1. Data Controller

КаргоМайнд ЕООД (CargoMind Ltd), ЕИК / UIC 208753920, registered in Bulgaria, trading as CargoMind ("we", "us") is the data controller under the GDPR. Contact: hello@cargomind.app

2. Data We Collect

• Account data: name, email, company name, hashed password
• Operational data: orders, routes, invoices, driver and customer records you enter
• Usage data: IP addresses, browser type, pages visited — for security and improvement
• Payment data: processed by our payment provider — we never store card numbers

3. Purposes & Legal Basis

• Providing TMS services: performance of a contract (Art. 6(1)(b) GDPR)
• Security & fraud prevention: legitimate interest (Art. 6(1)(f) GDPR)
• Product improvement: legitimate interest
• Marketing communications: consent only (opt-in)

4. Data Retention

Data is retained while your account is active. On deletion, personal data is removed within 30 days. Transport records required by law are kept for 5 years in line with Bulgarian and EU regulations.

5. Data Storage & International Transfers

All data is stored exclusively in EU-based data centres within the EEA. We do not transfer personal data outside the EEA without appropriate GDPR safeguards.

6. Your Rights Under GDPR

You have the right to: access · rectify · erase · restrict processing · object · data portability. Contact hello@cargomind.app to exercise any right.

7. Third-Party Processors

We use GDPR-compliant sub-processors for cloud hosting, analytics and payments — all bound by data processing agreements. We never sell your data.

8. Cookies

We use strictly necessary cookies for authentication and session management only. No tracking, advertising or third-party analytics cookies are used.

9. Policy Changes

We may update this policy and will notify users of material changes by email at least 14 days in advance.

10. Contact & Supervisory Authority

Privacy queries: hello@cargomind.app. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): www.cpdp.bg

Encryption

• At rest: AES-256 encryption for all databases and stored files
• In transit: TLS 1.3 enforced on all connections — no plain HTTP
• Passwords: bcrypt with per-user salt — never stored in plain text

Authentication & Access Control

• JSON Web Tokens (JWT) with short-lived access tokens and secure refresh rotation
• Role-based access control: Admin · Dispatcher · Driver — each role sees only what it needs
• Sessions invalidated on logout and on detection of suspicious activity
• Rate limiting on all authentication endpoints to block brute-force attacks

Infrastructure

• All servers hosted in EU data centres — fully under GDPR jurisdiction
• Containerised microservices (Docker) — isolated failure domains, no single point of failure
• Automated daily backups with point-in-time recovery
• DDoS mitigation at network edge level
• 99.9% uptime SLA with continuous automated health monitoring

Application Security

• Input validation and sanitisation on every API endpoint
• NoSQL injection prevention via parameterised Mongoose queries
• Strict CORS policies — API access restricted to authorised origins only
• HTTP security headers: HSTS, X-Frame-Options, Content-Security-Policy
• Automated dependency vulnerability scanning in CI/CD pipeline

Data Privacy & Compliance

• GDPR compliant by design — privacy-first architecture from day one
• No data sold or shared with advertisers — ever
• Data processing agreements with all sub-processors
• Full right-to-erasure support

Incident Response

• 24/7 automated monitoring, alerting and anomaly detection
• Defined incident response procedure with clear escalation paths
• GDPR-mandated breach notification to affected users within 72 hours

To report a security vulnerability: hello@cargomind.app

CargoMind is growing across Europe — and we need a driven, ambitious sales person to grow with us. If you love the hustle, hate bureaucracy, and want to earn without a ceiling — this is for you.

The Opportunity

We're the AI-powered TMS used by freight carriers and logistics operators across Bulgaria and Europe. We sell a product that actually solves real problems — which means your job is showing people something useful, not convincing them to buy something they don't need.

What You'll Do

• Identify and prospect freight carriers, logistics operators, and transport brokers
• Own the full sales cycle: outreach → demo → negotiation → close
• Build long-term client relationships and generate recurring subscription revenue
• Represent CargoMind at industry events and through digital channels
• Feed market intelligence back to the product team

What We're Looking For

Required — one of the following:

• 2+ years in B2B sales, business development, or account management — OR —
• 2+ years in freight, logistics, or transport (dispatching, brokerage, fleet management)

Bonus: if you have both, you're exactly who we're looking for.

Also important:

• Self-motivated — you manage your own pipeline with zero micro-management
• Strong communicator — Bulgarian, English, or both
• Comfortable with SaaS tools and modern digital sales
• Hungry to grow as the company grows

What We Offer

• 🕊️ Total location freedom — work from anywhere in Bulgaria or remotely across Europe
• 💰 Uncapped commission — the more you sell, the more you earn. No ceiling, no politics
• 🚀 Early-stage opportunity — shape the company's commercial strategy from day one
• 🤝 Small, direct team — you'll work with the founders, not layers of management
• 📈 Real product, real demand — every logistics company is a potential client

This is not a 9-to-5. It's a chance to build something with us — and be rewarded for it.