Privacy Policy

EUCost (eucost.net) is an EU trade and customs intelligence platform. We provide tools for calculating EU import costs, browsing EU regulations, classifying products under the Harmonized System (HS), and monitoring trade compliance requirements.

For privacy-related questions, contact us at: hello@eucost.net

Account data: When you register, we collect your email address and a hashed password. We do not store plain-text passwords.

Usage data: We may log which features you use (e.g. calculations performed, HS codes searched) to improve the service. This data is aggregated and not linked to identifiable individuals.

Calculation history: If you are logged in, calculations you run may be saved to your account so you can access them later. You can delete this data at any time.

Technical data: Standard server logs (IP address, browser type, pages visited). These are retained for up to 30 days for security purposes.

• To provide and maintain the EUCost service
• To save your calculation history (if logged in)
• To send transactional emails (e.g. account verification)
• To detect and prevent abuse or fraud
• To improve the platform based on aggregate usage patterns

We do not sell your data to third parties. We do not use your data for advertising profiling.

For users in the European Union, our legal bases for processing are:

• Contract performance — processing necessary to provide the service you signed up for
• Legitimate interests — security, fraud prevention, service improvement
• Consent — for any optional communications (which you can withdraw at any time)

We use the following sub-processors:

• Supabase — database and authentication (EU data residency available)
• Vercel — hosting and CDN
• OpenAI — AI classification features (prompts are not stored by OpenAI per API terms)
• Resend — transactional email delivery

All third-party services are GDPR-compliant and operate under standard contractual clauses.

Account data is retained as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days.

Server logs are retained for 30 days. Aggregated, anonymised analytics may be retained indefinitely.

Under GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email hello@eucost.net. We will respond within 30 days.

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. No cookie consent banner is required.

We may update this policy occasionally. Material changes will be notified by email or a prominent notice on the site. Continued use of EUCost after changes constitutes acceptance.

For any privacy concerns: hello@eucost.net

If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority (in the EU, your national DPA).