Privacy Policy

1. Who we are

BaltriX is operated by Baltic Global Inc., 4510 44th Avenue North, St. Petersburg, FL 33714 ("BaltriX", "we", "us"), which provides a software platform for expedited ground freight — connecting brokers, carriers, and drivers ("the Service"). This policy explains what personal information we collect, how we use it, and the choices you have. BaltriX is a software platform, not a broker or carrier.

2. Information we collect

• Account data: name, email address, phone number, password (stored hashed), company name, role, MC/DOT numbers.
• Company & compliance data: FMCSA registry records associated with your MC number (authority status, safety data, insurance on file), certificates of insurance, W-9s, and other documents you upload.
• Load & operational data: shipments, stops, rates, quotes, bids, messages, status events, invoices, and documents attached to loads (rate confirmations, PODs, photos, signatures).
• Location data (with consent): see Section 3.
• Identity verification data: see Section 4.
• Technical data: IP address, device and browser information, and login/security events (e.g., new-device sign-ins) used to protect your account.
• Billing data: for paid plans, your billing name, email, billing address and payment method are collected and processed by Stripe, our payment processor. We receive the card brand, last four digits, expiry date and payment history. We do not receive or store full card numbers.

3. Location tracking and consent

Location is central to dispatch, and we only collect it with clear consent:

• Drivers using the driver view grant location permission in their browser. While assigned to an active load, the Service records GPS coordinates with status updates (e.g., loaded, delivered) and periodic pings while on route.
• Guest tracking links (for drivers not registered on BaltriX) require an explicit one-time consent screen before any location is shared. Tracking is limited to the specific load, stops automatically when the load completes or the link expires, and can be stopped by the driver at any time by closing the page or declining consent.
• Unit locations (ZIP-level or GPS) are visible to your own company and, for available units, to brokers searching for capacity.

In the browser we do not track location in the background outside of active loads or without an active, consented tracking session.

The BaltriX mobile app

• Background location: with your permission, the BaltriX app can share your location with your dispatcher even when the app is in the background or your phone is locked. How much is shared follows your in-app "Share location" setting (Always / While using the app / Only on a load). Positions are sent periodically while you work (more often on an active load) and only to your own company. You can change or revoke this at any time in the app settings or your phone's location settings.
• Push notifications: if you allow notifications, we store a device token (Apple/Google push identifier) linked to your account to deliver load assignments, load updates, documents, messages, check-in requests and pay statements. Deleting the app or disabling notifications removes/disables the token.
• Camera and photos: the app uses your camera and photo library only when you scan or attach paperwork (BOL/POD) or photos to a load. Images are uploaded to your company's workspace; we do not access your camera or photos otherwise.
• Account deletion: you can delete your account at any time in the app under Settings → Account → Delete my account. This deactivates the account and removes your personal details (name, email, phone) from active systems.

4. Identity verification and biometric data (processed by Stripe)

To keep the network trustworthy, company owners may be asked to complete identity verification. This is performed by Stripe Identity, acting as our verification processor. As part of that process, Stripe may collect images of your government-issued ID and a selfie, and may use biometric technology (facial recognition) to compare them.

• Biometric information is collected and processed by Stripe, subject to Stripe's Privacy Policy, and only after you provide your consent within the verification flow.
• BaltriX does not receive, store, or retain your biometric identifiers. We receive only the verification outcome (e.g., "verified" / "not verified") and limited document metadata needed for compliance.
• You may decline biometric verification; alternative manual review may be available but can delay or limit account approval.

5. How we use information

• Provide and operate the Service: matching, dispatch, tracking, messaging, document processing, and invoicing.
• Vet carriers: FMCSA authority checks at signup and on a recurring (weekly) basis, insurance coverage tracking, and verification badges.
• Process documents with AI: rate confirmations and certificates of insurance you upload are processed by AI services to extract structured data for your review.
• Send transactional communications: dispatch notifications, quote and booking emails, tracking links, security codes (2FA), and document expiration alerts.
• Protect the Service: fraud prevention, account security (login attempt limits, device recognition), and rate limiting.

6. How we share information

• With other platform participants: brokers see carrier company names, verification level, coverage badges, unit capabilities and locations of available units; carriers see load details posted by brokers. Customers with a read-only tracking link see load progress and map position only.
• Service providers: Stripe (identity verification), Resend (email delivery), Google Maps Platform (routing, geocoding, map display), AI providers (document extraction), and cloud hosting/storage vendors — each bound to use data only to provide their service.
• Payment processing: Stripe, Inc. processes subscription payments on our behalf under its own privacy policy (stripe.com/privacy).
• Public registries: we query FMCSA public records using the MC number you provide; we do not send them personal data beyond that identifier.
• Legal: when required by law, to enforce our terms, or to protect the rights and safety of users.

We do not sell personal information.

7. Retention

We keep account and load records for as long as your account is active and as needed for legal, tax, and dispute-resolution purposes. Location pings tied to a load are retained as part of that load's history. Guest tracking sessions expire automatically. You may request deletion of your account data (Section 9).

8. Security

We use encryption in transit, hashed passwords, two-factor authentication, login-attempt lockouts, and role-based access controls. No system is perfectly secure; notify us immediately at support@baltrix.io if you suspect unauthorized access.

9. Your rights and choices

• Access, correct, or export your data by contacting support.
• Delete your account and associated personal data, subject to records we must keep by law.
• Withdraw location consent at any time by disabling browser location permissions or ending a tracking session.
• Depending on your state or country (e.g., California, Illinois, EU/UK), you may have additional statutory rights, including rights specific to biometric information. We honor verified requests under applicable law.

10. Children

The Service is for business use by adults 18+. We do not knowingly collect data from children.

11. Changes & contact

We'll post updates to this policy here and update the date above; material changes will be notified in-app or by email. Contact: Baltic Global Inc., 4510 44th Avenue North, St. Petersburg, FL 33714 · support@baltrix.io.

12. X by BaltriX (Chrome extension)

If your company uses the X by BaltriX Chrome extension, the X Privacy Policy explains what X collects and how it is used, in addition to this policy.