FreightFTE Privacy Policy
Website platform and business contact privacy notice
Purpose. This Privacy Policy explains how FreightFTE Ltd. collects, uses, discloses, stores, and protects Personal Data in connection with its website, business relationships, platform, AI-powered digital workers, integrations, implementation, support, and related services.
1Who we are and when this Policy applies
1.1 FreightFTE. FreightFTE Ltd., company number 517400990, with its registered address at 10 Derech HaTzabar, Beit Hanan 7686800, Israel, is referred to as FreightFTE, we, us, or our.
1.2 Scope. This Policy applies to Personal Data we process about website visitors, prospective and current customer and partner contacts, account administrators, Authorized Users, suppliers, event participants, support contacts, and other individuals who interact directly with us.
1.3 Customer-controlled data. Our customers may submit or make available operational data that includes Personal Data about their employees, customers, suppliers, agents, carriers, brokers, consignees, shippers, and other parties. For that data, the customer generally determines the purposes and means of processing and acts as the controller or database owner, while FreightFTE generally acts as processor, database holder, or service provider under the customer agreement and any Data Processing Addendum. The customer's own privacy notice governs its collection and use of that data.
1.4 Policy relationship. If a Data Processing Addendum or other signed agreement applies to Customer Data and conflicts with this Policy, that agreement controls for the relevant processing.
2Personal Data we collect
2.1 Information provided directly. Depending on the interaction, we may collect:
- business contact details, such as name, job title, employer, work email, work telephone number, address, country, and preferred language;
- account and identity information, such as username, organization, role, permissions, authentication records, and account settings;
- commercial and relationship information, such as inquiries, meeting notes, proposals, orders, contracts, billing contacts, payment status, service history, and communications;
- support, onboarding, implementation, configuration, training, and feedback information;
- content submitted through the Services, including prompts, instructions, files, messages, approvals, workflow data, and related metadata; and
- information supplied when applying for a role, visiting our offices, attending an event, or otherwise contacting us.
2.2 Information collected automatically. We may collect:
- device and network information, including IP address, browser, operating system, device type, language, time zone, and approximate location derived from IP;
- usage and activity information, including pages viewed, links clicked, feature use, user actions, workflow events, timestamps, session information, and referral source;
- operational, diagnostic, security, integration, approval, system-event, and error logs; and
- cookie and similar-technology information, as described in Section 10.
2.3 Information from customers and third parties. We may receive Personal Data from the organization that provides your account; other users; customers, partners, service providers, integrations, connected email or business systems, public sources, event organizers, and professional networks. We may combine that information with information we already hold where permitted by law.
2.4 Restricted Data. The Services are not intended to receive payment card data, government identification numbers, biometric identifiers, health, genetic, criminal, minor, precise-location, passwords, private keys, credentials, or other specially sensitive information unless an applicable Statement of Work expressly permits it and states the required controls. Please do not submit Restricted Data without written authorization.
3Why we use Personal Data
| Purpose | How we use information |
|---|---|
| Provide Services | Create and administer accounts; deliver, configure, integrate, operate, maintain, and support the Services; process customer instructions; generate Outputs; perform authorized Actions; and manage access and approvals. |
| Customer relationships | Respond to inquiries; prepare proposals and orders; manage onboarding, implementation, billing, renewals, support, training, and customer success; and communicate service information. |
| Security and integrity | Authenticate users; monitor activity; prevent, detect, investigate, and respond to fraud, misuse, security threats, unlawful activity, errors, and incidents; and protect systems, rights, and property. |
| Service improvement | Analyze performance and usage; troubleshoot; test; evaluate; optimize workflows and AI systems; develop features; and improve usability, reliability, and quality. |
| Legal and governance | Comply with law, legal process, sanctions, tax, accounting, recordkeeping, and contractual duties; enforce agreements; establish, exercise, or defend claims; and conduct audits and due diligence. |
| Business operations | Manage vendors, finance, insurance, corporate transactions, business continuity, internal reporting, and organizational administration. |
| Marketing | Send relevant business communications, event invitations, product news, and offers, subject to applicable consent and opt-out requirements. |
| Aggregation and analytics | Create and use aggregated, anonymized, or de-identified analytics, benchmarks, workflow patterns, and derived intelligence that do not identify an individual or customer in identifiable form. |
4Legal grounds and whether information is required
4.1 Legal grounds. Where Applicable Law requires a legal basis, we rely as appropriate on performance of a contract or steps requested before entering one; our legitimate interests in operating, securing, supporting, improving, and marketing our business-to-business Services; compliance with legal obligations; protection of legal rights and vital interests; and consent where consent is required.
