Privacy & data
How this tool handles personal data
This is an internal sales tool for building diesel-versus-electric truck cost and CO₂e comparisons. It is operated by your dealer organisation (the data controller); Supabase (database and sign-in) and Vercel (hosting) process data on its behalf. Questions and data-subject requests go to your administrator.
Last updated: 23 July 2026.
What personal data is processed
- Your account: name, work email address, workspace membership and role, sign-in events.
- Your activity: an audit trail of material actions (creating, editing, calculating, approving, sharing and exporting calculations) kept for governance.
- Customer opportunity data you enter: optionally a customer name, reference and site, plus operating figures. Enter the minimum needed — the customer name field is deliberately optional.
Data is used solely to provide the tool, keep an auditable record of customer-facing output, and administer accounts (UK GDPR lawful bases: performance of the working relationship and the operator's legitimate interests). It is never sold, never used for marketing, and there is no profiling or automated decision-making.
Cookies
This application sets no cookies — no analytics, no advertising, no tracking of any kind. Because the browser storage below is strictly necessary to make the tool work, no consent banner is required under the UK Privacy and Electronic Communications Regulations (PECR). If optional analytics is ever introduced, it must arrive together with a consent mechanism.
Browser storage this tool uses
The tool keeps a small amount of data in your browser's local storage — all of it strictly necessary. Signing out removes your session; clearing site data removes everything listed here.
| Entry | Purpose |
|---|---|
| sb-…-auth-token | Keeps you signed in (Supabase session). Removed on sign-out. |
| etco.calculations.v1 | Local draft cache so unsaved work survives connection problems. |
| etco.activeWorkspace.v1 | Remembers which workspace you last had open. |
| etco.audit.v1 | Local fallback for the governance audit trail when the workspace is unreachable. |
| etco.reportExports.v1 | Local record of report exports made on this device. |
Where data lives and how long it is kept
Workspace data (calculations, snapshots, exports, audit events) is stored in the operator's Supabase project and protected by row-level security, so it is visible only within your dealer workspace. Calculations remain until a workspace user or administrator deletes them; account data remains while your account is active; audit records are kept for the governance period set by the operator.
Your rights
Under UK GDPR you can ask for access to, correction of, or deletion of your personal data, object to or restrict processing, and request portability. Contact your administrator to exercise these rights. If you are unhappy with the response you can complain to the Information Commissioner's Office (ico.org.uk).