Privacy Policy

Last Updated: July 2, 2026

1. Introduction

This Privacy Policy explains how Qualle Inc., doing business as Drayrates ("Drayrates," "we," "our," or "us"), collects, uses, discloses, and protects personal information. Qualle Inc. is the data controller for the personal information described in this policy where applicable.

For the Drayrates browser extension, see our separate Browser Extension Privacy Policy.

2. Information We Collect

2.1 Personal Information

• Name and contact details
• Account credentials
• Business information
• Payment information

2.2 Usage Data

• Quote history
• Rate data
• Platform usage statistics
• Analytics data

3. How We Use Your Information

• To provide and improve our services
• To process your transactions
• To send service updates and notifications
• To generate anonymized and aggregated market insights from eligible platform data
• To maintain platform security, prevent fraud, and investigate abuse
• To comply with legal obligations
• To administer subscriptions, billing, customer support, and organization accounts

Data collected from page scans, email content, Gmail thread metadata, highlighted text, and quote content through the Drayrates browser extension is excluded from market-rate datasets, benchmarking products, and products developed for other customers unless the customer has entered into a separate written agreement authorizing that use.

Where applicable law, such as the EU or UK GDPR or Brazil's LGPD, requires a legal basis, we process personal information on the following bases:

• Performance of our contract with you, including providing the platform, searches, rates, quotes, integrations, and account functionality
• Our legitimate interests, including security, fraud prevention, product reliability, customer support, service improvement, and anonymized market insights from eligible data
• Your consent, including for non-essential marketing cookies and optional integrations where consent is required
• Compliance with legal obligations

Where we rely on legitimate interests, we consider whether those interests are outweighed by the rights and interests of affected individuals.

4. Data Protection

We implement robust security measures:

• Encryption at rest and in transit
• Regular security audits
• Access controls
• Data backup and recovery
• Incident response procedures

5. Data Sharing

We share data only:

• With your explicit consent
• To provide our services
• With service providers under confidentiality agreements
• When required by law

Our service providers include:

• OpenAI — processes freight text that users ask us to parse to identify freight lanes and related structured information. Data submitted through the OpenAI API is not used to train OpenAI's models. Retention is subject to the data controls applicable to our OpenAI account.
• Unipile — delivers quote emails and captures direct replies from a connected mailbox when a user chooses to use those features.
• Google Cloud / Firebase — provides hosting, authentication, infrastructure, and account-data storage.
• Payment processors — process subscription and payment information on our behalf.
• Analytics providers — help us understand usage and improve the platform.
• Marketing-service providers — operate only on the public marketing website and are not used in the authenticated platform or browser extension.

We do not sell your data, and we do not share it for advertising.

6. Data Retention

We retain account data while an account is active. Following account closure, account data is generally deleted or de-identified within 90 days, except where longer retention is reasonably necessary for billing, fraud prevention, security, dispute resolution, enforcement of agreements, or compliance with legal obligations.

Data may remain in encrypted backups until those backups are overwritten through our ordinary backup cycle. Billing records, transaction records, security logs, and legal records may be retained for longer periods where reasonably necessary.

Anonymized and aggregated information that can no longer reasonably identify an individual or customer may be retained indefinitely.

7. Your Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Access personal information we hold about you
• Correct inaccurate personal information
• Request deletion of personal information
• Receive or export a copy of certain personal information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Opt out of certain sales, sharing, targeted advertising, or profiling where applicable
• Lodge a complaint with your local data-protection authority, such as an EEA supervisory authority, the UK Information Commissioner's Office, or Brazil's ANPD

We may need to verify your identity, account, or authority before fulfilling a request. Where permitted by law, you may authorize an agent to make a request on your behalf. We will not unlawfully discriminate against you for exercising applicable privacy rights.

Requests may be submitted to privacy@drayrates.ai.

8. California Privacy Rights

California residents may have rights to know, access, correct, delete, and obtain a copy of personal information, and to opt out of the sale or sharing of personal information.

We do not sell personal information for monetary consideration. Our public marketing website may use advertising or marketing technologies that constitute "sharing" under California law. Where applicable, California residents may exercise their rights through our "Your Privacy Choices" link or by contacting privacy@drayrates.ai.

We honor legally recognized opt-out preference signals, including Global Privacy Control, where required by applicable law.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session
• Remember your preferences
• Analyze platform usage
• Improve user experience

See our Cookie Policy for additional details. Marketing and advertising cookies are used only on our public marketing website and are not used in the authenticated Drayrates platform or the Drayrates browser extension.

Where required by law, non-essential cookies and similar technologies are not activated until the user provides consent.

10. International Data Transfers

Qualle Inc. is based in the United States, and personal information may be processed in the United States and other countries where we or our service providers operate. These countries may have data-protection laws that differ from those in your location.

Where applicable law requires a transfer mechanism, we rely on safeguards made available under applicable law, which may include Standard Contractual Clauses and related contractual protections.

11. Organization Accounts

If you use Drayrates through an employer, customer, or other organization, that organization may control your account and may access, manage, export, or delete information associated with the organization's account. The organization may also establish its own policies regarding access to and use of business-account information.

12. Children's Privacy

Our services are not intended for children under 13.

13. Changes to This Policy

We may update this policy and will notify you of significant changes.

14. Contact Us

For privacy-related inquiries or data-rights requests: Email: privacy@drayrates.ai

For users in India, privacy@drayrates.ai also serves as our grievance contact under applicable law.

Qualle Inc., doing business as Drayrates 902f Cheatham Pl, Nashville, TN 37208