GDPR Compliance
Our commitment to data protection
FreightAI is committed to protecting the privacy and security of personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Our Role Under GDPR
When you use FreightAI, we act as a data processor on your behalf. You remain the data controller for any personal data you upload or process through our platform. We only process personal data according to your instructions and in compliance with our Data Processing Agreement.
Your Rights Under GDPR
If you are in the European Economic Area (EEA), you have the following rights:
Right to Access
You can request a copy of the personal data we hold about you.
Right to Rectification
You can request that we correct any inaccurate or incomplete personal data.
Right to Erasure
You can request that we delete your personal data in certain circumstances.
Right to Restrict Processing
You can request that we limit how we use your personal data.
Right to Data Portability
You can request a copy of your data in a machine-readable format.
Right to Object
You can object to certain types of processing, such as direct marketing.
Legal Basis for Processing
We process personal data under the following legal bases:
- Contract: Processing necessary to fulfill our service agreement with you
- Legitimate Interest: Processing for our legitimate business interests, such as improving our services
- Consent: Processing based on your explicit consent, which you can withdraw at any time
- Legal Obligation: Processing necessary to comply with legal requirements
Data Transfers
FreightAI is based in the United States. When we transfer personal data from the EEA to the US, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
Data Retention
We retain personal data only for as long as necessary to provide our services and fulfill the purposes described in our Privacy Policy. When you close your account, we will delete or anonymize your personal data within 90 days, unless we are required to retain it for legal or regulatory purposes.
Sub-processors
We use third-party sub-processors to help provide our services. All sub-processors are carefully vetted and bound by data protection agreements. We maintain an up-to-date list of sub-processors available upon request.
Data Processing Agreement
Enterprise customers can request a Data Processing Agreement (DPA) that outlines our obligations as a data processor. Contact us to request a copy.
Exercising Your Rights
To exercise any of your GDPR rights, please contact our Data Protection team at privacy@freightai.us. We will respond to your request within 30 days.