This Privacy Policy explains how FreightCMD ("we", "us") collects, uses and protects your personal information when you use our freight dispatch platform. We comply with the Sri Lanka Personal Data Protection Act No. 9 of 2022 (PDPA) where applicable.
1. Information we collect
- Account details: name, email, phone, company.
- Operational data: pickups, drops, cargo, vehicles, drivers, invoices and payments.
- Location data from drivers' devices while a trip is in progress.
- Device and usage data: IP address, browser, timestamps.
2. How we use information
- To operate the dispatch platform and provide live tracking.
- To generate quotes, invoices and reports.
- To send service notifications (SMS, email) related to your trips.
- To improve security, prevent fraud and comply with legal obligations.
3. Sharing
We share data only with: (a) authenticated users in your organisation, per their assigned roles; (b) service providers (hosting, SMS, email, mapping) under contract; (c) authorities where required by law. We never sell personal data.
4. Driver location data
Driver GPS is captured only while a trip is active (status assigned, en route, at pickup, in transit). It is used for dispatch visibility and customer ETA. Historical points are retained for up to 186 days and then automatically purged.
5. Retention
Operational records (requests, invoices) are retained for the period required by tax and accounting regulations. Account data is retained while your account is active.
6. Your rights
Subject to applicable law, you may request access, correction, deletion or export of your personal data, and may withdraw consent for non-essential processing. Contact us at the address on the Contact page.
7. Security
We use encryption in transit, role-based access controls and row-level security on all sensitive tables. No system is perfectly secure — please use a strong password and keep it private.
8. Changes
We may update this policy. We will post the updated date at the top of the page and, for material changes, notify you by email.