Privacy Policy
Last updated: 2026-05-06.
1. Who we are
LandedClear is a pay-per-use web application that helps importers, exporters, and cross-border e-commerce sellers calculate landed costs, classify products to HS codes using AI, screen suppliers against sanctions lists, and download a compliance-ready PDF report.
LandedClear is a product operated by Amana Noble Venture, a partnership firm registered in India. The partners are Hamza and Aboobacker. The partner responsible for LandedClear day-to-day, including any data-protection enquiry or request, is Aboobacker ("Aboo"). Contact: [email protected].
Under India's Digital Personal Data Protection Act 2023, the Data Fiduciary for personal data processed through LandedClear is Amana Noble Venture, with Aboobacker acting as the designated point of contact.
This document explains, in plain language, what we collect, why, who we share it with, how long we keep it, and what rights you have over it. There is no fine print buried below — if it isn't here, we don't do it.
2. What we collect, and why
When you use the calculator (free preview)
- Calculation inputs — product description, country pair, declared value, quantity, weight. Used only to compute the result you see on the page.
- A short-lived anonymous token — a random UUID generated server-side so we can match a follow-up payment to the calculation you just ran. No personal data in this token.
- Cloudflare Turnstile token — proof-of-humanity check to gate the AI step against scrapers.
You can use the calculator without giving us an email address.
When the AI classifies your product
We send the product description text and origin/destination country to Anthropic (USA) so their model can return an HS code recommendation. We do not send your email address, IP, payment details, or any other personal information. We cache the result for 30 days against a hash of the inputs so repeat lookups don't burn AI capacity.
When you proceed to checkout (Standard / Premium PDF)
We collect:
- Email address — to send you the PDF and any follow-up updates (e.g. if a sanctions screening completes after the PDF was first generated).
- Foreign supplier company name (optional, Standard / Premium only) — used solely to perform a sanctions screening against the OpenSanctions database. If left blank, we skip the screening and the PDF says so.
We do not collect: your name, postal address, phone number, card details, billing address, or company tax ID.
During payment
We redirect you to Razorpay's hosted checkout. Razorpay collects whatever payment data they need; we receive only confirmation of success, the order/payment IDs, and the email address you provided on our checkout form. Razorpay's privacy policy applies to anything they collect during their flow.
During PDF generation and delivery
Once payment is confirmed, our background worker:
- Re-runs the calculation with the data we already have.
- Looks up compliance requirements internally (no external call here).
- If you provided a supplier name, sends only that name to OpenSanctions (Germany) for matching.
- Renders a PDF and stores it on our server for 30 days.
- Sends you the PDF via Resend (USA). Resend sees your email address, the subject, and the PDF attachment.
Cookies and analytics
When you accept the analytics banner, we load Google Analytics 4, which sets first-party cookies (_ga, _ga_*) to count unique visitors and aggregate page views. We have configured GA4 with IP anonymisation enabled.
Until you click Accept, no analytics request fires. If you click Decline, GA4 is never loaded for that browser. Your choice is saved in your browser's local storage so the banner doesn't reappear on every visit. To revoke an "Accept", clear site data for landedclear.com in your browser settings.
We do not use any other tracking, retargeting, or advertising technologies.
IP addresses and server logs
- Cloudflare (edge) and Nginx (web server) record your IP with each HTTP request, in routine access logs. These rotate daily and are kept 7 days, then deleted.
- Waitlist signups: we store a SHA-256 hash of your IP only — never the raw IP — for 30 days, to deduplicate signups. Then deleted.
- Sanctions screening audit: the supplier name you screened, the result, and a timestamp. Kept 90 days, then automatically purged.
- Payment / transaction records: kept indefinitely for tax, accounting, and refund obligations.
