Privacy Policy

1. Introduction

DrayVault (“we,” “us,” or “our”) respects your privacy and is committed to protecting your information. This Privacy Policy explains how we collect, use, and safeguard information when you use our platform at https://drayvault.com (“Platform”).

2. Information We Collect

We collect the following types of information:

a. Account Information

• Name
• Email address
• Company name
• Role (e.g., carrier, shipper, admin)
• Login credentials (hashed)

b. Business & Operational Data

• Bid submissions
• Lane pricing and rate data
• Event participation data
• Award decisions and responses
• Uploaded documents or attachments

c. Technical Information

• IP address
• Browser type and device information
• Log data (access times, pages viewed)
• Authentication/session data

d. Communications

• Emails sent to or from DrayVault
• Support inquiries

3. How We Use Information

We use collected information to:

• Provide and operate the Platform
• Authenticate users and secure accounts
• Process bids, events, and awards
• Improve platform performance and features
• Communicate with users (including transactional emails)
• Detect, prevent, and respond to fraud or abuse
• Comply with legal obligations

4. Data Sharing

We do not sell your data.

We may share information only in the following cases:

• With service providers (e.g., hosting, email delivery) strictly to operate the Platform
• When required by law or legal process
• To protect rights, security, or property of DrayVault or users
• In connection with a merger, acquisition, or sale of assets

5. Data Ownership

• You retain ownership of your organization's data
• DrayVault processes your data solely to provide the service
• We may use aggregated, anonymized, and de-identified data to improve the platform
• We do not expose your company-specific pricing or bid data to other users

6. Data Security

We implement reasonable administrative, technical, and organizational safeguards, including:

• Authentication and role-based access controls
• Encryption in transit (HTTPS)
• Secure token-based authentication
• Server-side validation and access controls
• Protection against common vulnerabilities (XSS, IDOR, injection)

However, no system is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain data:

• As long as your account is active
• As needed to provide services
• As required for legal, tax, or regulatory purposes

You may request deletion of your account and associated data, subject to legal obligations.

8. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing

To make a request, contact us at: [email protected]

9. Cookies & Tracking

We use cookies and similar technologies to:

• Maintain user sessions
• Improve usability and performance

We do not use third-party advertising trackers.

10. International Users

If you access the Platform from outside the United States, you understand that your information may be transferred to and processed in the United States.

11. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or in-platform notice. Continued use of the Platform constitutes acceptance of the updated policy.

13. Contact

For questions or requests:
📧 [email protected]
🌐 https://drayvault.com