Legal

Privacy Policy

Effective date: May 10, 2026

1. Introduction

FreTraq, Inc. (“FreTraq,” “we,” “us,” or “our”) operates the FreTraq freight marketplace platform at fretraq.com. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding that information.

By using the Platform you agree to the collection and use of information as described in this policy.

2. Information We Collect

Information you provide directly

  • Account information: full name, email address, password (stored as a hashed credential — we never store plaintext passwords)
  • Company information: company name, business address, business phone number, role (broker or carrier)
  • Regulatory identifiers: FMCSA MC number, USDOT number, operating authority status — collected from carriers during verification onboarding and cross-referenced against FMCSA public records
  • Payment information: billing address and payment method details. We do not store raw card numbers — payment processing is handled by Stripe, which stores your card data under PCI-DSS compliance. We receive and store only a Stripe customer ID and last-four-digits reference.
  • Load and bid data: load origin, destination, equipment type, weight, pickup/delivery windows, and rates you post or bid on the Platform
  • Communications: messages or support requests you send to FreTraq

Information collected automatically

  • GPS location data: when a carrier activates tracking on an active load, we collect device GPS coordinates at regular intervals for the duration of that load. This data is used to provide the live tracking feature to the broker who posted the load.
  • Usage data: pages visited, features used, timestamps, browser type, IP address, and device identifiers, collected through server logs and analytics tools
  • Cookies and similar technologies: session cookies (required for authentication) and analytics cookies (which you may opt out of). See Section 8.

3. How We Use Your Information

We use the information we collect to:

  • Operate the Platform: authenticate accounts, process subscriptions, match brokers and carriers, display load and bid information, and deliver GPS tracking data
  • Verify carrier authority: cross-check submitted MC/USDOT numbers against FMCSA records to confirm active operating authority before a carrier can bid on loads
  • Fraud prevention and trust: detect fictitious loads, double-brokering, impersonation, and other prohibited conduct; maintain carrier reputation scores
  • Billing: process subscription payments and send invoices and receipts through Stripe
  • Communications: send transactional notifications (bid alerts, load awards, account updates) via email and SMS; send service announcements and security notices
  • Platform improvement: analyze usage patterns to improve features and fix bugs — using aggregated, de-identified data where possible
  • Legal compliance: comply with applicable laws, respond to lawful requests from government authorities, and enforce our Terms of Service

We do not sell your personal information to third parties. We do not use your data to train third-party AI models.

4. Information We Share

We share your information only as necessary to operate the Platform or as required by law:

Between users on the Platform

When a carrier bids on a load, the broker can see the carrier’s company name, MC number, USDOT number, rating, and bid amount. When a broker awards a load, the carrier receives the broker’s company name and contact information to coordinate pickup. We do not share personal email addresses or passwords between users.

Service providers (sub-processors)

ProviderPurposeData shared
StripePayment processing, subscription billingName, email, billing address, payment method
TwilioSMS notifications (bid alerts, load updates)Phone number, notification content
SupabaseDatabase hosting and user authenticationAll account and platform data (hosted on Supabase infrastructure)
MapboxMap rendering and GPS route displayGPS coordinates for active load tracking sessions

Each sub-processor is bound by a data processing agreement requiring them to handle your data only for the purposes listed above and in compliance with applicable privacy law.

Legal requirements

We may disclose information if required by law, court order, or a valid government request, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of FreTraq, our users, or the public.

Business transfers

If FreTraq is acquired, merges with another company, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you by email and post a notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your information for as long as your account is active or as needed to:

  • Provide you the Platform services
  • Comply with legal obligations (e.g., tax and financial record requirements)
  • Resolve disputes and enforce our agreements

Specific retention periods:

  • Account data (name, email, company): retained until you request deletion or your account is terminated, plus 30 days to allow recovery
  • Load and bid records: retained for 3 years from the date of the transaction for dispute resolution purposes
  • GPS location pings: retained for 90 days from the date of the tracked load, then permanently deleted
  • Payment records: retained for 7 years as required by tax law (raw card data is never stored by FreTraq)
  • Support communications: retained for 2 years

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

  • Access: request a copy of the personal information we hold about you
  • Correction: request correction of inaccurate or incomplete information
  • Deletion:request deletion of your account and personal data, subject to our retention obligations described above. To delete your account, email privacy@fretraq.com with the subject line “Delete my account.”
  • Portability: request a machine-readable export of your account data (load history, bid history)
  • Opt out of marketing: unsubscribe from marketing emails using the link in any marketing email, or email privacy@fretraq.com. Transactional notifications (bid alerts, payment receipts) cannot be opted out of while your account is active.

To exercise any of these rights, contact us at privacy@fretraq.com. We will respond within 30 days.

California residents may have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information and do not share it for cross-context behavioral advertising.

7. Data Security

We implement technical and organizational measures to protect your information, including TLS encryption in transit, encrypted storage for sensitive fields, access controls limiting data access to authorized personnel, and row-level security on our database so users can only access their own organization’s data.

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it responsibly to security@fretraq.com.

8. Cookies

We use the following cookies:

  • Authentication cookies (required): session tokens set by Supabase Auth to keep you logged in. These are necessary for the Platform to function and cannot be disabled.
  • Analytics cookies (optional): we may use privacy-respecting analytics to understand how the Platform is used in aggregate. These do not track you across other websites.

You can disable non-essential cookies in your browser settings. Disabling authentication cookies will prevent you from logging in.

9. Children's Privacy

The Platform is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, contact us at privacy@fretraq.com and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Platform at least 14 days before the changes take effect. The updated policy will be identified by a new effective date at the top of this page.

11. Contact Us

For privacy questions or to exercise your rights, contact: privacy@fretraq.com

FreTraq, Inc.
fretraq.com