Legal
Privacy Policy
Last updated June 11, 2026 · Pending formal legal review. This policy reflects how the product actually works today.
1. Data we collect
We collect only what we need to operate the marketplace:
- Account data: name, work email, password (stored hashed), company name, and your role (shipper or provider).
- Profile and sourcing data: what you ship or what services you provide: product categories, volumes, regions, certifications, and facility details you choose to list.
- Messages and quotes: conversations and quote requests you exchange with other parties on the platform, so we can deliver them and keep a record for both sides.
- Usage data: pages visited and features used, collected via privacy-respecting analytics (see Section 4).
- Billing data: subscription plan and invoice history. Card details are handled by our payment processor and never touch our servers.
2. How we use your data
We use your data to run the service: matching you with providers or buyers, delivering messages and quote requests, processing subscriptions, and improving the product. Conversations with Eleanor, our AI assistant, are processed to generate matches and drafts on your behalf; they are not used to train third-party foundation models.
We do not sell your personal data. We do not share your sourcing details with anyone except the providers or buyers you choose to contact.
3. Your rights: export and deletion
You can exercise both rights directly from your account settings, no support ticket required:
- Export: request a machine-readable copy of your account data, profile, and message history from Settings. We fulfill export requests and notify you when your archive is ready.
- Deletion: request permanent deletion of your account from Settings. We delete your account data and redact your personal information from message threads, so the other party's record remains coherent without exposing your identity or contact details.
4. Regional privacy rights (CCPA, GDPR, UK GDPR)
Depending on where you live, you may have additional rights under applicable privacy laws. We respect these rights regardless of where the user is located and provide the same export and deletion tooling from Settings to everyone.
- Right to know: what personal data we hold about you. Use the Export tool in Settings to receive a complete machine-readable copy.
- Right to delete: request that we delete your personal data. Use the Delete Account tool in Settings; deletion is processed as described in Sections 3 and 6.
- Right to correct: request correction of inaccurate personal data. Edit your profile fields directly, or email the contact below if a field is not editable.
- Right to opt out of sale or sharing: we do not sell your personal data and do not share it with third parties for their own marketing purposes, so there is nothing to opt out of. This applies to all users globally.
- Right to non-discrimination: exercising these rights will not result in degraded service or different pricing.
- For users in the UK, EU, EEA, or Switzerland: we process your personal data on the legal bases of contract performance (to operate the marketplace and deliver services you request), legitimate interests (improving the product and security), and consent (where required, such as marketing emails). You can withdraw consent or object to processing by emailing the contact below.
6. No ad tracking
We do not run advertising trackers, third-party ad pixels, or cross-site tracking of any kind. We use privacy-respecting analytics only: aggregate, cookie-light measurement that tells us which pages are used, not who you are across the web.
7. Messaging data on account deletion
Marketplace messages involve two parties, so we cannot silently erase a conversation the other party relies on. When you delete your account, we redact your messages: your name, contact details, and identifying information are removed from threads, while the other party retains a redacted record of the conversation for their own business purposes.
8. Security and retention
Data is encrypted in transit and at rest. Access to production data is restricted and logged. We retain account data while your account is active and for a limited period afterward as required for legal, billing, and dispute-resolution purposes, after which it is deleted or anonymized.
9. Contact
Questions about this policy or your data, or wish to exercise any of the rights described above? Email chris@3plconnect.ai. 3PL Connect is a Vortex Ventures product.