Privacy Policy

1. Who We Are

FreightSignal ("FreightSignal," "we," "us," or "our") is a freight sales intelligence platform operated at freightsignal.net. We provide AI-powered signal monitoring, outreach generation, and territory mapping tools for freight sales professionals.

2. What Data We Collect

Account data — when you create an account: your name, email address, company, job title, home city/state, and freight specialty. This is required to provide the service.

Payment data — billing is handled by Stripe. FreightSignal never sees or stores your credit card number. Stripe processes and stores payment information under their own privacy policy and PCI compliance certification.

Signal and pipeline data — freight signals you act on, pipeline opportunities you create, notes and deal values you enter, and outreach messages you generate. This data is yours and stored securely in your account.

Usage data — pages visited, features used, and time spent in the application. Used to improve the product. Not sold to third parties.

What we do NOT collect — your LinkedIn password or credentials. Your contacts' personal information beyond what you voluntarily import. Any data from your employer's systems.

3. Contact Imports — Your Contacts Stay Yours

When you save contacts to your dashboard account (Phase 2), those contacts are:

• Stored in your account only — no other FreightSignal user can see them
• Encrypted at rest using AES-256 encryption
• Protected by row-level security — database-enforced isolation, not just application-level
• Never shared with other users, advertisers, data brokers, or third parties
• Never used to train AI models or enrich other users' data

4. How We Use Your Data

We use your data solely to provide the FreightSignal service:

• Delivering your daily signal digest to your email address
• Personalizing signal scoring based on your territory and freight specialty settings
• Generating outreach messages referenced to your signals and contacts
• Processing your subscription payments via Stripe
• Sending account security notifications (login alerts, password resets)
• Improving the product based on aggregate, anonymized usage patterns

We do not sell your data, use it for advertising, share it with freight carriers or forwarders, or use it for any purpose other than providing the service you paid for.

5. Data Security

We take security seriously and implement the following protections:

• Encryption at rest: All account and pipeline data encrypted using AES-256 via Supabase
• Encryption in transit: All data transmitted over HTTPS/TLS
• Row-level security: Database-enforced isolation — your data is inaccessible to other users even in the event of an application bug
• Single session limit: Only one active login per account at a time — a second login invalidates the first
• Login notifications: Every new login to your account triggers an email alert showing location and time
• No plaintext credentials: Passwords are hashed and never stored in readable form

FreightSignal's infrastructure runs on Supabase, which maintains SOC 2 Type 2 certification. FreightSignal itself is an early-stage company working toward its own SOC 2 certification.

6. Data Retention & Deletion

You own your data and can delete it at any time:

• Account deletion: Request deletion from your account settings or by emailing jeff@freightsignal.net. All your data — contacts, pipeline, signals, settings — is permanently purged within 30 days.
• Data export: Before deleting, you can export all your data as CSV from your account settings.
• Signal data: Daily signals are retained for 12 months then automatically purged.
• Payment records: Stripe retains payment history per their legal requirements. FreightSignal retains subscription status records for tax purposes.

7. Third-Party Services

FreightSignal uses the following third-party services to operate:

• Supabase — database, authentication, and backend infrastructure. SOC 2 Type 2 certified. supabase.com/privacy
• Stripe — payment processing. PCI DSS Level 1 certified. stripe.com/privacy
• Resend — transactional email (login alerts, digest delivery). resend.com/privacy
• Anthropic Claude API — AI signal scoring and outreach generation. Your contact data is never sent to Claude — only signal text and your territory settings are processed. anthropic.com/privacy
• Netlify — website hosting. netlify.com/privacy

8. International Users

FreightSignal serves freight sales professionals globally including users in Mexico, the Caribbean, Central America, and Asia. If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws, you have additional rights including the right to access, correct, port, and erase your personal data. Contact us at jeff@freightsignal.net to exercise these rights.

9. LinkedIn Data

FreightSignal does not store your LinkedIn password or credentials. When you export your LinkedIn Connections CSV and import it into the Territory Map, that file is processed locally in your browser only. If you use LinkedIn automation features (Phase 2), your LinkedIn session is used only for actions you explicitly initiate — we do not scrape your LinkedIn data without your knowledge or send messages without your review.

10. Cookies

FreightSignal uses only essential cookies required for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Your session cookie is HTTP-only and secure.

11. Changes to This Policy

If we make material changes to this Privacy Policy we will notify you by email at least 14 days before the changes take effect. Continued use of FreightSignal after that date constitutes acceptance of the updated policy.

12. Contact Us