Privacy Policy
Who We Are
LoadIt is a production planning platform for apparel manufacturing, operated by O2 Store (Pvt) Ltd, a company incorporated in Sri Lanka. References to “we,” “us,” or “our” in this Policy mean O2 Store (Pvt) Ltd.
This Privacy Policy describes how we collect, use, and protect information when you use the LoadIt platform, our website, or related services (the “Service”). It is incorporated by reference into our Terms of Service.
Information We Collect
Account information. When you sign up for the Service, we collect your name, email address, company name, role, and authentication identifiers (such as your Google account ID if you sign in with Google SSO).
Factory and operational data. When you use the Service, you upload or generate operational data: orders, styles, line balances, T&A milestones, machine inventories, planning history, factory calendars, operator counts, and similar production-planning information. We treat this as your data, not ours (see §4 below).
Discovery interview responses. When you complete the Discovery interview as part of trial signup, we collect your responses to the 28-topic structured interview. This information is used to seed your trial sandbox and to inform Service improvements.
Usage data. We collect technical information about how you use the Service: pages visited, features used, performance metrics, error logs, and approximate location derived from IP address. This data is used to operate, secure, and improve the Service.
Communications. When you contact us by email, in-app chat, or other channels, we retain those communications to provide support and maintain a record of our interactions.
How We Use Information
We use the information we collect to:
- Provide, operate, and maintain the Service.
- Personalise the Service to your factory based on Discovery interview responses and operational data you provide.
- Communicate with you about the Service, including support requests, security advisories, and material changes to the Service or these policies.
- Detect, prevent, and address technical issues, security incidents, and abuse.
- Improve the Service through aggregate, de-identified usage analysis.
- Comply with legal obligations.
We do not use your data to train AI models. We do not sell your data. We do not license your data to third parties for marketing purposes.
Your Data
Operational data you upload or generate through the Service (orders, styles, line balances, milestones, machine inventories, planning history) remains your property. We act as a processor of this data on your behalf. We do not claim ownership and do not use it for any purpose beyond providing the Service to you.
You may export your operational data in standard formats (Excel, CSV) at any time through the Service. On termination of your account, you may export your data within 30 days, after which we may delete it.
How We Secure Information
We use the following technical and organisational measures to protect your information:
- Encryption. Data is encrypted at rest using AES-256 and in transit using TLS 1.3.
- Tenant isolation. Each factory's data is isolated using row-level security (RLS) at the database layer. RLS policies are enforced at every read and write — even authenticated users cannot access other factories' data through the API.
- Access controls. Authentication is handled via Google SSO with audit logging on every change. Production system access by our team is gated by role-based controls and is logged.
- Hosting. The Service is hosted on managed cloud infrastructure (currently Supabase, which runs on AWS).
- Backups. Database backups are taken regularly and encrypted at rest. Backup retention follows industry-standard timelines.
No system is perfectly secure. We cannot guarantee absolute security, but we apply commercially reasonable practices and continually improve our controls.
AI Processing
The Service uses artificial intelligence for several features, including the auto-planner, line-balance solver, NLP Copilot, and Discovery interview. Some AI features call third-party AI providers (currently Anthropic) via API.
When data is sent to a third-party AI provider:
- The data is sent over an encrypted connection (TLS 1.3).
- The provider operates under their own privacy and data-handling terms. We currently use Anthropic, whose API terms specify that customer data sent through the API is not used to train models.
- We minimise the data sent: the AI receives only what it needs to answer the request.
- We do not use AI providers to derive new categories of information about you beyond what is needed to fulfil the request.
Sharing Information
We do not sell your information. We share information only as described below:
- Service providers. We use third-party providers (such as cloud hosting, email delivery, AI inference, error monitoring) that process information on our behalf to operate the Service. These providers are bound by contractual confidentiality obligations.
- Legal compliance. We may disclose information if required by law, legal process, or to protect the rights, property, or safety of LoadIt, our users, or others.
- Business transfers. If LoadIt is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice and require equivalent privacy protections as a condition of the transfer.
Trial Period and Feedback
Until our July 2026 commercial launch, the Service is offered as a free trial. During this period:
- Trial-period data is treated with the same security and confidentiality as paid customer data.
- We may use aggregated, de-identified usage patterns from trial users to improve the Service. We do not share trial user data with other trial users or with third parties for marketing.
- Trial users may be asked for feedback. Participation in feedback sessions is voluntary. Any feedback you provide may be used to improve the Service without restriction or compensation, but we will not attribute specific feedback to you publicly without your permission.
Your Rights
Depending on your jurisdiction, you may have rights including:
- Access to the personal information we hold about you.
- Correction of inaccurate or incomplete information.
- Deletion of your information, subject to legal and operational retention requirements.
- Restriction or objection to certain processing activities.
- Data portability (export of your operational data in standard formats).
To exercise these rights, contact us at hello@loadit.live. We may need to verify your identity before acting on a request.
Data Retention
We retain account information and operational data for as long as your account is active. On termination, operational data is retained for 30 days to allow export, after which it may be deleted. Communications and audit logs may be retained for longer periods to comply with legal and security obligations.
International Transfers
Our infrastructure and team are based in multiple jurisdictions. Information you provide may be processed and stored in countries other than your own. Where international transfers occur, we apply appropriate safeguards consistent with applicable law.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to you with reasonable advance notice (at least 30 days where practical) via email or in-app notification. Non-material changes (clarifications, formatting, typographical corrections) may be made without advance notice.