FreightHub Privacy Policy
Last updated: 2026-05-01
The short version: FreightHub is a tool for drayage drivers and dispatchers to track ocean containers across LA/LB terminals. We collect the minimum necessary to provide the service, store credentials encrypted, and don't sell your data. Your container searches and the device-id we use to remember your tracked list are kept on our infrastructure only as long as needed to operate the service.
1. Who we are
FreightHub is operated by BA Fast Freight ("FreightHub", "we", "us"), a logistics-technology company headquartered in California. For privacy questions: privacy@bafastfreight.com.
2. What we collect
From the mobile app
- Container numbers you search or add to your tracking list.
- A per-device anonymous ID (a UUID generated on first launch and stored on the device) so we can show you your own tracked list across sessions without requiring a login.
- Push notification tokens (Expo push token) if you opt in to alerts. Used only to deliver status-change notifications to your device.
- Camera frames when you use the in-app container scanner. Frames never leave the device — pattern matching is performed on-device.
- Crash and performance telemetry from Expo's standard error reporting. No personally identifiable data.
From the terminals you authorize us to query
To provide tracking, our backend logs into terminal portals you've granted us credentials for (PCT, Pier A, ITS, TTI, WBCT, YTI, FMS, etc.) and queries the public PierPass and LBCT endpoints. We retrieve only the container records you've explicitly asked about — never the broader contents of your terminal accounts. Credentials are stored encrypted at rest using AES-256-GCM with a master key that lives outside our application database.
3. What we don't collect
- Your name, address, phone number, or email — unless you provide them at customer-support time.
- Your precise GPS location. The app may ask for "when in use" location to show nearby terminals, but the request is optional and refusing has no impact on tracking.
- Photos, contacts, microphone, calendar, or any device data outside the camera frames consumed transiently for container scanning.
4. How we use what we collect
Strictly to provide the service:
- Showing your tracked containers, their verdicts, hold lights, and live cameras at the terminals where they sit.
- Delivering push notifications when a tracked container's status materially changes (e.g. a customs hold clears, last free day approaches, container becomes available for pickup).
- Operational metrics (cache hit rates, terminal portal availability) — no per-user data.
5. How we share data
We don't sell your data, run advertising, or share it with brokers/aggregators. We do share data with:
- The terminal operators themselves (LBCT, PCT, ITS, TTI, etc.) — when we query them on your behalf, the request necessarily reaches them. This is the same as if you logged into their portal directly.
- PierPass / CargoSprint — same as above, when looking up TMF/CTF status.
- Expo's push notification service — to deliver alerts. Expo passes the message to Apple's APNs or Google's FCM. We send only the verdict text + container number, never your name or other PII.
6. How long we keep data
- Container query results: cached for ~10 minutes, then re-fetched.
- Tracked-container subscriptions: kept while you have the app installed; cleared when you uninstall + re-launch the app.
- Terminal credentials: kept encrypted until you change or remove them.
- Logs: 30-day operational rolling window, stripped of any container numbers or device IDs.
7. Your rights
- California (CCPA/CPRA): You have the right to know what personal information we hold, request deletion, and opt out of any sale (we don't sell). Email privacy@bafastfreight.com.
- EU/UK (GDPR): Right of access, rectification, erasure, restriction, portability, and to lodge a complaint with your supervisory authority. Same address.
- Everywhere: You can wipe your local tracked list by reinstalling the app. You can revoke push notifications at OS level (Settings → Notifications → FreightHub).
8. Security
Connections to our backend use TLS 1.2+. Credentials we store on your behalf are encrypted at rest with AES-256-GCM. The master key lives on a separate volume with file-permission isolation. We do not use third-party analytics SDKs that send personal data off-device.
9. Children
FreightHub is a B2B tool used by professional drivers and dispatchers. We don't market to or knowingly collect data from anyone under 18.
10. Changes to this policy
If we make material changes (adding a new third-party integration that touches user data, etc.) we'll post an update at the top of this page and, if you have notifications enabled, send a one-time alert. The "Last updated" date at the top of this page is authoritative.
11. Contact
Privacy questions, data requests, or to report a concern:
BA Fast Freight
Attn: Privacy Officer
Email: privacy@bafastfreight.com