PDPackDossier
Draft privacy 2026-08-19 · approval pending

Privacy notice

Commercial processing is not active: this notice identifies the known controller and current system boundaries. Customer-file intake and live checkout remain disabled until the registration, GDPR Article 27 position, provider contracts, transfer safeguards, retention controls, customer acceptance and legal review are verified. Unresolved controller, provider and transfer details remain explicitly marked as pending below.

This notice explains how personal data is handled through packdossier.org, PackDossier workspaces, controlled evidence links, supplier requests, support, sales conversations and payment flows. It also explains when PackDossier acts as controller and when it processes data on a business customer's instructions.

1. Controller identity and contact

The controller for account, website, billing, security and direct business-contact data is Blue Ridge Federal LLC, with its business address at 2504 Ditmars BLVD, New York City, New York 11105, United States.

2. EU representative

Blue Ridge Federal LLC is established outside the European Union. Before PackDossier begins commercial processing directed at people in the EU, it will either publish the name, EU address and contact details of its written Article 27 representative or publish a counsel-approved explanation of why the Article 27(2) exception applies. Commercial file intake remains disabled until that position is documented.

3. Our roles

PackDossier is controller when it decides why and how to process website enquiries, account administration, billing, service security, support and its own business communications. A customer is normally controller for personal data contained in packaging files, supplier correspondence, evidence records, customer questionnaires and controlled pages submitted to its workspace; PackDossier processes that data on the customer's documented instructions under the DPA. The customer is responsible for its own notices, lawful basis, data minimisation and response to data-subject requests concerning that content.

4. Personal data we handle

  • account identity, business email, company, role and authentication identifiers;
  • application, onboarding, support and business correspondence;
  • uploaded files, filenames, supplier contacts, signatures and other personal data a customer includes in evidence;
  • extracted proposals, source excerpts, page or row locations, file hashes, review decisions and approval history;
  • workspace activity, access records, shared-link events, IP address, device and security logs;
  • billing contact, business address, VAT details, transaction status, invoice and refund records; and
  • business contact data obtained from company websites, professional sources, referrals or direct correspondence for relevant B2B outreach.

PackDossier does not receive full card numbers from Stripe and does not intentionally request special-category data, children's data or personal data unrelated to packaging evidence. Customers should redact or avoid unnecessary personal data before upload.

5. Purposes and legal bases

  • Contract and pre-contract steps: create accounts, assess a requested pilot, process files, provide previews and paid outputs, manage support, billing, cancellation and export.
  • Legitimate interests: secure and improve the service, prevent abuse, maintain audit and support records, understand product performance, and contact relevant business representatives about a service likely related to their role. We balance those interests against individual rights and honour objections to direct marketing.
  • Legal obligations: retain required accounting and tax records, respond to valid legal requests and exercise or defend legal claims.
  • Consent: only where required for optional communications or any future non-essential cookies. Consent can be withdrawn without affecting earlier lawful processing.

If required account, order or payment information is not provided, PackDossier may be unable to create the account, contract or deliver the requested service. Optional marketing information is not required to use the service.

6. File conversion and evidence extraction

Uploaded PDF, DOCX, XLSX, CSV, TXT and image files may be split into bounded source units, converted to machine-readable content and analysed to propose packaging facts, evidence gaps and dossier fields. The service retains source locations, excerpts and integrity hashes so a human can verify each proposal. Proposed facts are not automatically approved, certified or made customer-facing. PackDossier does not currently use an external AI model to process customer documents. Model-assisted processing will not receive Customer Materials unless it is activated, contracted, listed in the provider register and disclosed before use. PackDossier does not use Customer Materials to train general-purpose models on its own behalf.

7. Recipients and subprocessors

Personal data may be disclosed only as needed to:

  • authorised customer users and recipients of customer-created controlled links;
  • OpenAI's Sites and ChatGPT sign-in layer for application access and account identity;
  • Cloudflare for network delivery, Workers, database, object storage and image delivery;
  • Stripe only when live checkout is activated, for payment, fraud prevention, invoicing, tax calculation and refunds;
  • a document-processing, conversion or transactional-email provider only after that provider is activated and disclosed;
  • professional advisers, auditors, insurers and authorities where legally necessary; and
  • a successor in a merger, financing or sale, subject to appropriate confidentiality and notice.

The current provider registerseparates active infrastructure from services that are only planned or in test mode. Contracting entities, locations and transfer terms must be verified there before commercial processing begins.

