1. Introduction

Welcome to CarrierWin ("we," "us," or "our"). CarrierWin is operated by AMERI MARKETING LTDA (CNPJ: 20.511.387/0001-58), located at ROD SC 401, 5500, SALA 240 BLOCO JURERE B, 88.032-005, SACO GRANDE, FLORIANOPOLIS, SC, BRAZIL.

This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our web-based fleet management platform (the "Service") at carrierwin.com and app.carrierwin.com.

For questions about this Privacy Policy, contact us at legal@carrierwin.com.

2. Information We Collect

We collect the following types of information when you use our Service:

Account Information

• Email address (for account creation, login, and communications)
• Company name
• User profile information
• Encrypted passwords (we never store plaintext passwords)

Fleet and Operational Data

• Truck information (make, model, license plate, fixed costs, fuel efficiency, maintenance schedules)
• Driver information (name, contact details, pay structure)
• Load data (origin, destination, miles, rate, costs, revenue, profit calculations)
• Financial configuration data (company overhead allocation, fixed costs, cost per mile settings)

Usage Information

• Session data (for authentication purposes only)
• Feature usage analytics
• Error and performance data

Payment Information

We do not store your full payment card details. All payment processing is handled by Paddle as our Merchant of Record. Please review Paddle's Privacy Policy for how they handle your payment information.

3. How We Use Your Information

We use the information we collect for:

• Service Provision: To provide, maintain, and improve our fleet management platform, including calculating per-load profitability, tracking cumulative debt per truck, and generating reports.
• Authentication: To verify your identity and secure your account.
• Communications: To send service-related emails (password resets, feature updates, billing notifications), and to respond to your inquiries.
• Improvement: To understand how the Service is used and to enhance the user experience.
• Compliance: To comply with legal obligations.

4. How We Share Your Information

We do NOT sell your personal information. We share your information only in these limited circumstances:

• Service Providers: With Paddle (our payment processor) and other vendors who assist in operating our Service. These providers are bound by confidentiality agreements and data protection obligations.
• Legal Requirements: If required by law, court order, or government request.
• Business Transfers: In connection with a merger, sale, or transfer of all or part of our business (you will be notified via email and/or a prominent notice on our website of any change in ownership).
• With Your Consent: When you explicitly agree to the sharing.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your browser and our servers uses TLS (Transport Layer Security) encryption.
• Access Controls: Role-based access within the platform ensures dispatchers cannot see sensitive financial data.
• Secure Authentication: Passwords are hashed using industry-standard algorithms. We support secure session management.
• Data Center Security: Our infrastructure is hosted on secure, SOC 2-compliant cloud platforms.

However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as your account is active and for a reasonable period thereafter as required by law, for tax purposes, for dispute resolution, and to enforce our agreements.

When you request account deletion:

• We will delete your personal information within 30 days, except as required by law.
• Some information may be retained in anonymized or aggregated form for analytical purposes.

7. Your Rights and Choices

For All Users

• Access: You can request a copy of your personal data by contacting us at legal@carrierwin.com.
• Correction: You can update your account information directly in the Service settings.
• Deletion: You can request account deletion by contacting us. We will delete your data subject to any legal retention requirements.
• Opt-Out: You can opt out of non-essential email communications by clicking the unsubscribe link in any email.

For European Economic Area (EEA) and UK Users (GDPR)

If you are located in the EEA or UK, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us at legal@carrierwin.com. We will respond within one month. We may need to verify your identity before processing your request.

For California Users (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, and share.
• Right to Delete: Request deletion of your personal information.
• Right to Opt-Out of Sale: We do NOT sell your personal information. This right does not apply to us.
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your CCPA rights.

Categories of personal information we collect (CCPA):

• Identifiers (email, company name)
• Commercial information (transaction data via Paddle)
• Professional or employment-related information (driver names)
• Internet or other electronic network activity information (usage data)

To exercise CCPA rights, contact us at legal@carrierwin.com.

8. Cookies and Tracking

We use only essential cookies and session storage for authentication purposes. We do NOT use:

• Advertising or marketing cookies
• Third-party tracking cookies
• Analytics cookies that track you across websites

The cookies we use are strictly necessary for:

• Maintaining your authenticated session
• Remembering your login state
• Security and fraud prevention

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the "Last Updated" date at the top of this page. For material changes, we will provide additional notice (such as via email or a prominent notice on our website).

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: