How we use information

• Provide, secure, and improve the Service;
• Meter usage, enforce plan limits, and bill subscriptions;
• Detect and prevent fraud, scraping, and abuse;
• Send transactional email (verification, receipts, usage notices) and, with the ability to opt out at any time, occasional product updates. Unsubscribe links are honored automatically.

4. How we share information

We do not sell personal data. We share it only with service providers that help us run the Service, under contracts limiting their use of it:

• Amazon Web Services, cloud hosting (United States);
• Stripe, payment processing;
• WorkOS, connector sign-in infrastructure;
• Google Analytics, aggregate website analytics;
• Email delivery providers for transactional messages.

We may also disclose information if required by law, or as part of a merger, acquisition, or asset sale (with notice where required).

5. The trade and marketplace data we publish

The Service provides information derived from official government customs records, Amazon marketplace data, and licensed data sources. This is business information, company names, shipment descriptions, and trade values as declared to customs authorities, together with seller and business names, registered business entities, product listings, and estimated sales figures as they appear on or are derived from public marketplace listings. It is business information, not consumer profiles. If you believe a record concerning you or your business is inaccurate or should be reviewed, contact us at support@exsigo.com.

6. Cookies

• Essential: a session cookie that keeps you signed in (httpOnly, scoped to Exsigo domains).
• Analytics: Google Analytics cookies for aggregate site usage. These are not used for third-party advertising.

7. Data retention

Account and usage records are kept while your account is active and for a limited period afterwards, then deleted or anonymized, except records we must keep longer for accounting, billing, or legal compliance.

8. Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted and credentialed. No method of transmission or storage is 100% secure, but we work to protect your information with industry-standard measures.

9. Your rights

You may access, correct, export, or delete your account information. Email support@exsigo.com and we will respond within a reasonable period. Depending on where you live, you may have additional statutory rights (for example under GDPR or CCPA); we honor valid requests to the extent required by applicable law.

10. International transfers

The Service is hosted in the United States. If you access it from elsewhere, your information is processed in the United States under this Policy.

11. Children

The Service is for business use and not directed to anyone under 18.

12. Changes

We will post any changes to this Policy here and update the effective date above; for material changes we will provide additional notice (for example by email or in-product).

13. Contact

Questions or requests: support@exsigo.com. See also our Terms of Service.