Privacy Policy

Last updated: 2026-10-24

A3E Ecosystem Inc. ("A3E") operates HaulProof and follows the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Law 25.

What we collect

Customer accounts: name, email, company, sign-in logs, IP address, terms acceptances, billing details (processed by Stripe; we never store card numbers). Public carrier records: information published by government bodies, which can include officer names. Carrier documents: only with recorded consent (who, scope, date, terms version, IP).

Why

To provide the Service, risk scoring and alerts; to bill; to support customers; to secure the Service; to meet legal obligations.

Retention

Carrier documents: 25 months unless consent is renewed, then deleted. Accounts: for the life of the account plus legal retention periods. Terms acceptances: kept as proof.

Where

Data is hosted in Canada on A3E's own infrastructure. Stripe (payments) may process data outside Canada. Messages you type in the support chat may be processed by third-party AI service providers outside Canada; please don't include sensitive information there. Carrier documents are parsed on A3E's infrastructure in Canada.

Who we share it with

Only service providers that help run the Service, under contract and for these purposes: Stripe (payments), our email provider (account and alert emails), Cloudflare (secure connection to the site) and AI service providers (support chat only). Alerts go to the Slack, Teams, webhook or storage destinations you set up. We do not sell personal information.

Safeguards

Encrypted connections, hashed passwords and API keys, encrypted export credentials, role-based access, and access logs.

Your rights

Access, correction, withdrawal of consent and, in Quebec, portability and de-indexing: write to our Privacy Officer at [email protected]. We answer within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

Cookies

Essential cookies only (session, security, language). No advertising or tracking cookies.

Incidents

We keep a register of privacy incidents and notify affected people and authorities when the law requires it.