Legal

Data Processing

Last updated: February 26, 2026

1. Overview

This Data Processing page describes how DutyClaims processes data you provide through the Services, including uploaded documents, form submissions, and tariff refund workflow information.

2. Data We Process

  • Form submissions: contact information, company details, role, tariff exposure estimates
  • Uploaded documents: entry summaries, broker exports, ACE reports, and supporting trade documents
  • Generated outputs: Tariff Refund Files, deadline checklists, filing packets
  • Usage data: interactions with the platform, feature usage, and status tracking

3. Purpose of Processing

We process your data to:

  • Generate structured Tariff Refund Files from your inputs
  • Identify potential tariff refund exposure and flag deadlines
  • Organize documentation for CBP protest and PSC workflows
  • Provide status tracking and next-step guidance
  • Facilitate optional financing requests (with your consent)
  • Improve and develop the Services

4. Data Storage and Security

Your data is stored on secure, encrypted infrastructure hosted in the United States. We employ industry-standard measures including:

  • Encryption at rest and in transit (TLS 1.2+)
  • Access controls and role-based permissions
  • Regular security audits and vulnerability assessments
  • Secure backup and disaster recovery procedures

5. Data Sharing

We do not share your uploaded documents or Tariff Refund Files with third parties except:

  • With your explicit consent (e.g., when you opt into financing)
  • With infrastructure and service providers necessary to operate the Services (under strict data processing agreements)
  • When required by law, regulation, or legal process

6. Data Retention

We retain your data for the duration of your engagement with the Services plus a reasonable period for legal compliance purposes. Uploaded documents are retained only as long as necessary to deliver the Services.

You may request deletion of your data at any time by contacting contact@dutyclaims.com. We will process deletion requests within 30 business days.

7. Sub-processors

We use the following categories of sub-processors to deliver the Services:

  • Cloud hosting and infrastructure providers
  • Database and storage providers
  • Email delivery and communication platforms
  • Analytics and monitoring services

All sub-processors are bound by data processing agreements that require them to protect your data consistent with this policy.

8. Your Rights

You have the right to access, correct, delete, or export your data at any time. See our Privacy Policy for details on exercising your rights.

9. Contact

For questions about data processing, contact us at contact@dutyclaims.com.