Privacy notice
This notice explains how personal data is handled in Roder Exchange (app.roder.exchange and roder.exchange), a carriers-only venue for trading short-dated vessel slot capacity. Roder Exchange is used by people who work for ocean carriers. We process their business contact and usage data to run the venue, and we do not sell it or use it for advertising.
Who is responsible
The controller is Rederiaktiebolaget Roslagen, organisation number 556003-2764, Slipgatan 4, 442 66 Marstrand, Sweden, which operates Roder Exchange. Questions and requests go to [email protected].
What we process
| Category | What it includes | Where it comes from |
|---|---|---|
| Account data | Name, business email, organisation, role, access level, account status, invitation and sign-in dates, email preferences | Your organisation's access request, or you |
| Organisation contacts | Name, function (operations, commercial, documentation), business email and phone of named contacts | Your organisation |
| Trading records | Listings, match requests, counters, confirmations and trades, with the person who acted and when | Your use of the venue |
| Usage data | Pages viewed, time on page, clicks, filters, searches, downloads, errors shown and feedback given | Your use of the venue |
| AI assistant activity | Access keys your organisation issues (stored only as a hash), drafts an assistant prepared and a log of each tool call | Your organisation's assistant |
| Technical data | One session cookie, server logs with IP address and browser type | Your browser |
We do not ask for, and ask you not to enter, sensitive personal data. We also keep copies of the service emails and in-app notices we send you, so that we can show what was notified and when.
Why we process it and on what basis
- To provide the venue and perform the Master Platform Agreement with your organisation: accounts, sign-in, listings, matching, trade records and notices. Basis: our legitimate interest in performing the agreement with your employer (Article 6(1)(f) GDPR), and contract (Article 6(1)(b)) where you contract in your own name.
- To keep the venue secure and fair: access control, verifying that participants are carriers, detecting misuse and keeping an audit trail of commitments. Basis: legitimate interest, and legal obligations where they apply (Article 6(1)(c)).
- To improve the venue during the pilot: usage data and feedback show where the workflow helps or fails. Basis: legitimate interest. You may object at any time.
- To send service email: invitations, password resets, match and deadline notices and summaries. You choose all, summary or none for non-essential notices in your settings.
Who sees it
Other carriers do not see who you are or which carrier you represent on the board. When a trade is agreed, the two parties to that trade see each other's organisation and the trade contacts needed to perform it. Within your own organisation, colleagues with access can see what was done in its name.
We use these service providers, under data processing terms, and only for the purpose stated:
| Provider | Purpose | Location |
|---|---|---|
| Replit, Inc. | Application hosting and database | EU (provider based in the United States) |
| Resend | Sending service email | United States |
| Google (Google Workspace) | Operations mailbox and nightly backups (encrypted at rest by Google) | EU and United States |
| Notion Labs | Internal handling of access requests | United States |
| Anthropic | Help in operating the service, such as triaging access requests and preparing drafts for our review | United States |
| Cloudflare | Website hosting and domain name service | Global |
If your organisation connects its own AI assistant, the data that assistant reads is processed by the provider your organisation chose, under your organisation's terms with that provider.
Transfers outside the EU/EEA
Where a provider processes data in the United States, the transfer relies on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.
How long we keep it
| Data | Retention |
|---|---|
| Account data and organisation contacts | While access is active, then 12 months, unless trading records require longer |
| Trading records | The term of the Master Platform Agreement plus the limitation period for claims (10 years under Swedish law), or as accounting law requires |
| Usage data | 400 days, then deleted automatically |
| AI assistant activity | While the key is active, then 12 months |
| Session | 7 days, or until you sign out |
| Server logs | Kept by our hosting provider for a limited period; we do not copy or export them |
| Backups | Nightly copies for 35 days; monthly copies for 13 months; stored encrypted in Google Drive with access limited to Roder |
Your rights
You may ask for access to, correction of or erasure of your personal data, ask us to restrict its processing, receive it in a portable format, and object to processing based on legitimate interest. Write to [email protected]; we reply within one month. Some trading records must be kept for the periods above even after an erasure request, and we will tell you when that applies. You may also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se).
Cookies
Roder Exchange sets one strictly necessary cookie that keeps you signed in for up to 7 days. It sets no analytics or advertising cookies, so no consent banner is used. This website sets no cookies and loads no third-party fonts or trackers.
Changes
We will post changes here and tell signed-in users of any material change by email.