Privacidade

Account: your e-mail address, name, and a password stored only as a salted hash.

Company profile: company name, country, role, commodity groups, photos, services and markets you choose to add.

What you post: listings, tenders, Forum posts and comments, offers, messages and the files or photos attached to them.

Verification: the registration documents you upload so we can mark your company as verified.

Your settings: saved items, favorites, price alerts, blocked companies and notifications.

Saved work: the inputs of calculations you save (profit and loss, landed cost) and the full search you save, with all its filters. Only you can see them.

Calculator numbers: when you stay on a profit-and-loss result for a few seconds, the numbers on it (product, countries, transport mode, quantity, prices, freight and insurance if you typed them, rates, and the result) are kept for market statistics. They are stored without your name, account or IP address; a salted hash that changes every day only keeps repeat views of the same inputs to one entry. Tonport does not sell personal data.

Places: the places where your company operates and the place of each listing (city, port or country, with coordinates). We use them to personalise news and listings, and a listing place appears as a city-level dot on the public world map.

Device location: only when you tap Use my current location, the app asks your phone for its position once to place your company or listing on the map and fill in the address. We store the address and coordinates you confirm (see Places above), never your movements, and we do not read your location in the background.

Profile history: languages, work experience and education that you keep on your profile are shown on your public profile. If you upload a CV (PDF, Word or text, up to 5 MB), the server reads it to suggest these entries; the CV file itself is not stored, only what you choose to keep.

Photo contest: photos you enter in Trader's Lens, with their story and place, are public and shown under your company name. Photos are re-encoded so camera data such as GPS is removed. Your votes are stored per account and are not shown to other members.

Price check-ins: a price you type for a product is stored with your account (product, price, time) and deleted with it. Other members never see your own price: they only see the median and range of at least three members, and only the newest price of each member is counted.

Survey: answers to the onboarding survey (activity, volume, how you heard of us) are visible only to Tonport staff.

Mobile app: the app keeps a sign-in token on your phone (stored on our side only as a hash). If you switch on notifications in the app settings, we store your phone's notification token with the platform (iOS or Android), the app version and the time. It is deleted when you sign out of that device or delete your account. When Tonport sends you a notification, a short generic line (no names, prices or message text) and the type of event are passed through Google's Firebase Cloud Messaging, which delivers it to Android phones and, for iPhones, through Apple's push service. The app also uses Tonport's own light counter (the same one as the website, with no IP address and no user id) to see at which step of a form people stop, so we can make forms shorter; it sends only the screen path, for example /app/wizard/signup/3. Apart from that the app talks only to Tonport and has no advertising or third-party analytics tools.

Notification choices: the app stores, per account, which groups of notices you muted and your quiet hours, to decide what is sent to your phone.

Location on the website: if you tap "Use my current location", your browser asks permission first. The position is sent to our server and on to the OpenStreetMap address services (Nominatim and Photon) only to look up the address. We do not store it unless you save the place; the looked-up address may be cached for up to a day.

Abuse protection: request counters keyed by your IP address or company are kept for at most one day, to slow down automated misuse such as repeated sign-in attempts and spam.

Password reset: a one-hour token (stored only as a hash) and the e-mail we send you.

History: Tonport continues the service that was previously operated under the name hammaddeticareti. Accounts, listings, photos, conversations and offers from that service were moved to Tonport.

A session cookie keeps you signed in. It is needed for the site to work.

A cookie remembers your language choice for one year. It is not used for tracking.

If you arrive through an invite or campaign link, a cookie remembers the invite or source so we can credit it when you register (30 days; the cookie is HttpOnly and is read only by our server).

A light page counter records the page, language, country, device type and referrer. It stores no IP address and no user id. The visitor value is a salted hash that changes every day, so visits cannot be followed across days.

Our host, Vercel, also measures page views and page speed (Web Analytics and Speed Insights). These tools set no cookies and keep no personal profile of you.

We show no third-party advertising and do not sell personal data.

To run the marketplace: show your listings and profile as you set them, connect you with other companies and send you notifications.

To check companies: verification documents are seen only by your own company and Tonport administrators.

To announce field jobs: when a new job is posted, agents of that job type who work near the job place get a notification.

To keep the site safe: an IP address is held briefly in server memory to limit abuse such as repeated sign-in attempts.

Other members see your company profile and your listings, which show your company name, according to your visibility settings. Certificates you add to your company profile can be opened by any signed-in member; verification documents are different and stay with your company and Tonport administrators.

Our service providers process data for us: Vercel for hosting and file storage, Neon for the database (EU region, Frankfurt) and Resend for e-mail such as password resets and contact messages. When you search for a city or port, the text you type, or the point you tap on a map, is sent to a place search service (Photon, by Komoot). Maps load their tiles from OpenStreetMap servers, which therefore see your IP address and the map area you view.

Tonport administrators can read a conversation when this is needed for security, moderation or to check a report. Each time an administrator opens a conversation or one of its attachments, it is recorded in an audit log. Messages are also scanned automatically for contact details that point away from the platform (such as phone numbers or messaging app handles); administrators see only the flag, not the message, until they open the conversation.

If you use the option that drafts a listing from photos, up to four of those photos (resized) are sent to an AI service, Anthropic, which returns a suggested title and description. You review and change every value before you publish. The photos are not kept by Tonport for this purpose.

If you tap "Translate" under a message you received, the text of that one message is sent to the same AI service, Anthropic, which returns a translation into your language. It is sent only when you tap, the translation is shown to you and not stored by Tonport, and the original stays one tap away.

To show listings in your language, the text of a listing (title and description) is sent to a machine translation service, MyMemory, and the translation is stored with the listing. Do not put personal data or secrets in listing text.

You can edit your profile and posts at any time, and choose whether your company page is public.

You can ask for a copy of your data, a correction, or deletion of your account and personal data. See Delete account.

After you delete your account, a security record (e-mail address, name and company) and your company's verification documents are kept for six months and then deleted.