Privacy Policy
Who We Are
LoadIt is a production planning platform for apparel manufacturing, operated by O2 Store (Pvt) Ltd, a company incorporated in Sri Lanka. References to “we,” “us,” or “our” in this Policy mean O2 Store (Pvt) Ltd.
This Privacy Policy describes how we collect, use, and protect information when you use the LoadIt platform, our website, or related services (the “Service”). It is incorporated by reference into our Terms of Service.
Information We Collect
Account information. When you sign up for the Service, we collect your name, email address, company name, role, and authentication identifiers (such as your Google account ID if you sign in with Google SSO).
Factory and operational data. When you use the Service, you upload or generate operational data: orders, styles, line balances, T&A milestones, machine inventories, planning history, factory calendars, operator counts, and similar production-planning information. We treat this as your data, not ours (see §4 below).
Factory setup and Discovery responses. When you complete the factory setup or the Discovery interview, we collect your answers. They are used to set up your factory in the Service and to inform Service improvements.
Usage data. We collect technical information about how you use the Service: pages visited, features used, performance metrics, error logs, and approximate location derived from IP address. This data is used to operate, secure, and improve the Service.
Website visitors. On loadit.live we use Google Analytics to see how the site is used: the pages viewed, the link or post that brought you, which buttons are clicked, the type of device and browser, and an approximate location (country or city) worked out from your IP address. Google Analytics sets cookies (named _ga and _ga_…) so a returning browser is counted once; it does not give us your name or email address. We also use the LinkedIn Insight Tag, which tells LinkedIn that a LinkedIn member visited loadit.live so we can see which LinkedIn posts and ads bring visitors and, if we advertise there, show those ads to people who have visited; LinkedIn reports this to us only as totals, never by name. LinkedIn sets its own cookies for this (such as li_sugr, bcookie and lidc). If we run advertising (for example on Google or LinkedIn), the same measurement tells us which ad brought a visitor; we do not sell your information. Visitors from the European Economic Area, the United Kingdom and Switzerland are asked first, and these cookies (Google’s and LinkedIn’s) are set only if you accept. You can change your choice at any time with “Cookie settings” at the foot of every page. Analytics data is kept for 14 months.
Requests and sign-ups. When you request an invitation, book a walkthrough or join the planners’ list, we keep what you enter in the form (such as your name, work email, company, role, country, factory size and your answers) to reply to you and to review your request. Walkthroughs are booked through Cal.com, which receives the name and email you give it.
Communications. When you contact us by email, in-app chat, or other channels, we retain those communications to provide support and maintain a record of our interactions.
How We Use Information
We use the information we collect to:
- Provide, operate, and maintain the Service.
- Personalise the Service to your factory based on Discovery interview responses and operational data you provide.
- Communicate with you about the Service, including support requests, security advisories, and material changes to the Service or these policies.
- Detect, prevent, and address technical issues, security incidents, and abuse.
- Improve the Service through aggregate, de-identified usage analysis.
- Where your company's owner has turned on Benchmark sharing, use the Benchmark results you send us to advise you on your settings and to improve the Service, as set out in our Terms of Service (§ 04).
- Comply with legal obligations.
We do not use your data to train AI models. We do not sell your data. We do not license your data to third parties for marketing purposes.
Your Data
Operational data you upload or generate through the Service (orders, styles, line balances, milestones, machine inventories, planning history) remains your property. We act as a processor of this data on your behalf. We do not claim ownership and do not use it for any purpose beyond providing the Service to you.
You may export your operational data in standard formats (Excel, CSV) at any time through the Service. On termination of your account, you may export your data within 30 days, after which we may delete it.
How We Secure Information
We use the following technical and organisational measures to protect your information:
- Encryption. Data is encrypted at rest using AES-256 and in transit using TLS 1.3.
- Tenant isolation. Each factory's data is isolated using row-level security (RLS) at the database layer. RLS policies are enforced at every read and write — even authenticated users cannot access other factories' data through the API.
- Access controls. Authentication is handled via Google SSO with audit logging on every change. Production system access by our team is gated by role-based controls and is logged.
- Hosting. The Service is hosted on managed cloud infrastructure (currently Supabase, which runs on AWS).
- Backups. Database backups are taken regularly and encrypted at rest. Backup retention follows industry-standard timelines.
No system is perfectly secure. We cannot guarantee absolute security, but we apply commercially reasonable practices and continually improve our controls.
AI Processing
The Service uses artificial intelligence for several features, including the auto-planner, line-balance solver and Discovery interview. Some AI features call third-party AI providers (currently Anthropic) via API.
When data is sent to a third-party AI provider:
- The data is sent over an encrypted connection (TLS 1.3).
- The provider operates under their own privacy and data-handling terms. We currently use Anthropic, whose API terms specify that customer data sent through the API is not used to train models.
- We minimise the data sent: the AI receives only what it needs to answer the request.
- We do not use AI providers to derive new categories of information about you beyond what is needed to fulfil the request.
Sharing Information
We do not sell your information. We share information only as described below:
- Service providers. We use third-party providers (such as cloud hosting, email delivery, AI inference, error monitoring) that process information on our behalf to operate the Service. These providers are bound by contractual confidentiality obligations.
- Legal compliance. We may disclose information if required by law, legal process, or to protect the rights, property, or safety of LoadIt, our users, or others.
- Business transfers. If LoadIt is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice and require equivalent privacy protections as a condition of the transfer.
Pilots and Feedback
Early adopters start with a pilot on their own order book. During a pilot:
- Pilot data is treated with the same security and confidentiality as paid customer data.
- We may use aggregated, de-identified usage patterns to improve the Service. We do not share one customer’s data with another customer or with third parties for marketing.
- Pilot users may be asked for feedback. Participation in feedback sessions is voluntary. Any feedback you provide may be used to improve the Service without restriction or compensation, but we will not attribute specific feedback to you publicly without your permission.
Your Rights
Depending on your jurisdiction, you may have rights including:
- Access to the personal information we hold about you.
- Correction of inaccurate or incomplete information.
- Deletion of your information, subject to legal and operational retention requirements.
- Restriction or objection to certain processing activities.
- Data portability (export of your operational data in standard formats).
To exercise these rights, contact us at support@loadit.live. We may need to verify your identity before acting on a request.
Data Retention
We retain account information and operational data for as long as your account is active. On termination, operational data is retained for 30 days to allow export, after which it may be deleted. Communications and audit logs may be retained for longer periods to comply with legal and security obligations.
International Transfers
Our infrastructure and team are based in multiple jurisdictions. Information you provide may be processed and stored in countries other than your own. Where international transfers occur, we apply appropriate safeguards consistent with applicable law.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to you with reasonable advance notice (at least 30 days where practical) via email or in-app notification. Non-material changes (clarifications, formatting, typographical corrections) may be made without advance notice.