Privacy Statement
This Privacy Statement explains how CargoLattice, doing business as CargoLattice ("CargoLattice," "we," "us," or "our"), collects, uses, discloses, and retains personal information through the CargoLattice website, platform, mobile-accessible features, and related software services (the "Services"). It also explains the choices and rights available to individuals whose information we process.
The Services provide business software for shippers, carriers, participating brokers, warehouse operators, drivers, and their authorized representatives. Personal information about business contacts, drivers, shipment contacts, and delivery recipients may be covered by this Statement even if those individuals do not have a CargoLattice account.
1. CargoLattice’s role
CargoLattice provides software tools that allow participating organizations to exchange information, evaluate opportunities, negotiate and accept offers, select carriers, manage shipments, share tracking information, maintain documents, and manage their own business records. The participating organizations make their own transportation and commercial decisions.
The carrier or participating broker responsible for a transportation transaction determines transportation payment terms, invoices the shipper, receives freight payments, and bears the associated credit and settlement responsibilities. CargoLattice charges separately for its software subscriptions and authorized software services. CargoLattice does not extend freight credit, advance carrier payments, or guarantee participants’ transportation debts.
Participant invoices, receivables, payment terms, credit arrangements, and participant-funded Quick Pay records may be stored or processed using the Services. Providing those tools does not make the recorded freight charges CargoLattice’s software revenue or transfer the participant’s financial obligations to CargoLattice.
For its own account administration, software billing, security, and business communications, CargoLattice determines how personal information is used for those purposes. When an organization supplies personal information for its own operations, CargoLattice may process that information on the organization’s behalf under the applicable agreement. That organization’s privacy practices also apply to its collection and use of the information. The applicable processing role depends on the activity, contract, and law.
2. Information we collect
The information involved depends on your role, the features used, and the information you or your organization provide. Information about a company is personal information when it identifies or can reasonably be linked to an individual.
| Category | Examples and purposes |
|---|---|
| Account and contact information | Name, business email, telephone number, business address, account identifiers, authentication records, organization affiliation, and assigned permissions. Used to establish accounts, authenticate users, provide support, and communicate. |
| Business and verification records | Company profiles, operating authority identifiers, insurance information, driver or representative details, and documents supplied for account or business verification. Used to administer participation and maintain business records. |
| Shipment and operational information | Shipment and vehicle details, VINs where relevant, pickup and delivery addresses, contact names, availability, offers, accepted rates, assignments, schedules, status updates, and warehouse requirements. Used to operate participant-controlled logistics workflows. |
| Documents and communications | Messages, support requests, bills of lading, inspections, photographs, proof of delivery, electronic signature images, and related timestamps. Used to document communications, condition, performance, and delivery. |
| Location information | Shipment addresses and, when location features are used, device coordinates, accuracy, speed, heading, and timestamps. Used for shipment visibility, operational updates, and inspection records. |
| CargoLattice software billing | Billing contacts, subscription and plan records, software invoices, configured taxes, transaction references, payment status, receipts, adjustments, credit notes, and refund records. Used to bill and reconcile CargoLattice’s own software services. |
| Participant financial records | Transportation or warehouse invoices, receivables, agreed payment terms, payment records, participant credit arrangements, and participant-funded payout records. Processed for the responsible organization’s business purposes. |
| Technical and security information | IP addresses, session identifiers, browser or device information available to the Services, access times, activity logs, and error or audit records. Used to maintain sessions, secure the Services, investigate problems, and document system activity. |
| Operational assessments | Matching results, capability comparisons, availability indicators, and performance information derived from operational records. Used to help participants assess opportunities; participants control offer acceptance and carrier selection. |
Payment processors collect payment credentials through their payment interfaces. CargoLattice’s software billing records include the transaction information needed to associate a payment with the correct software invoice and organization. Do not place complete payment-card details, passwords, or unrelated sensitive information in shipment notes, messages, or uploaded documents.
Precise location, account access information, and certain document contents can be sensitive personal information. We use such information for the relevant service, authentication, security, recordkeeping, or other specifically disclosed purpose, subject to applicable requirements.
