Introduction
Exfresso provides a freight logistics SaaS platform. All users of our platform — whether you are a freight agent, freight forwarder, partner, or a business booking shipments — are acting in a business capacity.
This Privacy Policy applies to all businesses and authorized users who access the Exfresso platform or whose data is processed on it. Some data on the platform may be entered by another business on your behalf (for example, a freight forwarder entering shipment details for a shipper). Regardless of how your data enters the platform, Exfresso protects it under this Privacy Policy and you have the same rights described below.
Information We Collect
Business Information
We collect business information necessary to provide our services, whether entered by you or by another business on your behalf:
- Names of authorized business users and operations contacts
- Business email addresses
- Company name and business address
- Job title or role
- Business phone numbers
- Company government or tax identifiers
Shipping and Logistics Data
We process commercial shipping data entered by platform users:
- Shipment details (origin, destination, weight, dimensions, contents)
- Carrier selections and tracking information
- Service rates and pricing data
- Commercial invoices and shipping documentation
- Business addresses for pickup and delivery
Platform Usage Data
We automatically collect technical data about platform interactions:
- Login timestamps and session duration
- Features accessed and actions taken
- Browser type, device information, and IP addresses
- Error logs and performance data
Information We Do Not Collect
Exfresso does not collect or store credit card numbers, bank account numbers, social security numbers, or other sensitive financial or government identification data. Payment processing is handled entirely by PCI-compliant third-party processors.
How We Use Your Information
| Purpose | Description |
| Service Delivery | Operating the platform, processing shipments, generating quotes, facilitating carrier connections. |
| Account Management | Managing accounts, authenticating users, controlling access, service communications. |
| Product Development | Analyzing usage patterns and transactional data to improve the platform and develop new features. This applies broadly to transactional data across the platform. |
| Aggregated Insights | Creating anonymized, aggregated market data and analytics from platform activity. See our Data Use Commitments for details on what may and may not be aggregated. |
| Compliance and Legal | Meeting regulatory requirements, responding to lawful requests, enforcing our Terms of Service. |
| Customer Support | Responding to support requests, troubleshooting, onboarding assistance. |
How We Share Your Information
Exfresso shares data only as necessary to provide our services and meet legal obligations.
Service Providers
We share data with third-party service providers to operate the platform and deliver the platform’s services. These providers include cloud infrastructure, shipping carriers, payment processors, analytics tools, and communication tools.
Other Platform Users
Data necessary to fulfill shipping transactions is visible to the parties involved in executing the shipment. Sensitive commercial data such as internal pricing and costs is never shared between parties.
Anonymized and Aggregated Data
Exfresso may create anonymized, aggregated data products derived from platform activity for market analysis, industry reporting, or commercial purposes. Certain data categories — including sensitive commercial data and personal data — are permanently excluded from aggregation or external use. See our Data Use Commitments for details.
Legal Requirements
We may disclose information if required by law, court order, or government regulation.
Data Security
- Encryption of data in transit and at rest using industry-standard methods
- Multi-tenant row-level security ensuring complete tenant data isolation
- Role-based access controls
- Security assessments
- SOC 2 compliance with annual third-party audits
Data Retention
We retain account and transactional data while your account is active. Records may be retained beyond termination where required by customs, tax, or commercial regulations (typically 3 to 7 years depending on jurisdiction). Platform usage logs may be retained indefinitely.
After account termination, we retain data for at least 60 days to allow for export, then reserve the right to delete it unless longer retention is required by law or contract. Where we have a regulatory obligation to retain data beyond your deletion request, we will communicate the reason and expected timeline.
Your Rights
These rights apply equally to all platform users, regardless of how your data was entered:
- Access: Request a copy of the data we hold about your organization.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion, subject to legal retention requirements.
- Data Export: Request your data in a portable format.
Exercising Your Rights
To exercise any privacy rights, contact privacy@exfresso.com. We will respond within 30 days or as required by applicable law. We may verify the request comes from an authorized representative. We do not sell personal information. Anonymized, aggregated data that cannot reasonably identify any business is not considered personal information.
Changes to This Policy
For material changes, we will notify account administrators via email at least 30 days before changes take effect.
Related Documents
For detail on how we handle specific data categories, see our Data Use Commitments at http://www.exfresso.com/legal/data-use
Contact Us
Privacy: privacy@exfresso.com
Support: support@exfresso.com
