FreightX

Privacy policy

Effective 1 September 2026 · Draft — pending legal review ⚠️

This policy explains how FreightX (Pty) Ltd, the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA), processes personal information on the FreightX platform.

1. What we collect

  • Account data: name, phone number, email, role, company, login records, two-factor secrets.
  • Vetting documents: company registration, IDs of signatories and drivers, driver's licences and PDPs, vehicle papers, insurance schedules, bank confirmation letters — and the metadata our team captures from them (ID numbers, registration numbers, cover amounts, expiry dates).
  • Operational data: loads, bookings, milestones, GPS positions from the driver app during live trips, weighbridge slips, PODs, photos and descriptions of incidents, messages between parties, ratings.
  • Financial data: wallet ledger entries, payment references from our gateway (we never store card numbers), payout bank details (masked everywhere except in the withdrawal batch).
  • Technical data: IP address, device identifiers and push tokens (driver app), browser type, cookies (see the Cookie policy).

2. Why we process it (lawful basis)

  • To perform the contract with you: matching, execution, escrow, payouts.
  • Our legitimate interest and yours in a safe marketplace: vetting, anti-subcontracting checks, incident response, fraud prevention.
  • Legal obligations: FICA/KYC on payouts, tax records, insurer requirements, lawful requests from the SAPS.
  • Consent, where we ask for it (marketing communications, optional location sharing outside a live trip).

3. Drivers' location data

The FreightX Driver app records GPS positions only while a declared trip is live and stops at delivery. Positions are visible to the transporter, to the client of that load until the signed POD is on file, and to FreightX operations. They are retained for the audit and claims period below.

4. Who we share it with

  • The other party to a trip: company name, driver name and vehicle registration on a declared trip, milestone and position data as described above, messages you send.
  • Service providers under contract: payment gateway (Paystack), SMS and push providers, hosting in the Republic of South Africa or with adequate safeguards.
  • Insurers and assessors when a claim is opened on a trip you are party to.
  • Law enforcement and regulators where legally required.

We do not sell personal information. Vetting documents are never shared with other participants.

5. Security

Documents are stored under unguessable names outside the web root and served only through authenticated, audit-logged downloads. Tracker credentials are encrypted at rest. Staff access to vetting documents is restricted and logged. Two-factor authentication is available to every account.

6. Retention

Account and operational records: for the life of the account plus five years (tax and claims). Vetting documents: superseded versions are kept, not deleted, for the same period so that trip declarations remain provable. GPS tracks: 24 months. Messages: 24 months. You may request earlier deletion of information we are not obliged to retain.

7. Your rights

Under POPIA you may request access to, correction of, or deletion of your personal information, object to processing, and complain to the Information Regulator (inforegulator.org.za). Contact our Information Officer at support@freightx.co.za ⚠️ Information Officer to be designated and registered at launch.

8. Children

The platform is for businesses and their adult staff. We do not knowingly process information about children.

9. Changes

We will notify account holders of material changes 30 days in advance on the platform.

Questions about this policy: support@freightx.co.za.