Privacy policy
Effective October 12, 2026
The One Latch is a keypad latch for feed-bin lids and the software that goes with it: an office portal for a feed mill or integrator, and a driver app that shows a driver the code for one delivery. Both are run by Carolina Bin Systems of Stantonsburg, North Carolina (“we”). This policy says what the software collects, why, who can see it, and how to have it removed. It covers onelatchdriver.com, one-latch-access.vercel.app and the driver app installed from them.
What we collect
Your account
Your name, email address, password (stored only as a one-way hash by our sign-in provider), your role (admin, dispatcher, serviceman or driver) and which customer account you belong to. You get an account by invitation from your organization’s admin, or by opening the free demo.
What the portal records as you use it
- Farms, bins and orders your organization enters: farm names and addresses, bin and house numbers, feed types, order numbers, quantities, delivery dates, flock records and which driver a load is assigned to.
- The audit log. Every time a delivery code is issued, who asked for it, when, for which order and bin, and the delivery number given out; every load marked delivered and by whom; every refusal; every time an owner PIN is recorded or viewed, and by whom. This log is the product — it is the record your organization keeps of its own feed deliveries.
- Delivery photos. A driver finishes a load by photographing the closed latch. We keep the photo, the time the phone says it was taken and the time the driver tapped Delivered.
- Owner PINs. If an admin records a latch’s owner PIN in the portal, it is stored so a serviceman or admin can look it up; every look is logged.
The request-a-demo form
Your name, company, role, how many bins, email, phone and message, plus your browser type and a scrambled (hashed) form of your internet address, which we use only to limit spam. It is emailed to Corey Stokes and kept until it has been handled.
On your device
A sign-in cookie, your language choice, and — in the driver app — the last code you looked up and any delivery photo waiting to be sent, so the app keeps working at a bin with no signal. The app’s own files are cached by your browser so it opens offline. No advertising cookies, no analytics scripts, no tracking across other sites.
What we do not collect
Your location (the app never asks for it), your contacts, or anything from the latch itself — the latch has no radio and reports nothing. The audit log records when a code was issued, not whether or when a lid was opened.
Why
To run the service: show the right driver the right code, keep your organization’s delivery record, place loads in their flocks, flag biosecurity exposures to your dispatcher, and let your admin manage users and latches. We do not sell your information, use it for advertising, or share it with anyone except as described below.
Who can see it
- Your organization’s staff. Admins and dispatchers see the whole account: farms, orders, the audit log and delivery photos. Drivers see only their own loads and codes. Servicemen see bin codes for service visits and, if recorded, owner PINs.
- Our customer success manager assigned to your account can see the same things your admin can, to load latches into your inventory and help you.
- Service providers that process it for us: Supabase (database, file storage and sign-in; servers in the eastern United States), Vercel (hosting of the website and apps), Anthropic (each delivery photo is sent to Anthropic’s API once, to say whether the latch looks closed; the result is shown in the portal as advisory), and Resend (delivers the demo-request emails to us). Each handles data only to provide its service to us.
- When the law requires it, or to protect the safety of a person or the integrity of the service.
How long we keep it
Audit entries, orders, flock records and delivery photos stay as long as your organization’s account is open, because they are its delivery record. Deleted farms and bins are kept in a recoverable form for 30 days so a mistaken delete can be undone, then removed. Demo accounts made through the free demo door are deleted after 30 days. Demo-form requests are kept until handled. When an account is closed, its data is deleted within 60 days of the request, except what we must keep for legal or accounting reasons.
Keeping it safe
Connections are encrypted (HTTPS). Access inside the database is checked row by row against your role and your organization, and delivery codes are shown only to the people entitled to them, only when they are issued — there is no page that reveals a code. No system is perfectly secure; if we learn of a breach affecting your data we will tell your organization’s admin.
Your choices
You can see and correct your own name and email in the app. To get a copy of your information, correct it, or have it deleted, ask your organization’s admin or contact us below. Some records (the audit log) belong to your organization and are removed when it asks or closes its account. The service is for working adults; it is not directed at children under 16, and we do not knowingly collect their information.
Changes
If this policy changes in a way that matters, we will put the new date at the top and tell your organization’s admin. Using the service after a change means you accept it.
Contact
Carolina Bin Systems, Stantonsburg, North Carolina. Corey Stokes, 252-289-8071, coreystokes359@gmail.com.