1. Scope & Controller
This Privacy Policy describes how IronFreight (“we,” “us,” or “our”) collects, uses, and discloses information in connection with the IronFreight platform. We process high-sensitivity data necessary for freight verification and fraud prevention. By using the Platform, you agree to the practices described below.
2. Data We Collect
We collect:
- Precise Geolocation (GPS): Real-time and historical location data from devices used by Carriers and Drivers during active loads, including geofence entry/exit events. GPS data is stored in encrypted form as described in Section 4.
- Biometric Face-Hashes: We do not store raw photographs. We collect and store only biometric templates or hashes derived from face-scanning for identity verification. Raw images are processed and discarded after hash generation. Biometric data is secured as described in Section 3.
- CDL / Driver License Data: Information from government-issued driver licenses (e.g., name, license number, state, expiration) when provided for verification and vetting.
- ELD Telematics: Electronic logging device and related telematics data when integrated for load lifecycle and hours-of-service correlation.
3. Biometric Data Security
Biometric identifiers are processed using industry-standard hashing and are stored in isolated, access-controlled systems. We do not retain raw facial images. Biometric data is used solely for identity verification and fraud prevention in connection with the Platform. Access to biometric data is restricted to authorized personnel and systems necessary for verification and dispute resolution. We implement technical and organizational measures consistent with applicable biometric privacy requirements.
4. Encrypted GPS Logs
GPS and location data are transmitted and stored using encryption. Our encrypted GPS logs support chain of custody verification, geofence validation, and audit trails. Access to decrypted location data is limited to the Broker and Shipper bound to the active Load ID and to IronFreight operations required for support, compliance, or dispute resolution. We do not use location data for marketing or unrelated analytics.
5. IronVault & Secure Document Upload
Images uploaded to the IronVault are encrypted at rest. CDL and Biometric images are never stored on the user's local device gallery; they are streamed directly to our secure servers.
6. Chain of Custody Data Retention
Biometric hashes associated with a specific load are purged ninety (90) days after delivery of that load, unless a dispute or investigation is filed, in which case we may retain the data as necessary for the resolution of the dispute or as required by law. Encrypted GPS logs and other chain-of-custody records may be retained for a longer period as needed for compliance, audit, and legal hold. Retention schedules are designed to support freight security and regulatory requirements while minimizing data retention where no longer necessary.
7. Purpose of Processing & Third-Party Disclosure
Data is processed solely for Chain of Custody Verification and Fraud Prevention. Data is only shared with the specific Broker and Shipper bound to the active Load ID to ensure freight security. We do not sell your data. We may share data with service providers who process it on our behalf under strict contractual obligations, and with law enforcement or regulators when required by law or to protect the safety and integrity of the Platform.
8. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data. To exercise these rights or to ask questions about this policy, contact us via the Support Center in the footer. Biometric data may be subject to additional legal requirements; we will respond in accordance with applicable law.
9. Updates
We may update this Privacy Policy from time to time; the “Last updated” date reflects the most recent version. Continued use of the Platform after changes constitutes acceptance of the updated policy.