3. How we share data
We share data with the third parties listed below, and only what is strictly necessary for the function described.
| Provider | What they receive | Why |
|---|---|---|
| Anthropic (USA) | Product description + country pair | HS classification |
| OpenSanctions (Germany) | Supplier company name (only if you provided one) | Sanctions screening |
| Razorpay (India) | Whatever you enter on their checkout, plus your email | Payment processing |
| Resend (USA) | Your email, the PDF attachment, the email body | Email delivery |
| Cloudflare (USA / global) | HTTP request metadata, Turnstile tokens | Edge routing, DDoS protection, bot detection |
| Supabase (USA) | All data we store | Database hosting |
| Google Analytics 4 (USA) | Aggregated page-view data, anonymised IP | Aggregate visitor stats — only if you consent |
| Sentry (USA) | Error events, request URL, stack trace | Outage detection. We exclude email addresses, supplier names, and secrets from error events. |
We do not share your data with advertising networks, data brokers, or marketing agencies. We do not now and will not in the future sell or rent customer data.
4. International data transfers
LandedClear is operated from India. Several of our service providers are based in the United States or have US infrastructure. By using LandedClear, you understand that some of your data is transferred to and processed outside your country of residence. We rely on each provider's own legal frameworks for international transfers (Standard Contractual Clauses, EU-US Data Privacy Framework certification where applicable).
5. How long we keep things
| Data | Retention |
|---|---|
| Calculation inputs (when not paid) | Not stored |
| AI classification cache | 30 days |
| AI classification full audit log | 365 days, then archived |
| Email address (from `transactions`) | Indefinite (accounting / support) |
| Supplier name (from `transactions`) | Indefinite (audit trail) |
| Sanctions screening detail log | 90 days, then auto-purged |
| Generated PDF files | 30 days, then deleted |
| Server access logs | 7 days |
| Waitlist IP hash | 30 days |
| Payment / transaction records | Indefinite (legal requirement) |
| Database backups | 30 days |
If you'd like specific records deleted sooner than the retention period, see "Your rights" below.
6. Your rights
Wherever you live, you can email [email protected] and ask us to:
- Tell you what data we hold — usually within 7 days.
- Correct anything that's wrong.
- Delete your data — we'll erase what we can. We retain a minimal payment record (date, amount, transaction ID, currency, provider) because tax law and refund obligations require it; we will not retain your email linked to that record once obligations are completed.
- Stop processing for a particular purpose — e.g. decline analytics consent, opt out of sanctions screening on future PDFs.
- Receive a copy in a machine-readable format — transactions records and PDFs as JSON / CSV / file attachments, your choice.
If you live in the EU/UK (GDPR), California (CCPA/CPRA), India (DPDP Act 2023), or any jurisdiction with local data-protection law, all of the above rights apply to you in addition to whatever your local law confers. Reference "Privacy Request" in your email subject. If unsatisfied with our response, you may escalate to your country's data-protection authority.
7. Legal basis (EU / UK customers)
- Performance of a contract — to deliver the PDF you paid for.
- Compliance with a legal obligation — sanctions screening where requested, tax record retention.
- Legitimate interests — fraud prevention, rate limiting, audit trails, error monitoring.
- Consent — analytics cookies only, revocable any time.
We do not process special-category sensitive data.
8. Children
LandedClear is a B2B tool for adults engaged in cross-border trade. We do not knowingly collect data from anyone under 18.
9. Security
- All connections are encrypted with TLS. HTTP is redirected.
- Production secrets live on the server in a file readable only by the service account.
- Database is on Supabase with their default at-rest encryption. No public Postgres port.
- Card data never touches our servers; Razorpay handles it on their hosted pages.
- Sentry receives stack traces; we exclude email addresses, supplier names, and secrets from breadcrumbs.
If you discover a security issue, email [email protected]. We'll acknowledge within 48 hours.
10. Changes to this policy
If we materially change how we collect or share data, we'll update this page and bump the Last updated date at the top. For significant changes, we'll email customers who purchased a PDF in the last 12 months.
11. Contact
For any privacy question, request, complaint, or correction:
[email protected] — subject line "Privacy Request" for rights requests, anything else for general questions.
We aim to respond within 7 business days. If we can't, we'll at least confirm receipt and tell you when we'll respond in full.
LandedClear provides indicative landed-cost and compliance estimates based on publicly available data. Verify with a licensed customs broker before shipment. Not legal or financial advice.