Privacy Policy

Freyt ("we", "us") provides software that reads rate confirmation documents and exports structured shipment data to your TMS. This policy explains what we collect, why, how it's protected, and how you can control it. We don't sell your data, and we don't use your documents to train third-party models — see Section 5.

1. What we collect

Account details you give us — name, email, company, job title, and billing information (processed via Stripe or PayPal; we never store raw card numbers).

• Documents you upload or forward for extraction (rate confirmations, PDFs, emails)
• Extracted shipment data (pickup/delivery, rate, weight, carrier references)
• Usage data — pages visited, features used, error logs, IP address, browser type
• Support communications, when you contact us

2. How we use it

• To extract and export shipment data on your behalf
• To operate, secure, and improve the product
• To send account, billing, and security notifications
• To provide customer support and respond to your requests
• To detect fraud and enforce our Terms of Service

3. Legal basis (EU/UK users)

Where GDPR applies, we rely on contract performance (providing the Service), legitimate interests (security, product improvement), legal obligation (compliance), and consent (marketing, where applicable). You can object to processing based on legitimate interests at any time — see Section 9.

4. Sharing & disclosure

We don't sell, rent, or trade your data. We share it only with vetted service providers under data processing agreements — cloud infrastructure (AWS), payment processors (Stripe, PayPal), transactional email, and error monitoring — or when required by law, in a business transfer (with prior notice to you), or with your explicit consent (e.g. a TMS integration you set up yourself). A current sub-processor list is available on request.

To extract data from the documents you upload, we send them to third-party AI providers acting as our sub-processors under data processing agreements. They process your documents on our behalf to return the extracted fields and don't use your data to train their own models. See Section 5 for more on model training.

5. What we don't do

We don't sell your data. We don't use uploaded rate confirmations or extracted data to train third-party models. Any model improvements we make use aggregate, de-identified patterns only, stripped of identifying details like names, rates, and addresses. Documents are processed to extract the fields you requested and retained only as long as your plan's history settings specify.

6. Data retention

Extracted records are kept for as long as your account is active, or per your plan's history window (30 days on Starter, 12 months on Pro and Team). Raw uploaded documents are deleted after successful extraction or retained per that same window. On account closure we delete your data within 30 days, except records we're legally required to retain (e.g. financial records, kept up to 7 years for tax compliance); backups clear within 90 days.

7. Security

We encrypt data in transit (TLS 1.2+) and at rest (AES-256), restrict employee access to customer data on a need-only basis, and run regular vulnerability assessments. No system is completely secure — if a breach affects your data, we'll notify you and relevant authorities as required by law.

8. International transfers

Freyt is based in the US. If you're in the EU or UK, your data may be processed here under Standard Contractual Clauses. A Data Processing Agreement is available on request at privacy@freyt.space.

9. Your rights

You can access, correct, export, restrict, object to, or delete your data by contacting privacy@freyt.space. We respond within 30 days. Depending on your location, you may have additional rights under GDPR, CCPA/CPRA, or similar regulations, including the right to lodge a complaint with your local data protection authority. California residents can request details on categories collected and, since we don't sell data, there's nothing to opt out of on that front.

10. Cookies

We use essential session cookies to keep you logged in, and privacy-respecting analytics with no cross-site tracking or ad networks. We don't run advertising cookies. See our Cookie Policy for full details.

11. Children's privacy

The Service isn't directed at anyone under 16, and we don't knowingly collect data from children. If you believe we have, contact us and we'll delete it.

12. Changes

We may update this policy as our practices evolve. For material changes, we'll notify you by email or in-app notice at least 14 days before they take effect.

13. Contact

Questions about this policy: privacy@freyt.space· DPA requests: same address, subject "DPA Request" · Security reports: security@freyt.space