Privacy Policy

For information a Customer or its Authorized Users submit to the Services—such as tracking numbers, shipment records, notes, contacts, and notification settings (“Customer Data”)—the Customer is the business that decides why that data is processed. We process Customer Data to provide the Services the Customer has requested.

For information we collect as a business in our own right—such as an administrator’s work email when creating an account, waitlist sign-ups, sales inquiries, and website logs—Netnodi determines how that information is used, as described in this policy.

If you receive a shipment alert or digest, a Customer added your business email to its notification settings. Questions about why you were included should go to that company first. You may also contact us as described below.

Account and organization

• Work email address, password, and organization name
• Authorized Users the Customer invites, and their roles in the organization
• Waitlist, contact, support, and feedback submissions (name, work email, company, and message, as provided)

Customer Data

Customers store commercial freight and operations data in the course of their business, which may include:

• Tracking numbers, carriers, shipment references, and notes
• Origin, destination, current location, estimated delivery dates, status, schedule, and carrier scan events
• Business contacts used for alerts (name, work email, and which shipment events that person should receive)
• Organization settings such as saved filters, digest frequency, and notification preferences

We do not currently collect payment card numbers. If we add company billing, card data will be handled by a payment processor and we will update this policy. We do not collect government identity documents as part of ordinary use of the Services.

Automatically collected

• Authentication cookies needed to keep a user signed in
• Basic request logs such as IP address, browser type, device type, timestamps, and pages requested, used to operate and secure the Services
• Browser-stored interface preferences (for example table columns, page size, and active filters)

We do not use third-party advertising cookies or build consumer advertising profiles.

To provide live multi-carrier tracking, we send the tracking number and, where provided, the carrier identifier to our tracking provider, EasyPost (Simpler Postage, Inc.). EasyPost obtains status, scan events, locations, and estimated delivery information from the applicable carrier (for example UPS, FedEx, USPS, or DHL) and returns that information to us so we can display it in the Customer’s workspace and send the alerts the Customer has configured.

That means shipment identifiers and related tracking data are processed by EasyPost and by the carrier that issued the tracking number. Those parties operate independently of Netnodi. Their collection and use of information is governed by their own terms and privacy policies, including EasyPost’s materials at legal.easypost.com and easypost.com/privacy.

EasyPost may process data in the United States. Carriers may process tracking data in the countries where they operate. EasyPost may also use tracking data to operate, secure, and improve its services, and may disclose de-identified or aggregated information, as described in its own policy. We do not control those practices.

Customers must only submit tracking numbers they are authorized to monitor for a legitimate business purpose. We do not offer the Services for personal parcel tracking or consumer retail accounts.

We use information to:

• Provide tracking, shared visibility, contacts, filters, and organization administration
• Create and update trackers through EasyPost and display carrier status, location, and ETA information
• Send operational shipment alerts and digest emails to addresses the Customer configures
• Authenticate users and keep Customer workspaces secure
• Respond to inquiries, onboarding, support, and product feedback
• Maintain, measure, and improve the Services, prevent abuse, and comply with law

We may send product or waitlist updates to a work email given to us for that purpose. Recipients can ask us to stop those messages. Sign-in mail, invites, and shipment notifications the Customer set up are part of delivering the Services to that business and are not marketing.

Customers are responsible for adding only business contacts who should receive operational updates, and for any notices those contacts require under the Customer’s own policies or applicable law (including anti-spam rules).

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Customer Data is available to Authorized Users of that Customer’s organization, including shared settings such as saved shipment filters.

We use service providers to host and operate the Services. Those providers process information only as needed to perform their functions, and currently include:

• Vercel for application hosting
• Supabase for authentication and database hosting
• EasyPost to create and update carrier trackers, as described above
• Resend to send operational and transactional email

We may also disclose information if required by law or legal process; to protect Netnodi, a Customer, or others; to professional advisors under confidentiality; or in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

The Services are operated from the United States. Information, including Customer Data and tracking data processed by EasyPost and carriers, may be stored or accessed in the United States and other countries where we or our providers operate. Those countries may have different data-protection laws than the country where you or the Customer is located.

We keep a Customer’s account, shipment, contact, and notification data for as long as the organization uses the Services, and afterward as needed for backups, security, disputes, and legal or accounting requirements.

Waitlist and inquiry records are kept long enough to follow up and operate the waitlist. A business can ask us to delete those records.

If a Customer closes its account, or an individual asks us to delete personal information we hold as a business, we will do so except where we must retain a record (for example the request itself, or information required for tax, legal, or security purposes). Residual copies may remain in backups for a limited time until those backups rotate.

Tracking records held by EasyPost or a carrier follow those parties’ retention practices, which we do not control.

We use commercially reasonable administrative, technical, and organizational measures to protect information, including encrypted connections (HTTPS), access-controlled databases, and hashed passwords handled by our authentication provider. No method of transmission or storage is completely secure. Customers should use strong unique passwords and admit only people who should see that company’s freight data.

We use essential cookies to keep Authorized Users signed in. We also store certain interface preferences in the browser. These are required for the Services to function as designed. We do not currently respond to browser “Do Not Track” signals.

Organization administrators can manage their company’s workspace: users, shipments, contacts, and notification settings. Employees and business contacts of a Customer should generally start with that company for access, correction, or deletion of Customer Data.

Where we hold information as a business (for example your work email on the waitlist, or an administrator account with us), you may ask us to provide a copy, correct it, delete it subject to the limits above, or stop optional product or waitlist email.

Depending on where you live, you may have additional rights under applicable law, such as the right to know categories of personal information collected, to correct inaccuracies, to delete, or to appeal a decision. We will not discriminate against you for exercising those rights. We do not sell or share personal information as those terms are used in US state privacy laws, and we do not use or disclose sensitive personal information for purposes that would require a right-to-limit notice.

Use our contact page and mention “Privacy”. We may need to verify that the request is authorized by the individual or by the Customer. If you received an alert but do not have a Netnodi login, include the email that received it. Authorized agents may submit requests where the law allows; we may require proof of authorization.

We may update this policy as the product or the law changes. The “Last updated” date at the top will change. For material changes, we will provide a more prominent notice to Customer contacts (for example an in-product message or email) when required. Continued use of the Services after an update means the Customer acknowledges the revised policy.

Netnodi
netnodi.com

Privacy questions and requests: Contact us and include “Privacy” in your message. See also our Terms of Service.