Privat Policy

1. Introduction

Welcome to 1XFreight Inc. ("1XFreight," "we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit or interact with our website, platform, and related services (collectively, the "Services"). We are headquartered in Montreal, Quebec, Canada, with a secondary office in Dubai, UAE, and committed to meeting or exceeding applicable privacy laws in both Canada and the United States, as well as relevant regulations in the UAE.

2. Scope

This Policy applies to all individuals ("you," "your," or "Users") who access or use our Services. By using our Services, you consent to the collection and processing of your personal information as described herein.

3. Information We Collect

• Account & Profile Data: name, email address, phone number, job title, company name, login credentials
• Transactional Data: billing and payment information, invoices, shipping details
• Freight Documents: freight bills, proof-of-delivery (POD) documents, and related shipping paperwork uploaded by carriers and shippers, including data contained within them such as amounts, currency, signatures, dates, party names, and delivery details
• Usage Data: IP address, device identifiers, browser type, pages viewed, feature usage, timestamps, error logs
• Communications: emails, chat transcripts, support tickets, marketing preferences
• Cookies & Tracking: cookies, web beacons, analytics scripts

4. How We Use Your Information

We process your personal information to:

• Provide, maintain, and improve the Services
• Authenticate and manage your account
• Process transactions and collect payment
• Automatically audit and verify uploaded freight documents using third-party artificial intelligence services, by extracting and comparing data (such as billed amounts, currency, and delivery confirmation) from freight bills and PODs against agreed transaction terms
• Communicate announcements, updates, support, and marketing (where permitted)
• Analyze usage patterns and trends to optimize performance
• Comply with legal obligations and enforce our Terms of Use

5. Legal Bases for Processing

• Canada (PIPEDA): Necessary for contract performance, our legitimate interests, or with your consent
• USA (CCPA/CPRA): Collected to provide Services and for operational purposes; California residents have rights to access, deletion, and opt-out
• UAE (DIFC Data Protection Law): Processed in accordance with applicable data protection regulations in the UAE
• Other Jurisdictions: Rely on legitimate interests, contractual necessity, or consent

6. Disclosure of Personal Information

We may share your data with:

• Service Providers & Subprocessors: hosting, payment processors, CRM, analytics, email platforms
• AI Service Providers: We use third-party artificial intelligence services, including Google's Gemini API, to extract and process data from uploaded freight documents for automated bill auditing. These documents are transmitted to and processed by such providers under their data-processing terms. We use paid/enterprise service tiers under which the provider does not use customer data to train its models.
• Affiliates & Partners: as needed to deliver integrated features
• Legal & Regulatory Authorities: to comply with court orders or applicable laws
• Business Transfers: in connection with a merger, acquisition, or sale of assets (with notice)

7. International Data Transfers

Your personal information, including uploaded freight documents processed by AI service providers, may be transferred to and processed in Canada, the United States, the UAE, and other countries where our service providers operate. Where required, we implement safeguards such as standard contractual clauses or rely on adequacy decisions to protect your data.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable core functionality
• Remember your preferences
• Analyze and improve our Services

You can manage or disable cookies via your browser settings, though some features may no longer function properly.

9. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce agreements (typically up to seven years for financial records, shorter for other data). Uploaded freight documents are retained as part of your transaction records. Data transmitted to AI service providers for auditing is processed transiently and is not retained by those providers for training purposes under our service terms.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal information
• Correct or update inaccurate data
• Request deletion or restriction of processing
• Object to processing based on legitimate interests
• Opt out of marketing communications
• For California residents: opt out of sale of personal information under CCPA
• For UAE residents: exercise rights under applicable UAE data protection regulations
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us (see Section 15).

11. Children's Privacy

Our Services are not directed to, and we do not knowingly collect personal information from, children under 16. If you believe we have inadvertently collected such information, please contact us to request deletion.

12. Security

We employ technical, administrative, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. However, no method of transmission or storage is completely secure.

13. Changes to This Policy

We may update this Policy to reflect changes in our practices or applicable laws. When we do, we will revise the "Last updated" date and, where appropriate, notify you by email or via a prominent notice in the Services.

14. Governing Law & Dispute Resolution

This Privacy Policy and any dispute arising from it are governed by:

• For Users in Canada and the United States: the laws of the Province of Quebec and the federal laws of Canada applicable therein, with exclusive jurisdiction in the courts of Montreal, Quebec
• For Users in the UAE: the data protection regulations of the Dubai International Financial Centre (DIFC), with exclusive jurisdiction in the DIFC Courts

15. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact our Privacy Officer at:
Email: [email protected]