Privacy Policy

Last updated: April 13, 2026

X Freight AI LLC ("Company", "we", "us") operates Consol AI ("Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

1. Information We Collect

Account Information

• Name, email address, and password
• Company name, address, and phone number
• Role and team membership within your organization
• Billing information (processed by our payment provider — we do not store credit card numbers)

Freight Operations Data

• Warehouse receipts: shipper/consignee details, cargo descriptions, weights, dimensions, HS codes
• Shipping documents: bills of lading, packing lists, commercial invoices, customs declarations
• Consolidation data: routes, carriers, vessel information, container numbers
• Customer records: company names, contact details, pricing tiers, transaction history
• Shipment tracking: status, milestones, exception alerts

Communications Data

• Emails forwarded to your intake address (processed by AI for WR extraction)
• WhatsApp messages sent and received through the Service
• Customer portal messages and booking requests
• AI assistant conversation history

Usage Data

• Pages visited, features used, and actions taken within the Service
• AI token usage and processing metrics
• Browser type, device information, and IP address
• Login timestamps and session duration

2. How We Use Your Information

• Provide the Service: Process warehouse receipts, generate documents, manage consolidations, send notifications
• AI Processing: Extract data from emails and documents, classify intent, generate draft replies, create shipping documents, optimize loading plans
• Customer Notifications: Send WhatsApp milestone updates and email notifications on your behalf
• Improve the Service: Analyze usage patterns to improve features, fix bugs, and enhance performance
• Billing: Process subscriptions and send invoices
• Support: Respond to support requests and troubleshoot issues
• Legal Compliance: Comply with applicable laws, regulations, and legal processes

3. AI Data Processing

We use Anthropic's Claude AI to power features including email parsing, document extraction, document generation, the AI assistant, and exception detection. When these features are used, relevant data is sent to Anthropic's API for processing.

Important: Anthropic does not use your data to train their AI models. Data sent to Anthropic is processed in accordance with their Privacy Policy and is not retained beyond the processing window (typically deleted within 30 days).

AI-generated content (documents, email drafts, suggestions) is stored in your organization's workspace and is only accessible to your team members.

4. Third-Party Services

We use the following third-party services to operate Consol AI:

5. Data Storage and Security

• Encryption at rest: All data is encrypted using AES-256 in Supabase (hosted on AWS)
• Encryption in transit: All connections use TLS 1.3
• Row-level security: Database access is restricted per organization — your data is isolated from other customers
• Access control: Role-based permissions within each organization
• Infrastructure: Hosted on Vercel (serverless) and Supabase (PostgreSQL on AWS)
• Backups: Daily automated database backups with point-in-time recovery

6. Data Retention

• Active accounts: Data is retained for the duration of your subscription
• After cancellation: Data is available for export for 30 days, then permanently deleted
• AI processing logs: Token usage logs are retained for 90 days for billing and performance monitoring
• Server logs: HTTP access logs are retained for 30 days
• Backup data: Removed from backups within 90 days of deletion

7. Your Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or a jurisdiction with similar data protection laws, you have the following rights:

• Access: Request a copy of all data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Request your data in a structured, machine-readable format (JSON/CSV export available in Settings)
• Restriction: Request that we limit processing of your data
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for optional data processing at any time

To exercise any of these rights, contact us at privacy@consolai.app. We will respond within 30 days.

8. California Privacy Rights (CCPA)

California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

To exercise your CCPA rights, contact us at privacy@consolai.app.

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Your theme preference (dark/light mode) and language selection are stored in your browser's localStorage.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

11. International Data Transfers

Your data may be processed in the United States where our servers and third-party providers are located. By using the Service, you consent to the transfer of your data to the United States. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 14 days before taking effect. The "Last updated" date at the top indicates when the policy was last revised.

13. Contact Us

For privacy-related questions or to exercise your data rights:

X Freight AI LLC
Email: privacy@consolai.app
Address: Miami, FL, United States

For general support: hello@consolai.app