4.2 Providing information. Some information is required to create an account, provide the Services, fulfill an order, maintain security, or meet legal duties. Where collection is mandatory, the relevant form, workflow, agreement, or request will indicate this where required. If required information is not provided, we may be unable to create an account, provide a feature, enter into or perform an agreement, respond to a request, or permit continued access.
4.3 Customer instructions. Where we process Personal Data for a customer, the customer is responsible for providing required notices, obtaining required consents or other lawful grounds, and ensuring its instructions and data are lawful.
5AI systems data use and human oversight
5.1 Processing through AI-enabled Services. The Services may use machine-learning models, large language models, rules, orchestration tools, integrations, and automated workflows to classify information, extract data, draft communications, make recommendations, generate Outputs, and perform approved Actions.
5.2 No general model training on identifiable Customer Data. We do not use Customer Data or Outputs in identifiable form to train generalized foundation models or models made generally available to other customers. We may use aggregated, anonymized, or de-identified information, Usage Data, derived intelligence, workflow learnings, evaluation artifacts, benchmarking information, and other non-customer-identifiable information to operate, secure, evaluate, test, improve, optimize, and develop the Services and related technology.
5.3 Human oversight. Our Services are designed to support business workflows and may operate at different autonomy levels approved by the customer. Customers are responsible for configuring approvals, supervising use, validating Outputs, and deciding whether and how to rely on an Output or Action. Critical Actions ordinarily require human approval unless the customer agreement expressly authorizes a defined automated process and safeguards.
5.4 Automated decisions. We do not intend to make decisions about individuals that produce legal or similarly significant effects solely on our own behalf through automated processing. Customers must not use the Services for prohibited regulated or high-risk decisions without express written approval. If a customer uses an approved workflow involving automated decision-making, the customer's notice and agreement govern that use.
6How we disclose Personal Data
6.1 Recipients. We may disclose Personal Data to:
- the customer or organization that provides or controls your account, including its administrators and authorized personnel;
- our affiliates, personnel, professional advisers, auditors, insurers, and contractors who need the information for legitimate business purposes and are subject to appropriate duties;
- hosting, cloud, AI model, security, monitoring, analytics, communications, support, integration, payment, and other service providers and subprocessors;
- third-party applications, carriers, agents, email systems, enterprise platforms, and other destinations selected, enabled, or instructed by the customer or user;
- competent authorities, regulators, courts, law enforcement, or other parties where required by law or reasonably necessary to protect rights, safety, security, and legal interests; and
- actual or prospective parties and advisers involved in financing, investment, merger, acquisition, reorganization, sale of assets, insolvency, or another corporate transaction, subject to appropriate confidentiality and legal safeguards.
6.2 No sale for unrelated advertising. We do not sell Personal Data for money or disclose it for unrelated third-party consumer advertising. If our practices change in a way that triggers a legal sale, sharing, or consent requirement, we will update this Policy and provide required choices before the change applies.
6.3 Subprocessors. Where a Data Processing Addendum applies, the subprocessor terms and any current subprocessor list made available under that agreement govern Customer Data disclosures to subprocessors.
7International transfers
7.1 Processing locations. FreightFTE is based in Israel and may use personnel and service providers in Israel and other countries. Personal Data may therefore be processed outside the country where it was collected, including in countries with different data-protection laws.
7.2 Safeguards. Where required, we use lawful transfer mechanisms and safeguards appropriate to the transfer, which may include adequacy decisions, contractual clauses, data-processing agreements, transfer assessments, and supplementary security measures. Customers may contact us for information about safeguards relevant to their Personal Data, subject to confidentiality and security limitations.
8Retention and deletion
8.1 Retention criteria. We retain Personal Data only for as long as reasonably necessary for the purposes described in this Policy, including to provide Services, maintain business and security records, comply with law and contracts, resolve disputes, enforce rights, and protect against fraud and abuse. Retention depends on the data category, relationship, customer instructions, contractual commitments, legal limitation periods, security needs, and backup cycles.
