Privacy Policy

Information we collect

• Account and company information: names, email, phone, facility addresses, business licenses, roles, authentication and agreement-acceptance records.
• Driver and vehicle information: contact details, qualifications, identification-card and license details, vehicle identifiers, insurance, registration and uploaded evidence. Uploaded identity documents may contain full license numbers, photographs, addresses and dates of birth, even where a separate form asks only for the last four digits. Upload only the evidence needed for verification.
• Transport records: loads, manifests, package tags, lab status, temperatures, photos, delivery signatures, messages and incident reports.
• Location: coordinates, accuracy and timestamps collected through transport tracking. Device permission is required; tracking covers the assigned delivery journey and the return to the shipper until the driver ends the trip at origin. We record route deviations, receiver arrival and exit observations, and reporting interruptions. Offline observations may remain on the device until uploaded. A powered-off phone cannot collect or transmit GPS; gaps do not establish their cause. Operators must inform their drivers about this collection.
• Integrations: Metrc credentials and records authorized by your licenses; payment-provider account identifiers, subscription status and transaction references. Stripe handles subscription payment details; optional Aeropay features involve that provider. Do not put payment or bank credentials into support messages.
• Support and inquiries: messages sent to Iris, our AI assistant, relevant account context used to answer requests, email inquiries, and information entered in our readiness tools and contact forms.
• Technical information: IP addresses, device and browser information, request timestamps and security logs processed by our hosting and service providers.

How and why we use it

We use information to provide and secure accounts, verify operational credentials, execute authorized integrations, maintain transport records, provide support, bill for subscriptions and meet applicable legal and contractual obligations. Depending on the context and applicable law, processing is based on our contract, legal obligations, legitimate business interests or consent.

Operators control the business records they submit and are responsible for authorization to submit staff and counterparty information. Flower Freight processes those records to provide the service and manages its own account, billing and security information.

Sharing and service providers

Authorized staff, transport counterparties and people given a tracking link can receive the information needed for their role. Keep tracking links private and revoke them when no longer needed. Service providers process data to deliver hosting, authentication, email, payments, maps, scanning, signatures and AI support. See the provider, script and font inventory.

We may disclose information when legally required, to address abuse or security incidents, or as part of a business transfer with appropriate protections. Our primary application database is in the United States. Provider networks and support operations may process information in other countries; we do not promise that all processing stays in the United States.

We do not sell personal information or share it for targeted advertising. We do not use customer content to train our own AI models. AI support requests are processed by Anthropic; avoid unnecessary sensitive information in chat.

Cookies, device storage and analytics

Authentication, device preferences and offline transport features use necessary browser storage. The application does not intentionally install advertising pixels, session replay or optional audience-analytics scripts. Functional maps and scanners contact their providers when used. Fonts are served from Flower Freight. We will obtain consent where required before introducing optional tracking, and will not capture form, chat, payment or health-field contents in analytics or replay.

Retention and deletion

We keep operational information while it is needed to provide the service. Our transport-record retention policy is 48 months after account closure, subject to applicable record-specific duties, disputes and legal holds. Billing and tax records may need to be retained for seven years. Technical logs and backups follow provider configurations and security needs; deletion from backups may occur later than deletion from active systems.

Company owners can download structured records and request deletion. A recorded deletion request immediately disconnects stored Metrc credentials. It enters a reviewed workflow; it does not falsely report that records have already been purged. We review requests within 30 days, explain any required retention or lawful extension, and confirm the outcome. Account access remains available during review. Subscription cancellation is a separate online control on the same page.

Download your export before requesting deletion. It includes structured records listed in the file, not every uploaded document or support conversation. Request additional personal information or files through support. Operators remain responsible for preserving records required for their license.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction or a portable copy, and may withdraw consent where processing relies on it. We verify identity and authority before releasing or deleting records. Contact info@flowerfreight.app for requests, privacy questions or an appeal of a decision. Necessary service emails continue while your account needs them; promotional email must provide an unsubscribe option.

Security and changes

See our security practices. No service can guarantee perfect security. We publish updates here and notify account holders about material changes as required by law or our agreements. See also our Terms of Service.