3. Sources of information
We receive information directly from you; from your employer or organization; from other participants involved in a business relationship or shipment; from devices and browsers interacting with the Services; and from service providers, payment processors, and integrations used for the relevant feature.
Business profiles, verification information, and business contact or facility details may also come from public business directories, public operating-authority records, or other identified business sources. An organization that submits another person’s information is responsible for providing required notices and having authority to provide it. We may link information from these sources to the relevant account, organization, shipment, or transaction.
4. How we use information
- Provide and administer accounts, organization permissions, software subscriptions, and requested features.
- Support participant-controlled matching, offers, negotiations, assignments, communications, tracking, inspections, documentation, and warehouse workflows.
- Maintain participant business records for the appropriate organization and keep them distinct from CargoLattice’s software billing records.
- Issue software invoices, collect software payments, record receipts and adjustments, reconcile transactions, and manage unpaid software balances.
- Provide customer support, investigate technical issues, improve functionality, and evaluate use and performance of the Services.
- Protect accounts and systems, verify relevant business information, investigate misuse or fraud, and maintain audit trails.
- Send service communications and, where permitted and subject to your choices, information about CargoLattice’s software services.
- Meet legal obligations, maintain required records, resolve disputes, and exercise or defend legal rights.
Operational matching and scoring assist users in evaluating opportunities. They do not substitute for participants’ acceptance of transportation offers, and CargoLattice does not use them to underwrite freight credit on its own behalf.
6. Location, photos, and documents
Shipment tracking can collect precise device location after the relevant tracking notice and device permission. The web tracking features send location while the feature is active and the browser can operate. Location updates may include speed, heading, accuracy, and a timestamp. Users authorized for the shipment may use these records to view shipment progress and estimated arrival information.
Inspection workflows may request location when an inspection is recorded. Camera or file-upload features allow you to submit operational photographs and documents. Delivery workflows can record a recipient’s name and an electronic signature image.
You can change browser or device location and camera permissions. Disabling access may prevent the affected feature from working. Closing a web tracking page or withdrawing device permission stops that page from obtaining new device locations; it does not delete information already submitted. Tracking sessions also stop accepting updates when closed or expired.
Photographs and signatures are operational records. This Statement does not authorize creating facial templates or other biometric identifiers from them. Any introduction of biometric identity verification would require an accurate feature-specific notice and any legally required consent and retention arrangements.
8. Communications
We may send account, security, support, subscription, software billing, and service messages. Operational messages may also be generated by an organization using the Services. Marketing messages are subject to applicable consent requirements and your communication choices; use of the Services alone is not blanket consent to marketing calls or texts.
You can use the unsubscribe instructions in marketing emails or contact us to change marketing preferences. For any enabled SMS program, follow the opt-out instructions provided in that program. Necessary service messages may continue while we provide your account or respond to a request. An organization communicating with you through the Services is responsible for its own messaging permissions and practices.
9. Retention and security
We retain personal information for as long as reasonably necessary for the purposes described here, subject to applicable law and contractual requirements. Relevant factors include the type of record, the duration of the account or shipment relationship, the need to substantiate transactions, applicable recordkeeping periods, dispute or legal-hold requirements, and security or fraud-prevention needs.
Account closure does not automatically erase invoices, payment records, shipment documents, audit trails, or information needed to address outstanding obligations. Historical platform-credit or mixed financial records may be retained for restricted historical review and reconciliation. Retaining those records does not reclassify historical freight charges as software charges, forgive debts, or transfer obligations. Retention exceptions do not authorize indefinite retention without a continuing basis.
When information is no longer needed, it is deleted or de-identified as appropriate, subject to applicable requirements and backup-management processes. For information processed on an organization’s behalf, retention and deletion also depend on that organization’s instructions and applicable agreement.
We use administrative and technical safeguards intended to protect personal information against unauthorized access, use, or disclosure. No system or transmission method can be guaranteed completely secure. Protect your credentials and shared links, and report suspected unauthorized access promptly.
