FreightStow Privacy Policy

The document generators are available without registration. Where you use the App without an account, the information you enter is retained in your browser’s local storage on your own device and is not transmitted to us.

When you generate a document we also record whether its shipment details differ from the starting details, to understand use of the generators. This flag contains none of the text you entered. We record the type of document, the date, and the IP address from which the request was made. We do so in order to detect and prevent misuse of the App, on the basis of our legitimate interests in securing it. That record contains no part of the information you entered and is not linked to any account. IP addresses are erased 30 days after collection, after which the record retains only the document type, the edit flag and the date.

If you select a paid plan we record which plan, the price displayed to you, the page you selected it from, the date, and the IP address from which the request was made. We do so in order to understand which features are worth building, on the basis of our legitimate interests in developing the App. Where you are not signed in, that record is not linked to any account. IP addresses in these records are erased on the same 30-day schedule.

We use product analytics and session replay to understand how the document tools are used: pages visited, clicks, scrolling, use of controls, and a replay of the session. A replay records selected commercial fields of the document you are working on: product descriptions, HS codes, quantities, units, weights, countries, ports, transport mode, Incoterms and currency. Everything else is masked in your browser before a frame is transmitted: the names and addresses of the parties, signatories, bank and payment details, document and reference numbers, prices, notes, and every sign-in field. Recordings never include spreadsheet contents, network request or response bodies, or console output. Replays are deleted 30 days after they are recorded.

Where you register for an account, we collect the following categories:

• Identifiers. Name, email address, and IP address.
• Authentication data. A cryptographic hash of your password, where you set one. We do not store the password itself. Where you authenticate through a federated sign-in provider, we store the identifier that provider supplies in place of a password.
• Commercial information. The trade records you choose to save, including the parties, ports, container details, and line items you enter, together with the business contacts and product records derived from them.
• Usage data. A record of the documents you generate, comprising the document type, its reference number, and the date. We also store how many spreadsheet imports you apply in the current calendar month. This is used to enforce the account’s monthly allowance. Product analytics also records pages visited and interactions such as importing, saving, selecting a saved product, and downloading, together with the document type, export format, line count, whether a spreadsheet was imported, and the commercial fields listed in Section 2.1. We do not receive the spreadsheet, its filename, headings, or imported rows.

Documents are assembled and rendered entirely within your browser, in each of the formats we offer — PDF, Excel, and Word. The completed file is not transmitted to us and is not stored on our systems. Spreadsheets selected for line-item import are also read within your browser and are not transmitted to us. We do not collect payment card data, financial account data, or biometric data, and we do not use advertising trackers.

• Directly from you, when you register, save a trade, or contact us.
• Automatically, in the form of server log data and the IP address from which you connect, together with product interaction, browser, device, and page information generated when you use the App, whether or not you have an account.
• From third parties, where you elect to sign in through a federated identity provider that you have authorised to share your name and email address with us.

We disclose personal information to service providers who process it on our behalf and solely to enable us to provide the App. These fall into the following categories:

• Cloud application hosting and content delivery.
• Managed database hosting and storage.
• Transactional email delivery, for account confirmation messages.
• Federated authentication, where you elect to sign in through such a provider.
• Error monitoring and product analytics.

Each such provider is engaged under terms requiring it to process personal information only on our instructions and for the purpose of providing services to us, and prohibiting it from using that information for its own purposes. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.

We currently use PostHog as our product analytics and session replay provider. Signed-in activity is associated with an internal account identifier; we do not send PostHog your email address or display name.

Where you request a list of the specific providers we engage, we will supply it on request to the address in Section 13.

We may disclose your information where required to do so by law, or in response to valid requests by public authorities such as a court or government agency.

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

You have the right to request information about the personal information we collect, use, and disclose.

You have the right to request deletion of your personal information, subject to certain exceptions.

You have the right to request correction of inaccurate personal information.

We do not sell or share personal information. The CCPA/CPRA nonetheless requires us to inform you that you have the right to opt out of such sale or sharing.

You have the right to limit the use and disclosure of sensitive personal information. We do not collect sensitive personal information as that term is defined under the CCPA/CPRA.

We will not discriminate against you for exercising any of your CCPA/CPRA rights.