Privacy Policy
Last updated: April 2026
1. Information We Collect
We collect information you provide directly, including:
- Account Information: Name, email address, phone number, company name, and role when you create an account
- Profile Information: Business details, facility information, and service capabilities
- Transaction Data: Listings, requests, offers, bids, and messages exchanged through the Platform
- Communications: Feedback, support requests, and survey responses
2. Information Collected Automatically
When you use our Platform, we automatically collect:
- Device and browser information
- IP address and approximate location
- Pages visited, features used, and search queries
- Referring URLs and navigation patterns
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data based on the following legal grounds:
- Consent: When you opt in to cookies, marketing communications, or submit a form with the consent checkbox. You may withdraw consent at any time.
- Contractual Necessity: To provide our Platform services, process transactions, and manage your account.
- Legitimate Interest: To improve our services, ensure security, prevent fraud, and communicate about your account. We balance these interests against your rights.
- Legal Obligation: To comply with applicable laws, regulations, and legal processes.
4. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Platform
- Match shippers with service providers
- Process transactions and send related communications
- Send notifications about listings, offers, and marketplace activity
- Provide customer support
- Analyze usage patterns to improve our services
- Comply with legal obligations
5. Information Sharing
We may share your information with:
- Other Users: Business information you make public on listings, profiles, and marketplace activity
- Service Providers: Third parties that help us operate the Platform, including:
- Clerk (authentication and account management)
- Supabase (database hosting)
- Sentry (error monitoring — no personally identifiable information is sent)
- Google Analytics (website analytics — only with your cookie consent)
- SendGrid / Resend (email delivery)
- Legal Requirements: When required by law, regulation, or legal process
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell your personal information to third parties.
6. International Data Transfers
Commtrex is based in the United States. If you access our Platform from outside the United States, your personal data will be transferred to and processed in the United States, where data protection laws may differ from your jurisdiction. By using our Platform, you consent to this transfer. We use service providers that maintain appropriate safeguards for international data transfers, including Standard Contractual Clauses where applicable.
7. Data Security
We implement reasonable security measures to protect your information, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission or storage is 100% secure.
8. Data Retention
We retain your personal data for the following periods:
- Account data: For as long as your account is active, plus 30 days after deletion to allow recovery.
- Transaction records: 7 years, as required for tax and legal compliance.
- Contact form submissions: 2 years from the date of submission.
- Analytics data: 26 months (Google Analytics default).
- Error logs: 90 days (Sentry).
We may retain certain information longer as required by law or for legitimate business purposes.
9. Your Rights
Depending on your jurisdiction (including under GDPR, UK GDPR, and CCPA), you may have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Correct inaccurate or incomplete information
- Erasure: Request deletion of your account and associated data
- Restriction: Restrict certain processing of your data
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw previously given consent at any time
To exercise any of these rights, contact us at customerservice@commtrex.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.
10. Cookies and Tracking
We use cookies and similar technologies to enhance your experience and analyze usage. Non-essential cookies (analytics, marketing) are only set after you provide consent via our cookie banner. Essential cookies required for the Platform to function (authentication, security) are always active.
You can change your cookie preferences at any time by clearing your browser's local storage and revisiting the site. You can also manage cookies through your browser settings.
11. Third-Party Services
Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
12. Children's Privacy
The Platform is not intended for users under 18 years of age. We do not knowingly collect information from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform with a revised effective date.
14. Contact Us
For questions about this Privacy Policy or to exercise your data rights, contact us at:
Commtrex, LLC
2245 Texas Drive, #300
Sugar Land, TX 77479
customerservice@commtrex.com