FreightOrbit

1. Introduction

FreightOrbit ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the FreightOrbit platform ("Platform"). This policy applies to all users including Senders, Brokers, Carriers, Drivers, and Administrators.

We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

2. Information We Collect

We collect the following categories of information:

• Account information: name, email address, phone number, and password (hashed) provided during registration.
• Business information: ABN, company name, insurance certificates, fleet details, and driver licences for Carrier and Driver accounts.
• Job and transaction data: freight job details, bids, payment amounts, delivery confirmations, and dispute records.
• Location data: GPS coordinates collected from Drivers during active shipments for real-time tracking purposes.
• Proof of delivery: digital signatures, geotagged photographs, and GPS timestamps captured at delivery.
• Device and usage data: browser type, IP address, pages visited, and interaction patterns for analytics and security.

3. Authentication and Account Security

We use Supabase Auth for user authentication. Your password is securely hashed and never stored in plain text. We support email-based authentication with email verification. Session tokens are managed securely and transmitted over encrypted connections (HTTPS/TLS).

We may use your email address to send transactional notifications including account verification, password resets, bid updates, and shipment status changes.

4. Payment Processing

All payments are processed through Stripe, Inc. We do not store your full credit card numbers, bank account details, or other sensitive financial information on our servers. Stripe handles payment data in accordance with PCI-DSS Level 1 standards.

Carriers connect their Stripe accounts via Stripe Connect for payout processing. We store Stripe customer and account identifiers to link your Platform account with your payment profile. For details on how Stripe handles your data, refer to Stripe's Privacy Policy.

5. GPS Tracking and Location Data

When a Driver is on an active shipment, the Platform collects GPS location data at regular intervals to provide real-time shipment tracking to Senders and Brokers. This data is:

• Collected only during active deliveries, not at all times.
• Visible to the Sender or Broker associated with the shipment, and to Admins.
• Stored for the duration of the shipment plus 90 days for dispute resolution purposes.
• Not sold to or shared with third-party advertisers.

Drivers are notified when tracking is active. Location data collection stops automatically when a delivery is completed or cancelled.

6. Data Storage and Security

Your data is stored using Supabase (hosted on cloud infrastructure). We implement Row Level Security (RLS) policies to ensure users can only access data they are authorised to view. Uploaded files including proof of delivery photos, insurance certificates, and profile images are stored in Supabase Storage with access controls.

We use industry-standard security measures including encryption in transit (TLS), encrypted storage, and regular security reviews. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies and Local Storage

The Platform uses cookies and browser local storage for authentication session management and user preferences. We use:

• Essential cookies: required for authentication, session management, and security. These cannot be disabled.
• Preference cookies: store your dashboard layout preferences, theme settings, and notification preferences.
• Analytics cookies: help us understand how users interact with the Platform to improve the experience.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using the Platform.

8. Third-Party Services

We share data with the following third-party services as necessary to operate the Platform:

• Supabase: database hosting, authentication, file storage, and real-time features.
• Stripe: payment processing, escrow management, and carrier payouts.
• Mapping services: address geocoding and route display for shipment tracking.

We do not sell your personal information to third parties. We may disclose information if required by law, regulation, or legal process.

9. Your Rights

Under Australian privacy law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your account and associated personal data, subject to legal retention requirements.
• Opt out of non-essential communications at any time.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs.

To exercise any of these rights, contact us using the details in Section 11.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Transaction records and delivery confirmations are retained for a minimum of 7 years to comply with Australian tax and business record-keeping requirements. GPS tracking data is retained for 90 days after shipment completion. You may request account deletion at any time, after which we will delete or de-identify your personal data within 30 days, except where retention is required by law.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

FreightOrbit Privacy Officer
Email: privacy@freightorbit.com.au

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or through a notice on the Platform. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.