Privacy Policy

DrayageRX operates a drayage marketplace connecting shippers and motor carriers. For questions about this policy or about your data, contact hello@drayagerx.com.

Information you give us.

• Account details: business name, contact name, email address, phone number, role (shipper or carrier), and password (stored only as a cryptographic hash — we never see or store it in readable form).
• Carrier authority: USDOT number, and MC number where you provide one.
• Your postings: container moves, bids and rates, availability postings, terminals, equipment and any notes you write.
• Acceptance records: the date, time and version of the Terms of Service you accepted.
• Anything you send us by email or in support requests.

Information we collect automatically. Standard server and security logs — IP address, browser type, pages requested, timestamps — and the session cookie that keeps you signed in. We use cookies that are necessary for authentication and security. We do not use advertising cookies or third-party tracking pixels on the application.

Information from other sources. Public FMCSA safety and authority records, used to review carrier accounts. For invitation emails, business contact details compiled from public directories and industry sources.

• To create and run your account, authenticate you, and route you to the right part of the platform.
• To operate the marketplace — showing moves to eligible carriers, delivering bids to shippers, and releasing shipper contact details to the carrier that wins a move.
• To review and approve carrier accounts, including checking public authority and safety data.
• To send transactional email: welcome messages, bid and award notifications, and account notices.
• To send invitations and occasional platform updates, which you can opt out of at any time.
• To secure the platform — detecting abuse, scraping, fraud and unauthorized access.
• To understand and improve how the platform is used, using aggregated or de-identified data.
• To comply with law and to establish, exercise or defend legal claims.

The platform is built so that identity is disclosed when a deal is done, not before:

• Before award, carriers see a move's city and ZIP area, container details and timing — not the shipper's identity or exact address.
• On award, the shipper's identity and full address are released to the winning carrier so the move can be performed.
• Shippers reviewing bids see the bidding carrier's business name and rating.
• Where a carrier posts open capacity, shippers browsing availability see the carrier's business name, USDOT and MC numbers, terminals, equipment and dates — not the carrier's email address or phone number.

We do not sell your personal information, and we do not share it for advertising. We share it only with:

• Other users, as described in the section above.
• Service providers who run the platform on our behalf — hosting and database (Supabase), application hosting (Vercel), and transactional email delivery (Resend). They may process your information only on our instructions.
• Professional advisers, or a successor entity in connection with a merger, acquisition or sale of assets.
• Law enforcement or others where we are legally required to, or where we reasonably believe it necessary to protect rights, safety or the integrity of the platform.

Transactional email — account, bid and award notices — is part of the service and cannot be turned off while your account is open.

Invitation and marketing email carries an unsubscribe link in every message, and one click is enough. We honor unsubscribes on a permanent never-send list, and we honor bounces and complaints the same way. If you were invited and never signed up, unsubscribing removes you from all future invitations.

Account and profile information is kept while your account is open. After closure we retain what we need for legal, tax, security and dispute purposes, and delete or de-identify the rest.

Records of moves, bids and awards are retained as business records, because they evidence transactions between users. Unsubscribe and suppression records are kept indefinitely and deliberately — they are the only way to guarantee we never email you again.

Data is encrypted in transit. Passwords are stored only as cryptographic hashes. Access to production data is restricted, and the database enforces row-level access rules so users can reach only the records they are entitled to. No system is perfectly secure, and we cannot guarantee absolute security — if we become aware of a breach affecting your information we will notify you as required by law.

You can review and correct most of your information from within your account. For anything else — a copy of your data, correction, deletion, or a question about how it is used — email hello@drayagerx.com and we will respond within a reasonable period.

Depending on where you live you may have additional rights, including to access, correct, delete or port your information, and to be free from discrimination for exercising them. We do not sell or share personal information as those terms are defined under US state privacy laws.

Children. The platform is for business use and is not directed to anyone under 18. We do not knowingly collect their information.

Where data is processed. We operate in the United States and process data there.

Other sites. The platform links to third-party sites, such as FMCSA records. Their privacy practices are their own.

Changes. If we change this policy materially we will publish the change here with a new effective date and, where appropriate, notify you in the application or by email.

Governing law. This policy is governed by the laws of the State of New Jersey.