Privacy Policy

Account information. Name, email address, organization, role, and authentication identifiers for each user.

Business data you enter. Accounts, contacts at those accounts, orders, invoices, catalogs, agreements, routes, visit notes, and commission records.

Billing information. Plan tier, billing interval, and — where you authorize ACH debits — the authorization record, signer name, institution name, account type, and last four digits of the account. Full bank account and card numbers are held by our payment gateway and are never stored in our database.

Consent records. Where you provide SMS consent or an ACH authorization, we record the exact consent text shown, the timestamp, the IP address, and the browser user agent, captured server-side. These are compliance evidence and are retained as append-only records.

Signature records. For electronically signed purchase orders and agreements: signer name, timestamp, IP address, and any drawn signature image.

Usage data. Standard log and product-analytics events (pages viewed, features used) to operate and improve the platform.

Public registry data. State license records published by regulators, including Michigan CRA license exports. This is public business data, not personal data we collect from you.

To provide and operate the platform; to authenticate users and enforce access boundaries; to process billing and maintain payment authorizations; to send transactional and service communications; to provide support; to maintain compliance and audit records; and to detect and prevent abuse.

We do not sell your data. We do not share your business data with other tenants on the platform. We do not use your business data to train third-party AI models.

Business records are scoped to your organization and enforced at the database layer, so one tenant cannot read another's accounts, rates, contracts, or pipeline. Cost and margin data is further restricted to administrators within your own organization.

External counterparties reach only what you authorize: buyers and facility signers use single-use, expiring token links; brokers see only authorized line sheets; transporters see a logistics-only view. None of them enter your CRM.

We rely on third parties to operate: cloud hosting and database infrastructure, email delivery, payment and ACH gateways, mapping and geocoding, AI providers for optional in-product features, and — only where you explicitly connect them — integrations such as Google Calendar, Gmail, Google Drive, Google Sheets, and GitHub. Each receives only the data needed for its function. Connected integrations operate under the permissions you grant and can be disconnected at any time.

When you enter contacts at your accounts, you are the controller of that information and you are responsible for having a lawful basis to hold it and to contact those people. We process it on your behalf. If a contact asks us directly to be removed, we will refer them to you and cooperate with your response.

We retain your business data for as long as your account is active and for a reasonable period afterward so you can export it. Certain records are retained longer because we are obligated to keep them: ACH authorizations, signature records, consent logs, and registry change history are append-only compliance evidence and survive cancellation of the related authorization.

You can access and correct most information directly in the platform, export your full account data on request, withdraw SMS consent, and revoke ACH authorization by cancelling your subscription.

Depending on where you live, you may have additional rights to access, correct, delete, or port personal information, and to appeal a decision about such a request. Requests can be made through the contact page and we will respond as required by applicable law. Note that deletion requests cannot override the compliance retention obligations described above.

We use cookies and similar storage for authentication, session management, and product analytics. Disabling them will prevent you from staying signed in.

The platform is not directed to anyone under 21 and we do not knowingly collect information from minors.

We may update this policy. Material changes will be communicated through the platform or by email before taking effect.

Privacy questions and requests can be sent through the contact page.