X Freight AI LLC ("Company", "we", "us") operates Consol AI ("Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.
1. Information We Collect
Account Information
Name, email address, and password
Company name, address, and phone number
Role and team membership within your organization
Billing information (processed by our payment provider — we do not store credit card numbers)
Emails forwarded to your intake address (processed by AI for WR extraction)
WhatsApp messages sent and received through the Service
Customer portal messages and booking requests
AI assistant conversation history
Usage Data
Pages visited, features used, and actions taken within the Service
AI token usage and processing metrics
Browser type, device information, and IP address
Login timestamps and session duration
2. How We Use Your Information
Provide the Service: Process warehouse receipts, generate documents, manage consolidations, send notifications
AI Processing: Extract data from emails and documents, classify intent, generate draft replies, create shipping documents, optimize loading plans
Customer Notifications: Send WhatsApp milestone updates and email notifications on your behalf
Improve the Service: Analyze usage patterns to improve features, fix bugs, and enhance performance
Billing: Process subscriptions and send invoices
Support: Respond to support requests and troubleshoot issues
Legal Compliance: Comply with applicable laws, regulations, and legal processes
3. AI Data Processing
We use Anthropic's Claude AI to power features including email parsing, document extraction, document generation, the AI assistant, and exception detection. When these features are used, relevant data is sent to Anthropic's API for processing.
Important: Anthropic does not use your data to train their AI models. Data sent to Anthropic is processed in accordance with their Privacy Policy and is not retained beyond the processing window (typically deleted within 30 days).
AI-generated content (documents, email drafts, suggestions) is stored in your organization's workspace and is only accessible to your team members.
4. Third-Party Services
We use the following third-party services to operate Consol AI:
Encryption at rest: All data is encrypted using AES-256 in Supabase (hosted on AWS)
Encryption in transit: All connections use TLS 1.3
Row-level security: Database access is restricted per organization — your data is isolated from other customers
Access control: Role-based permissions within each organization
Infrastructure: Hosted on Vercel (serverless) and Supabase (PostgreSQL on AWS)
Backups: Daily automated database backups with point-in-time recovery
6. Data Retention
Active accounts: Data is retained for the duration of your subscription
After cancellation: Data is available for export for 30 days, then permanently deleted
AI processing logs: Token usage logs are retained for 90 days for billing and performance monitoring
Server logs: HTTP access logs are retained for 30 days
Backup data: Removed from backups within 90 days of deletion
7. Your Rights (GDPR)
If you are in the European Economic Area (EEA), United Kingdom, or a jurisdiction with similar data protection laws, you have the following rights:
Access: Request a copy of all data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your data ("right to be forgotten")
Portability: Request your data in a structured, machine-readable format (JSON/CSV export available in Settings)
Restriction: Request that we limit processing of your data
Objection: Object to processing based on legitimate interests
Withdraw consent: Withdraw consent for optional data processing at any time
To exercise any of these rights, contact us at privacy@consolai.app. We will respond within 30 days.
8. California Privacy Rights (CCPA)
California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.
To exercise your CCPA rights, contact us at privacy@consolai.app.
9. Cookies
We use essential cookies for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Your theme preference (dark/light mode) and language selection are stored in your browser's localStorage.
10. Children's Privacy
The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.
11. International Data Transfers
Your data may be processed in the United States where our servers and third-party providers are located. By using the Service, you consent to the transfer of your data to the United States. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 14 days before taking effect. The "Last updated" date at the top indicates when the policy was last revised.
13. Contact Us
For privacy-related questions or to exercise your data rights:
X Freight AI LLC Email: privacy@consolai.app Address: Miami, FL, United States