10. Your choices and rights
You may review or update information through available account settings, contact your organization’s administrator, or contact us using Section 15. You may decline optional information or device permissions, although some features require particular information to work.
Depending on applicable law, you may have rights to access, correct, delete, or obtain a portable copy of personal information; object to or restrict certain processing; withdraw consent; opt out of certain uses or disclosures; or appeal a decision on a privacy request. These rights are subject to applicable conditions and exceptions. You may also have the right to complain to the relevant privacy regulator.
Submit requests through the contact methods in Section 15 and describe the information or account involved. We may request proportionate information to verify identity or an authorized representative’s authority where required. Do not send unnecessary sensitive documents. You do not need to create a new account to submit a request. We respond within the period required by applicable law and explain any applicable limitation or refusal.
If your request concerns information controlled by a participating organization, identify that organization. We may refer the request to it and assist as required by our agreement and applicable law. We remain responsible for handling requests concerning processing for which CargoLattice is responsible.
11. California privacy information
This section applies to California residents to the extent the California Consumer Privacy Act, as amended ("CCPA"), applies to the relevant processing. Business use of the Services does not by itself remove an individual’s applicable privacy rights.
Where applicable, you may request information about the personal information collected about you, its sources, purposes, and disclosures; request deletion, subject to exceptions; correct inaccurate information; and receive applicable information in a portable format. You may opt out of sale or sharing for cross-context behavioral advertising and limit uses of sensitive personal information where those rights apply. We will not unlawfully discriminate or retaliate against you for exercising your rights.
Use the methods in Section 15 for requests to know, correct, or delete. An authorized agent may submit a request subject to appropriate verification. For these requests, we generally respond within 45 days; where permitted, we may extend the period and explain the reason. Different rules apply to opt-out requests, including recognized opt-out preference signals.
[COMPLETE BEFORE PUBLICATION: Confirm the categories actually collected and disclosed during the preceding 12 months, using the applicable California categories. For each category, identify sources, purposes, recipient categories, and retention period or criteria. Section 2 describes supported workflows, not a verified 12-month collection history. Complete the sale/sharing and sensitive-information disclosures and applicable controls in Section 7, including practices concerning individuals under 16 where required.]
12. International processing
[COMPLETE BEFORE PUBLICATION: Identify the countries where CargoLattice and its providers store or access personal information. Describe any required cross-border transfer safeguards and how individuals can obtain information about them. Add jurisdiction-specific notices and processing information if the Services are offered in locations requiring them.]
Other participants or services you choose to work with may operate in different countries. Their privacy notices explain their own processing. This Statement does not treat use of the Services as a waiver of applicable cross-border data protections.
13. Children
The Services are designed for business use by adults and are not directed to children under 18. Individuals under 18 should not create an account or submit personal information through the Services. If you believe a child has provided personal information to CargoLattice, contact us so we can assess the circumstances and take appropriate action.
14. Changes and other notices
We may update this Statement to reflect changes to the Services, our practices, or applicable requirements. The revised version will show its effective date. We will provide additional notice or obtain consent where required for a material change. Posting a revised Statement does not replace a legally required consent process.
Third-party websites and services linked from CargoLattice have their own privacy notices. Our Terms of Use and any applicable organization agreement address other aspects of the Services. Nothing in this Statement limits privacy rights that cannot lawfully be waived.
15. Contact us
For privacy questions or to exercise applicable rights, contact:
CargoLattice — Privacy Contact
Legal entity: [LEGAL ENTITY NAME]
Privacy email: [MONITORED PRIVACY EMAIL]
Postal address: [POSTAL ADDRESS]
Website or request form: [WORKING PRIVACY REQUEST URL OR DESIGNATED WEBSITE METHOD]
Telephone: [DESIGNATED NUMBER, INCLUDING TOLL-FREE METHOD IF REQUIRED]
[COMPLETE BEFORE PUBLICATION: Confirm the request methods required for the business’s actual operations and applicable jurisdictions. Remove inapplicable contact fields only after that review.]