Privacy Policy — BXM Freight Intelligence

BXM Transportation Company Inc ("BXM", "we", "us"), 2210 Merced Ave, South El Monte, CA 91733, United States, operates the BXM Freight Intelligence platform and the website at bxmtrading.com. This policy explains what personal information we collect, why, who we share it with, and the choices you have.

In short: we collect the minimum needed to run a business subscription — your account and billing details, the references you search, and standard technical logs. We do not sell personal information, and we do not use your shipment data to build advertising profiles.

1. Information we collect

Information you give us

Account information — name, business email address, company name, job title, and the credentials you set.
Billing information — billing name, billing address and tax details. Card numbers are collected and stored by Stripe, Inc., our payment processor; we receive only a token, the card brand, the last four digits and the expiry date.
Customer Data — the shipment references, carrier identifiers, container numbers, lane definitions and contact details you upload or send through the API in order to run queries.
Communications — the content of emails, support tickets and contact-form messages you send us.

Information we collect automatically

Usage data — queries run, features used, timestamps, and the volume counted against your plan allowance.
Device and log data — IP address, browser type and version, operating system, referring page and request identifiers, retained for security and troubleshooting.
Cookies — see section 6.

Information from other sources

To answer your queries we retrieve information from carriers, brokers, terminal operators, telematics providers and public regulatory registers. This mainly concerns businesses and vehicles, but can include limited personal information such as a driver's name on a proof of delivery or a signatory's name at a consignee.

2. How we use information

To provide, operate, secure and improve the Service;
To authenticate users and administer your workspace;
To process subscription payments, issue invoices and collect amounts due;
To meter query usage against your plan and notify you about allowance thresholds;
To send service messages such as outage notices, security alerts and changes to these policies;
To respond to support requests and sales enquiries;
To detect, investigate and prevent fraud, abuse and security incidents;
To produce aggregated, de-identified statistics — for example lane rate benchmarks — that do not identify you or your counterparties;
To comply with legal obligations and enforce our Terms of Service.

Where we rely on a legal basis under laws that require one, that basis is performance of our contract with you, our legitimate interest in operating and securing the Service, your consent (for optional marketing email), or compliance with a legal obligation.

3. How we share information

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We disclose information only as follows:

Service providers acting on our instructions under written contract — including Stripe, Inc. (payment processing), Cloudflare, Inc. (hosting, CDN and security), and our email delivery and error-monitoring providers.
Within your organization — workspace administrators can see the queries and settings of users on their workspace.
Counterparties you direct us to — for example when you publish a branded tracking link to your own customer.
Legal and safety — where required by law, subpoena or court order, or where necessary to protect the rights, property or safety of BXM, our customers or the public. We notify you of legal demands unless prohibited.
Corporate transactions — in connection with a merger, acquisition, financing or sale of assets, subject to this policy continuing to apply.

4. Retention

We keep account and billing records for as long as your subscription is active and for seven years afterwards, to meet tax and accounting requirements. Customer Data and query history are retained for the window in your plan (12 months by default, configurable on Enterprise) and deleted within 90 days of account closure, except where we must retain records by law. Security and access logs are kept for 12 months.

5. Security

We encrypt data in transit with TLS 1.2 or higher and at rest with AES-256. Access to production systems requires multi-factor authentication and is limited to personnel who need it. We log administrative access, review permissions periodically, and maintain an incident response process. No system is perfectly secure; if a breach affects your personal information we will notify you and any required regulator without undue delay.

6. Cookies

We use only cookies that are necessary to operate the site and the application: a session cookie to keep you signed in, a security cookie to protect against cross-site request forgery, and a preference cookie to remember your billing-period selection. We do not use advertising or cross-site tracking cookies. You can block cookies in your browser, but the signed-in application will not function without the session cookie.

7. Your rights

Depending on where you live you may have the right to request access to the personal information we hold about you, to have it corrected or deleted, to obtain a portable copy, to limit certain uses, and not to be discriminated against for exercising these rights.

California residents

Under the California Consumer Privacy Act as amended (CCPA/CPRA) you may request to know the categories and specific pieces of personal information we have collected, the sources, the purposes and the categories of recipients; request deletion or correction; and limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined by the CCPA, and we have not done so in the preceding 12 months. You may use an authorised agent. Submit requests to privacy@bxmtrading.com; we will verify your identity against your account details and respond within 45 days.

Other jurisdictions

If you are in the European Economic Area or the United Kingdom, you may also object to processing based on legitimate interests and lodge a complaint with your supervisory authority. Where we transfer personal information out of those regions we rely on the European Commission's Standard Contractual Clauses.

8. Customer Data and our role

When you upload Customer Data that contains personal information, you are the controller of that information and BXM acts as your processor or service provider. We process it only on your documented instructions to deliver the Service. If an individual contacts us directly about data you uploaded, we will refer them to you.

9. Children

The Service is a business product and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

10. Marketing communications

We send product and company email only to business contacts who have asked for it or who are existing subscribers. Every marketing message includes an unsubscribe link. Transactional messages — receipts, security alerts, outage notices — are part of the Service and cannot be opted out of while your subscription is active.

11. Changes to this policy

We will post any updated policy on this page with a new "Last updated" date. If the changes are material we will notify subscribers by email at least 30 days before they take effect.

12. Contact us

Questions, requests or complaints about privacy:

BXM Transportation Company Inc — Privacy
2210 Merced Ave
South El Monte, CA 91733
United States
(626) 495-5516
privacy@bxmtrading.com