Privacy Policy

RouteForge is a navigation and logistics API service operated by MindGear. The web platform is hosted in Romania (EU); the API server is hosted in Helsinki, Finland (EU). All processing remains within the European Union. Contact: hello@routeforge.eu

• Account data: Email address and optional profile fields (name, company, phone) that you provide when registering.
• API usage logs: Endpoint called, HTTP status code, response time, cost, and timestamp. We do not log the content of your API requests (route coordinates, addresses, payloads).
• API keys: We store a hashed representation of your API key — never the key itself in plain text.
• No third-party tracking: We do not use Google Analytics, Facebook Pixel, or any advertising or behavioral tracking tools.

• To authenticate your requests and enforce rate limits.
• To calculate your monthly usage and billing.
• To send transactional emails (account confirmation, password reset). We do not send marketing emails without explicit consent.
• To monitor service health and detect abuse.

API usage logs are retained for 90 days. Account data is retained for as long as your account is active. Upon account deletion, all personal data is erased within 30 days.

We do not sell, rent, or share your personal data with third parties. We use Supabase (EU region) for database and authentication — their privacy policy applies to infrastructure-level processing.

Under the GDPR you have the right to: access your data, correct inaccuracies, request erasure, restrict processing, and data portability. Exercise these rights by emailing hello@routeforge.eu. We respond within 30 days.

We use only a single session cookie required for authentication. We do not use advertising, analytics, or tracking cookies. See our Cookie Policy.

We will notify registered users by email of material changes to this policy at least 14 days before they take effect.