Privacy policy

Last updated 9 November 2026

In short

• This website doesn't use cookies, analytics or advertising trackers.
• If you're a customer, we use your account details to run FreightStax and bill you. We don't sell them.
• If your business details appear in FreightStax's company data, they come from public records and company websites. You can have them removed, and we act on every request within 45 days.

Who we are

We run FreightStax and decide how the personal details described here are used. Email hello@freightstax.com.

Who this policy covers

• People who visit freightstax.com
• Our customers and the people on their teams who use FreightStax
• People whose business details appear in FreightStax's company data, such as company officers and staff at companies that ship freight

1. Website visitors

Netlify, which hosts this site, keeps standard server logs, such as IP addresses and browser types, to run the site and keep it secure.

The demo runs on made-up sample data, and nothing you do in it is sent to us. Cookies and local storage explains what it remembers on your device.

2. Customers and their teams

When your brokerage uses FreightStax, we collect:

• Account details: each user's name, work email address, role and password, and the brokerage's name. The password is stored only in scrambled (hashed) form.
• Sign-in devices: an identifier for each signed-in session and the browser it uses, so each seat is used by one person on no more than two devices, and the network address a new workspace was created from, to stop automated sign-ups.
• How the app is used: sign-in times, the calls, notes and exports your team logs, and technical logs such as IP addresses and browser types. We use these to run and secure the service, and to fix problems.
• Billing details: the billing contact, the billing address, the plan, token purchases and invoices. Payments are handled by Stripe. We see the card's brand and last four digits, never the full number. We also keep a code Stripe gives each card (a fingerprint, not the number), so a card gets only one free trial.
• What your team adds: notes, statuses, lists, call outcomes, quotes, email templates and your customer list. This belongs to your brokerage. Where it includes personal details, such as a shipper contact's name, we handle it on your brokerage's behalf, as its processor.

We use these details to provide FreightStax under our contract with your brokerage, to bill for it, to send service emails (for example when a trial is ending or a payment fails), to keep it secure, and to answer support requests. We keep the business records that tax law requires.

We don't sell customers' or users' personal details, and we don't use them for advertising.

3. People in FreightStax's company data

FreightStax helps freight brokers find businesses that may need trucks. Its company data includes some details about people, because people run those businesses.

What it includes:

• company names, addresses, main business phone numbers and websites
• email addresses on a company's own domain
• the names and titles of company officers
• details of each company's fleet and freight

It may also include the name and title of a company's freight contact, where a FreightStax customer has chosen to share one through the shared contact network.

What we leave out on purpose: mobile phone numbers, and personal email addresses such as Gmail or Yahoo, even when a company has filed one.

Where it comes from:

• public government records and filings about companies, such as registrations, permits, inspection results, contract awards and closure notices
• the public pages of companies' own websites, read by FreightStaxBot
• FreightStax customers who share a company's freight contact through the shared contact network

Why we use it, and on what basis: to let freight brokers find and contact businesses about freight services. For people in the UK or EU, our legal basis is legitimate interests: helping businesses find each other, using details that are already public and that relate to someone's job, not their private life.

Who sees it: signed-in FreightStax customers. Our terms only allow them to use it to contact businesses about freight, and forbid reselling it or using it for credit, insurance, employment or housing decisions.

Removing your details: use the removal form to have your name, email address or phone number removed, or your company removed, or to opt out of your details being shared with customers. We act on every request within 45 days and confirm by email. We keep a short record of each request, so the details don't come back at the next weekly update.

4. Who we share personal details with

We use these services to run FreightStax. They handle personal details only on our instructions:

• Supabase hosts the database and sign-in, in the United States.
• Netlify hosts the website and the app, and stores removal form entries, in the United States.
• Stripe takes payments and keeps billing records.
• GitHub runs the weekly update of the company data.
• Our email provider sends and stores our emails.

We may also share details if the law requires it, to protect people's safety or our rights, or if FreightStax is sold or merged (in which case this policy keeps applying).

Under some US state privacy laws, letting customers use the company data as part of their subscription may count as "selling" or "sharing" personal information. You can opt out with the removal form.

5. Transfers outside the UK and EU

Most of these services store data in the United States. Where UK or EU data protection law applies, we rely on the UK–US data bridge, the EU–US Data Privacy Framework or standard contractual clauses to protect it.

6. How long we keep it

• Customer accounts and their data: while the workspace is open. If it closes, we keep the data for 90 days so the customer can come back, then delete it.
• Billing records: as long as tax law requires, usually six years.
• Company data: while it stays in the public records we use. Each weekly update replaces old details.
• Removal and opt-out records: for as long as we hold company data, so removed details stay removed.
• Server logs: for the short periods our hosting providers keep them.

7. Security

Data is encrypted in transit and at rest. Each brokerage's workspace is kept separate from every other at the database level. Access is limited to signed-in users, and only the people who run FreightStax can reach the systems behind it.

8. Your rights

You can ask us to:

• tell you what personal details we hold about you and give you a copy
• correct them
• delete them
• stop using them, or opt out of them being sold or shared

We give these rights to everyone, wherever they live, and we won't treat you differently for using them. Use the removal form or email hello@freightstax.com.

We may need to confirm who you are before acting on a request, usually by email. Someone you've authorized can also make a request for you.

We reply within one month, or within 45 days where a US state law gives that period.

If you're in the UK, you can complain to the Information Commissioner's Office. If you're in the EU, you can complain to your local data protection authority. If you're in a US state with a privacy law, you can contact your state's attorney general or privacy agency.

9. Children

FreightStax is a business tool and isn't meant for anyone under 18. We don't knowingly collect children's details.

10. Changes to this policy

If we change this policy, we'll update the date at the top. If a change affects how we use details we already hold about you, we'll email you before it takes effect where we have your email address.