Privacy Policy & GDPR Disclosure

Last Updated: May 30, 2026

ParcelRec ("We" or "The System"), developed by DigiBuildings, is a B2B SaaS solution provided for e-commerce sellers and logistics warehouses. In accordance with the General Data Protection Regulation (GDPR) and local data protection laws, this document transparently explains how your data is collected, used, and protected.

1. What Data Do We Collect?

We only collect the minimum data necessary for the healthy operation of the system:

Account and Contact Data: Company name, authorized person's full name, email address, phone number, and billing information.
Operational Data (Logs): Scanned cargo barcode text, order number, processing time, Google Drive File ID, and platform/device information.
Integration Data: Encrypted authorization keys (Refresh Token) provided to upload files to Google Drive.

ATTENTION: VIDEO RECORDINGS and EMPLOYEE FOOTAGE captured through the ParcelRec system are NEVER stored on our servers. They are transferred directly to the customer's own cloud (Drive) space.

2. For What Purpose Do We Use the Data?

The data we collect is used solely for the following purposes:

Creating user accounts and managing authorization processes.
Processing subscription, billing, and payment transactions.
Ensuring system security and preventing cyber-attacks (e.g., Brute-Force).
Fulfilling technical support requests and calculating usage quotas (volume).

3. Information Sharing with Third Parties

Your personal data is strictly not sold to third parties for advertising or marketing purposes. It may only be shared within legal boundaries with the following parties required for the performance of the service:

Payment infrastructure providers (for credit card collections).
E-Invoice integrators (for legal billing processes).
Our cloud server (Hosting) infrastructure providers.
Official authorities and courts in case of a legal obligation.

4. Google API Services User Data Policy (Limited Use)

ParcelRec's use and transfer to any other app of information received from Google APIs will adhere strictly to the Google API Services User Data Policy, including the Limited Use requirements. Our system cannot access, read, or delete other personal or corporate files in the user's Google Drive account.

5. Cookies and Tracking

Our system solely uses "Essential Cookies" to manage user login sessions, ensure security via CSRF (Cross-Site Request Forgery) checks, and remember preferences. 3rd-party cookies for advertising targeting are not used.

6. User (Data Subject) Rights under GDPR

In accordance with GDPR, you have the right to learn whether your data is being processed, request information if it has been processed, request correction of incomplete/incorrect data, and request the deletion of your data when legal retention periods expire. You can submit your requests through the system or directly to us.

7. Employer (Customer) Responsibility

Informing the personnel working at the packing stations where the camera is located, putting up "Video Recording in Progress" signs in appropriate places, and managing the necessary personnel consents are entirely the legal obligation of the Company Purchasing the Service (Customer) under the title of Data Controller.