Privacy Policy

Binnacle Corporation (“Binnacle”, “we”, “us”) provides Freight Finance OS (the “Service”). This policy explains what information we collect through the Service and the website freightfinanceos.com, how we use it, and the choices you have.

Our customers are businesses. When a customer uses the Service, it decides what data to put in and what to do with it; for that data we act on the customer’s behalf as a service provider (sometimes called a processor). If your information is in the Service because a broker, 3PL or shipper you work with uses it, please contact that company first. We will help them respond.

• Account information: names, work email addresses, job roles and sign-in details for the people a customer invites, and the customer’s company details.
• Customer Data: what customers put into the Service, such as shipments, rates, invoices, documents, remittances, and contact and bank details for their customers and carriers.
• Payment information: handled by Stripe. We receive the card brand, last four digits and billing status, never full card numbers. Bank account numbers entered for payouts are encrypted, and the Service shows only the last four digits.
• Usage and device information: actions taken in the Service, IP address, browser type and timestamps. We keep a tamper-evident audit log of actions in each account for security and compliance.
• Communications: messages you send us, and email forwarded to the Service (for example carrier quotes sent to your RFQ inbox).
• Website enquiries: what you submit through our contact form.

• to provide the Service, including moving money and syncing accounting as you direct;
• to bill you and manage your subscription;
• to keep the Service and your account secure, including fraud prevention and sanctions screening;
• to provide support and send service notices, such as trial-ending reminders and payment receipts;
• to understand how the Service is used and improve it, using aggregated or de-identified data;
• to meet legal, tax and accounting obligations.

• We don’t sell personal information or share it for advertising.
• We don’t use advertising or third-party analytics trackers in the Service.
• We don’t use Customer Data to train AI models, and we use AI providers under terms that don’t allow them to train on it.

We share information with service providers that help us run the Service, only for that purpose and under contracts that require them to protect it:

We also share information when a customer directs us to (for example sending an invoice to its customer or a payment to its carrier), when the law requires it, to protect rights and safety, or as part of a merger or acquisition, in which case this policy continues to apply.

We use cookies and browser storage that are needed to sign you in, keep you signed in and remember basic preferences. We don’t use advertising cookies. Blocking these cookies will stop the Service from working.

We keep account information and Customer Data while the customer’s account is active. After an account ends, the customer can request an export for [30] days, and then we delete it. We keep payment, ledger and audit records for up to seven years where the law or our compliance obligations require, and backups expire on their normal schedule.

Data is encrypted in transit, and sensitive details such as bank account numbers and integration credentials are encrypted at rest. Access is limited by role, multi-factor authentication and single sign-on are available, and every action in an account is recorded in an audit log. No system is perfectly secure; if a breach affects your information we will notify you as the law requires.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or limit some uses. Account admins can update most information in Settings. To make a request, email [privacy contact email]. We will verify the request and respond within the time the law requires, and we won’t treat you differently for exercising these rights.

If your information is in the Service because a customer uploaded it, we will pass your request to that customer and help them respond.

We are based in the United States and process information there. Some providers listed above may process it in other countries; where required, we use appropriate safeguards for those transfers.

The Service is for businesses and is not directed at anyone under 18. We don’t knowingly collect information from children.

We will post changes to this policy here and update the date above. For material changes we will tell account admins by email or in the app before they take effect. See also our Terms of Service.

Questions: [privacy contact email], Binnacle Corporation, [mailing address].