8.2 Customer Data. Customer Data is retained and deleted under the customer agreement and any Data Processing Addendum. Unless another period is agreed, a customer may request export within 30 days after termination, after which we may delete Customer Data from active systems, subject to legal retention, backup cycles, security logs, dispute records, and legitimate business records.
8.3 De-identified information. We may retain aggregated, anonymized, or de-identified information and derived intelligence that no longer identifies an individual or customer in identifiable form, subject to Applicable Law.
9Security
9.1 Safeguards. We use reasonable administrative, technical, and organizational measures designed to protect Personal Data against unauthorized or unlawful processing and accidental loss, destruction, alteration, or disclosure. Measures are selected in view of the nature of the information, processing, available technology, and risk.
9.2 Shared responsibility. No service is completely secure. Customers and users must protect credentials, use appropriate access controls, keep devices and systems secure, follow customer policies, and promptly notify us of suspected unauthorized access or security incidents affecting the Services.
10Cookies and similar technologies
10.1 Use. Our website and platform may use cookies, local storage, pixels, and similar technologies to keep users signed in, remember settings, maintain security, understand performance and usage, and improve the Services.
10.2 Choices. Where required, non-essential cookies will be used only after consent. Users can manage available choices through our cookie banner or settings and through browser controls. Blocking some technologies may affect website or platform functionality.
10.3 Separate cookie notice. If we publish a separate Cookie Notice or consent-management panel, it forms part of this Policy and provides current details about the technologies in use.
11Marketing communications
11.1 Business marketing. We may send business contacts product information, company updates, event invitations, and related communications where permitted by law. You can opt out of marketing email using the unsubscribe link or by contacting us. We may still send non-marketing messages about accounts, security, transactions, support, legal terms, and service changes.
12Privacy rights
12.1 Available rights. Depending on location and Applicable Law, an individual may have rights to request access to Personal Data; correction or updating of inaccurate information; deletion; restriction or objection; portability; withdrawal of consent; information about processing and recipients; and review of certain automated decisions. Some rights are subject to conditions, exceptions, identity verification, legal retention, confidentiality, and the rights of others.
12.2 Israel. Individuals may have rights to inspect information held about them in a database and request correction or deletion of information that is incorrect, incomplete, unclear, or outdated, as provided by Israeli law. Additional rights and remedies may apply under the Israeli Privacy Protection Law and related regulations.
12.3 EEA and United Kingdom. Where European or United Kingdom data-protection law applies, individuals may also have rights to object to processing based on legitimate interests, restrict processing, receive portable data in applicable cases, withdraw consent without affecting earlier processing, and complain to a competent supervisory authority.
12.4 Exercising rights. Submit a request to David@freightfte.com. We may request information needed to verify identity, authority, and the relevant relationship. We will respond within the period required by Applicable Law.
12.5 Customer-controlled data. If your request concerns Personal Data that we process for a customer, please contact that customer first. We may forward the request to the customer and assist it as required by our agreement and Applicable Law.
12.6 Complaints. You may contact us with a concern and, where applicable, lodge a complaint with the competent privacy or data-protection authority. We encourage you to contact us first so we can try to address the issue.
13Children
13.1 Not for children. The website and Services are business offerings and are not directed to children. We do not knowingly collect Personal Data directly from children through account registration or marketing. Customers must not use the Services for children's services or submit children's Personal Data unless FreightFTE has expressly approved the use in writing and all required safeguards are in place.
14Third-party services and links
14.1 Third parties. The website and Services may link to or integrate with third-party websites, applications, platforms, models, carriers, email systems, and other services. Their privacy practices are governed by their own notices, except where FreightFTE engages them as processors or subprocessors under a written agreement. Customers control integrations they enable and should review relevant third-party terms.
15Changes to this Policy
15.1 Updates. We may update this Policy to reflect changes in our Services, technology, practices, or legal obligations. We will post the updated Policy and change the last updated date. If a change materially affects how we use Personal Data, we will provide additional notice or seek consent where required by law.
16Contact us
16.1 Privacy contact. FreightFTE Ltd., company number 517400990, 10 Derech HaTzabar, Beit Hanan 7686800, Israel. Email: David@freightfte.com.
16.2 Data protection officer or privacy lead. If FreightFTE appoints a data protection officer or designated privacy lead, their current contact details will be published here or otherwise made available as required by law.