FreightStow Privacy Policy
Last Updated: August 13, 2026
1. Introduction
Welcome to FreightStow (“we,” “our,” or “us”). FreightStow is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our export documentation application (“FreightStow” or the “App”).
This Privacy Policy has been designed to comply with applicable privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the UK and EU General Data Protection Regulation (GDPR). Please read this Privacy Policy carefully. If you do not agree with its terms, please do not access the App.
2. Information We Collect
2.1 Use Without an Account
The document generators are available without registration. Where you use the App without an account, the information you enter is retained in your browser’s local storage on your own device. It is not transmitted to us, and we collect no personal information from you in this mode.
2.2 Personal Information
Where you register for an account, we collect the following categories:
- Identifiers. Name, email address, and IP address.
- Authentication data. A cryptographic hash of your password, where you set one. We do not store the password itself. Where you authenticate through a federated sign-in provider, we store the identifier that provider supplies in place of a password.
- Commercial information. The trade records you choose to save, including the parties, ports, container details, and line items you enter, together with the business contacts and product records derived from them.
- Usage data. A record of the documents you generate, comprising the document type, its reference number, and the date, together with server log data generated in the ordinary course of operating the App.
2.3 Information We Do Not Collect
Documents are assembled and rendered entirely within your browser. The completed PDF is not transmitted to us and is not stored on our systems. We do not collect payment card data, financial account data, or biometric data, and we do not use advertising trackers.
2.4 How We Collect Information
- Directly from you, when you register, save a trade, or contact us.
- Automatically, in the form of server log data generated when you use the App.
- From third parties, where you elect to sign in through a federated identity provider that you have authorised to share your name and email address with us.
3. How We Use Your Information
- To provide and maintain the App, including generating export documentation.
- To create, authenticate, and manage your account.
- To retain the trade records, contacts, and products you save, so that they are available to you on subsequent visits.
- To respond to your enquiries and provide support.
- To monitor and improve the App and develop new features.
- To protect against fraudulent, unauthorised, or unlawful activity.
- To comply with our legal obligations.
4. Disclosure of Your Information
4.1 Service Providers
We disclose personal information to service providers who process it on our behalf and solely to enable us to provide the App. These fall into the following categories:
- Cloud application hosting and content delivery.
- Managed database hosting and storage.
- Transactional email delivery, for account confirmation messages.
- Federated authentication, where you elect to sign in through such a provider.
- Error monitoring and product analytics.
Each such provider is engaged under terms requiring it to process personal information only on our instructions and for the purpose of providing services to us, and prohibiting it from using that information for its own purposes. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.
Where you request a list of the specific providers we engage, we will supply it on request to the address in Section 12.
4.2 Legal Requirements
We may disclose your information where required to do so by law, or in response to valid requests by public authorities such as a court or government agency.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.
5. Data Retention
We retain your personal information for as long as your account remains active or as required to provide the App to you. Session records expire seven days after issue. Where you delete an account, the associated records are removed immediately and permanently, as described in Section 7.
6. Data Security
We implement appropriate technical and organisational measures to protect personal information against unauthorised or unlawful processing and against accidental loss, destruction, or damage. These measures include:
- Encryption of data in transit using TLS, and of stored data at rest.
- Storage of passwords using a computationally hardened one-way hashing function, such that the original password cannot be recovered.
- Session cookies marked HttpOnly, Secure, and SameSite.
- Rate limiting on authentication endpoints.
- Access controls restricting personal information to authorised personnel.
- Use of maintained software dependencies.
No method of transmission over the Internet or of electronic storage is entirely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
7. Deletion of Your Account and Data
You may delete your account at any time from Settings within the App. Deletion is immediate and permanent, and removes your account together with all saved trade records, contacts, products, document history, and sessions. We retain no shadow copy and the deletion cannot be reversed. Documents you have already downloaded are held by you and are unaffected.
You may also delete individual contacts, products, and trade records without closing your account.
8. Your Privacy Rights Under California Law
Under the CCPA/CPRA, California residents have specific rights regarding their personal information.
8.1 Right to Know
You have the right to request information about the personal information we collect, use, and disclose.
8.2 Right to Delete
You have the right to request deletion of your personal information, subject to certain exceptions.
8.3 Right to Correct
You have the right to request correction of inaccurate personal information.
8.4 Right to Opt-Out of Sale or Sharing
We do not sell or share personal information. The CCPA/CPRA nonetheless requires us to inform you that you have the right to opt out of such sale or sharing.
8.5 Right to Limit Use of Sensitive Personal Information
You have the right to limit the use and disclosure of sensitive personal information. We do not collect sensitive personal information as that term is defined under the CCPA/CPRA.
8.6 Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA/CPRA rights.
9. Your Privacy Rights Under UK and EU Law
Where you are located in the United Kingdom or the European Economic Area, you have the right to access, rectify, erase, restrict the processing of, and port your personal information, and to object to its processing. Our lawful bases for processing are the performance of our contract with you, in respect of operating your account and providing the App, and our legitimate interests in securing the App and preventing misuse.
You have the right to lodge a complaint with your supervisory authority. In the United Kingdom this is the Information Commissioner’s Office.
10. Exercising Your Rights
Access, correction, and erasure are available to you directly within the App. For any other request, contact us at the address in Section 12. We will respond within 45 days where the CCPA/CPRA applies, and within one month where the UK or EU GDPR applies.
We may ask you to provide additional information in order to verify your identity before we act on a request. Any information supplied for that purpose is used solely to verify your identity and to process your request.
11. Children's Privacy
The App is not directed to individuals under the age of 18, and we do not knowingly collect personal information from them. If we become aware that we have collected personal information from a person under 18, we will delete it.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the revised policy on this page and updating the “Last Updated” date above. You are advised to review this Privacy Policy periodically.
13. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Email: privacy@freightstow.com
We are the data controller in respect of the personal information described in this policy. You may contact us by email for any request under this policy, including a request for the identities of the service providers referred to in Section 4.1.