Privacy policy

Stow is a software team based in Singapore. We build load planning software for Singapore logistics operators. This policy covers the stow.sg website and the load planning application we run for pilots.

If you need company or entity details for a procurement or vendor onboarding form, email abhishek@stow.sg and we will tell you exactly where we stand rather than guess on a form.

There are three ways data reaches us, and no others.

What you send us by email

Your name, your email address, your company, and whatever else you choose to put in the message. We collect this because you sent it to us.

Order files you give us for a pilot

If you run a pilot, you give us a file of real orders. Depending on how your office keeps them, that file typically contains order references, delivery addresses, delivery windows, weights and dimensions, and customer or site names. It may contain the name and phone number of a person at the delivery address. We do not ask for anything beyond what the planner already has in front of them.

Website analytics

This site uses Vercel Web Analytics. According to Vercel's documentation it does not set cookies and does not follow visitors across other websites; it records the page path visited, the referring site, and coarse device, browser and country information. We use it to see which parts of this page people read. We do not attach it to your identity, and we could not do so if we wanted to.

We do not run advertising trackers, marketing pixels, session recording, or heatmap tools on this site.

An order file you upload is read in order to produce a plan: to group the orders into delivery zones, to pack them across your trucks under the capacity limits you gave us, and to show your planner the result so they can approve or override it. That is the entire purpose it is used for.

We may look at a file ourselves while a pilot is running, for two reasons only: to fix something that went wrong with your plan, and to understand a format we have not seen before so the importer handles it properly next time. If we do, it is because we are working on your pilot.

We do not use your order data to train a machine learning model, we do not publish it, and we do not fold it into a benchmark or an industry report.

We do not sell your data. We do not rent it. We do not pass it to a third party for that third party's own purposes.

Being straight about the exception: we do not own servers. This website is hosted on Vercel and the load planning application runs on Railway, so your data necessarily passes through and rests on their infrastructure in order to reach us at all. They host it on our behalf and are not permitted to use it for anything else. If a different vendor of ours ever needs to process your data, we will say so here before it happens.

The one other case is a legal one: if Singapore law or a court order required us to disclose something, we would comply, and we would tell you unless we were prohibited from doing so.

Order files are kept while your pilot is running and while you are still evaluating the result. When you tell us the evaluation is over, we delete them.

You do not have to wait for that. Email abhishek@stow.sg and ask us to delete your data, and we will remove the files you sent us and the plans generated from them. There is no form to fill in and no notice period. We will confirm by email once it is done.

Email correspondence with you stays in our inbox as ordinary business correspondence unless you ask us to remove that too, in which case we will.

We take reasonable steps to protect what you send us: access to pilot data is limited to the people working on your pilot, and the site and application are served over HTTPS as our hosting providers configure by default.

What we are not going to do is claim a posture we have not earned. Stow does not hold SOC 2, ISO 27001, or any equivalent third-party audit, and we have not commissioned a penetration test. We are a small team and we would rather you knew that before you sent us a file than after.

If your organisation's security review needs specifics about how a pilot is run, ask us and we will answer them directly.

Singapore's Personal Data Protection Act gives you rights over personal data we hold about you. In practice that means:

• Access. You can ask what personal data we hold about you and how we have used it.
• Correction. You can ask us to correct anything that is wrong.
• Withdrawal. You can withdraw your consent to us holding or using your data at any time. We will act on it, and we will tell you plainly if that means we can no longer run your pilot.

If you are sending us an order file that contains personal data belonging to your own customers or your delivery contacts, you remain responsible for having a basis to share it with us, and we process it on your instructions.

Access, correction, withdrawal and deletion requests all go to the same place. Write to Abhishek Vulla at abhishek@stow.sg, with “Data request” in the subject line, and you will get a reply from a person rather than a ticketing system.

If we change how we handle your data, we will update this page and change the date at the top. If the change is a material one and we hold data of yours at the time, we will email you rather than rely on you re-reading this page.