8. Payments

Stripe collects payment and checkout information under its own notices and may act as processor or independent controller depending on the activity. PackDossier receives transaction identifiers, status, customer and billing details, tax results, invoices, disputes and refund information needed to administer the contract. Card credentials are entered into Stripe's checkout and are not stored in the PackDossier workspace. A privacy-policy link will be configured in Stripe before live checkout.

9. International transfers and data location

The selected storage configuration is Cloudflare automatic placement (not jurisdiction-restricted; processing may occur internationally). Cloudflare chooses the primary placement of the database and object storage resources; edge delivery may occur through its distributed network. This configuration is not restricted to the EU, and PackDossier does not promise EU-only data residency.

Blue Ridge Federal LLC is established in the United States, and infrastructure, authentication, support, payment and email providers may process data internationally. Commercial customer- file processing remains disabled until the applicable provider contracts and transfer safeguards are approved and recorded in the DPA and provider register.

10. Retention and deletion

  • Incomplete uploads expire and are queued for deletion within 24 hours of initiation.
  • For a free preview, the source file, rendered page or raster preview and derived preview records are kept for no more than 30 days from upload, unless the uploader deletes them sooner or converts the preview into an active service workspace.
  • During an active service, Customer Materials and derived evidence remain under the customer's workspace control and are kept only while needed to provide that service. An authorised customer can delete content earlier, subject to a documented legal hold.
  • After termination, the workspace remains available for export and closure for 30 days. At the end of that window, PackDossier starts the application-level purge of Customer Materials and derived evidence.
  • Independent encrypted backup archives, once activated, are retained for no more than 30 days and are used only for recovery. Deleted content may therefore remain inaccessible in a backup until that archive expires.
  • Controlled evidence links and supplier-request channels expire or can be revoked under their own access settings. Their minimal security, delivery and suppression records follow the applicable operational or legal retention need.
  • Billing, tax, contract, security, dispute and marketing- suppression records are retained according to the applicable statutory, limitation, fraud-prevention or objection-handling period, then deleted or anonymised when no longer required.

This is the selected production schedule, but the automated purge and independent-backup controls are still being verified. Commercial customer-file intake remains disabled until those controls are activated and tested; publishing the schedule does not mark them as operational.

11. Security

PackDossier uses measures designed for the risk, including authenticated workspace ownership, private object storage, scoped access, signed controlled links, upload and file-type validation, activity records, rate and quota controls, encryption in transit, deletion queues and backup controls when activated. Access is limited to people and providers who need it. No online system can be guaranteed completely secure; customers must protect credentials, choose controlled-link settings carefully and report suspected incidents promptly.

12. Your GDPR rights

Subject to applicable conditions, individuals may request access, correction, erasure, restriction, portability or objection, and may withdraw consent at any time. You may object at any time to direct marketing. When the data is in a customer workspace, contact that customer first because it normally controls the data; PackDossier will assist it under the DPA. Identity verification may be required. Requests are free unless manifestly unfounded or excessive as permitted by law.

Send requests to support@blue-ridge-federal.com. A relevant supervisory authority and contact route will be published once the Article 27 and production transfer positions are resolved. You may complain to an authority where you live or work. The legal launch gate prevents commercial processing until the electronic rights channel and regulatory contact position are verified.

13. Automated processing

The service uses bounded file conversion, deterministic checks and human review to organise source material. If model-assisted extraction is activated later, it may propose evidence fields, apparent gaps, classifications and response drafts under the same human-review controls. These operations do not make decisions producing legal or similarly significant effects about individuals. A human customer reviewer controls approval and publication. PackDossier does not conduct solely automated credit, employment or eligibility decisions through the service.

14. Cookies and similar storage

The current service uses strictly necessary session and controlled- link cookies for authentication, security and requested access. They are not used for behavioural advertising. If non-essential analytics or advertising cookies are introduced, this notice and a consent control will be updated before they are set where consent is required. Stripe may set checkout security and payment cookies under its own notice.

15. B2B communications

PackDossier may send requested service messages and relevant B2B outreach to professional contacts. Marketing messages will identify the sender and provide a direct way to object or unsubscribe. Each campaign is subject to the rules applicable in the recipient's country; a general B2B label is not treated as permission to ignore national electronic-marketing rules. Suppression data may be retained so the request is respected. An unsubscribe does not stop necessary account, security, order or legal notices.

16. Changes to this notice

Material changes will be posted here and, where appropriate, notified through the workspace or account email before they take effect. A change in purpose that requires consent will not be applied without obtaining that consent. The version and review date above identify the notice in effect.