Privacy policy

What we hold

Your account: an email address or phone number, a display name, and the organizations you belong to. There is no password, because the platform does not use them.

Your operations: shipments, orders, quotes, bookings, tracking events, documents, inventory and the money records attached to them. This is your business data and it is scoped to your organization.

Location data where you supply it: facility coordinates, vehicle positions from telematics you connect, and the coordinates captured with a proof of delivery.

Tenant isolation

Every business record carries an organization identifier and every query is scoped to it. One customer cannot read another's shipments, rates, inventory or documents.

Marketplace listings are the deliberate exception: capacity you publish is visible to other organizations, because that is what publishing it means. Nothing else crosses the boundary.

What leaves the platform, and why

Carrier APIs receive what a booking needs: addresses, cargo, weights and dimensions. They do not receive your other shipments or your rates with other carriers.

Sibling platforms receive only what their function needs — Malaleem receives amounts and references to move money, GuiderMaps receives coordinates to route, TariffAPIs receives HS codes and values to compute duty.

AI providers receive the text of what you ask and the documents retrieved to answer it. Your data is not used to train anybody's model.

Your rights

Access, correction, export, erasure and objection, exercised by writing to us or from the console. You can change your email address or delete your account yourself, on the web (Your account) or in the apps. An export is machine-readable.

Erasure has limits we will be explicit about: financial records and audit entries are append-only and legally retained, so a deletion request anonymises rather than removes them.

Retention

Operational records are kept while your account is open and for seven years afterwards, which is the shortest period that satisfies customs and tax retention across the jurisdictions the platform operates in.

Sign-in tokens are deleted an hour after use. Published event records are pruned after fourteen days; the audit trail is permanent.