Privacy Policy

Falconara Inc. · Version 2026-10-15 · Effective October 15, 2026

---

Falconara Inc. ("Falconara," "we," "us") provides the FalconaraTMS transportation management platform and the FalconEye browser extension for freight dispatchers and motor carriers (the "Service"). This Privacy Policy explains how we handle personal information.

Two different roles. We handle personal information in two capacities, and it matters which applies:

• As a controller — for information about our own business contacts: people who visit falconara.ai, sign up, administer an account, and communicate with us.
• As a processor (service provider) — for information our customers put into the Service about their own drivers, employees, carriers, brokers, and operations. Our customer decides why and how that data is used. If you are a driver or employee of one of our customers and want to access or delete your information, contact that company directly; we will help them respond.

1. Information We Collect

You give us:

• Account and contact information: name, business email, phone, company name, job title, business address.
• Billing information: billing contact and address. Payment card details go directly to Stripe. We never receive or store full card numbers.
• Communications: support requests, emails, and anything you send us.

Collected automatically when you use the Service or visit our site:

• Device and connection data: IP address, browser type, operating system.
• Usage data recorded in our server logs and in the Service's audit log: requests made, features used, timestamps, and actions taken in the application.
• Cookies and similar technologies, including website analytics on falconara.ai (Section 6).
• Log and security data: authentication events, error reports, access records.

Customer Data (processor role). Our customers upload operational records, which may include information about drivers and other individuals — names, contact details, license and medical-card expiry dates, pay and settlement records, assignment and dispatch records, documents (such as rate confirmations, bills of lading, proofs of delivery, and receipts), addresses, and load and route information. We process this only to provide the Service to that customer.

Browser extension. FalconEye reads load-board pages that a user opens in their own browser, under their own account, and sends to the Service only the listings the user chooses to score or claim. It does not read other sites, and it does not collect browsing history.

We do not sell Customer Data, and we do not disclose it in identifiable form. We use Customer Data to produce de-identified, aggregated industry statistics — lane-rate benchmarks, broker payment-behaviour indices, and similar market measures — which we publish in the Service and may offer to third parties. That output never identifies a customer, its personnel, its carriers, its customers, or any individual, and a figure is published only where it aggregates at least five distinct customers and twenty underlying loads. A customer's participation is governed by a consent it gives in the Service and can withdraw at any time without losing access. See Section 5 of our Terms of Service for the full limits.

From third parties: identity and business verification data from our payment processor, and public carrier and broker registration data (for example FMCSA records) looked up when a customer adds a carrier or broker.

2. How We Use Information

As a controller, we use personal information to:

• provide, operate, maintain, and secure the Service;
• create and administer accounts and authenticate users;
• process subscriptions, billing, and collections;
• provide customer support and respond to inquiries;
• send service and transactional messages (these are not marketing, and you cannot opt out of them while you hold an account);
• detect, investigate, and prevent fraud, abuse, and security incidents;
• analyze usage to improve and develop the Service;
• send marketing communications where permitted (you may opt out at any time);
• comply with legal obligations and enforce our agreements.

Legal bases (for individuals in the EEA/UK): performance of a contract; our legitimate interests in operating, securing, and improving the Service; compliance with legal obligations; and consent where required.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. The aggregated industry statistics described in Section 1 are not personal information: they are de-identified, aggregated across multiple customers, and we do not attempt to re-identify them or permit recipients to do so.

3. How We Share Information

We share personal information only as follows:

• Service providers that work on our behalf under contract (Section 4).
• Messages our customers send. When a customer uses the Service to email a broker, carrier, or driver, the recipient receives that message and the information the customer chose to include.
• Within a customer's organization: account administrators can see the activity and data of Authorized Users in their account.
• Partners a customer selects: for example a factoring company, when the customer directs the Service to send it invoices and documents.
• Legal and safety: when required by law, subpoena, or legal process, or to protect the rights, property, or safety of Falconara, our customers, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
• With your direction or consent.

4. Service Providers We Use

Provider	Purpose	Location
Vercel Inc.	Application hosting	United States
Neon (Databricks, Inc.)	Database hosting	United States
Cloudflare, Inc.	Document storage (R2), DNS, network security	United States
Resend, Inc.	Transactional email delivery	United States
Google LLC	AI processing (Gemini API) for document reading and assistant features; company email; website analytics (Google Analytics) on falconara.ai	United States
Functional Software, Inc. (Sentry)	Error and performance monitoring	United States
Geoapify GmbH	Address lookup and route mileage	Germany (EU)
Stripe, Inc.	Payments, billing, identity verification	United States

A customer that connects its own AI provider account in the Service (for example Anthropic, OpenAI, or Groq) directs us to send the relevant data to that provider under the customer's own agreement with it. We use AI providers under terms that do not permit them to train their models on Customer Data.

5. Data Retention

We retain account and billing information for as long as the account is active and afterwards as needed for legal, tax, accounting, and dispute-resolution purposes — generally seven (7) years for financial records.

Customer Data is retained while the customer's subscription or trial is active. The customer may export it at any time and for thirty (30) days after the account ends, after which we may delete it in the ordinary course. Backups are purged on our standard rotation, generally within ninety (90) days.

6. Cookies

We use cookies and similar technologies that are:

• Strictly necessary — authentication, session management, security. These cannot be disabled.
• Functional — remembering preferences such as language and theme.
• Analytics (our website only) — on falconara.ai we use Google Analytics to count visits and see which pages and sign-up buttons are used. It sets first-party cookies (_ga, _ga_*) and receives your IP address, browser and pages viewed; Google does not store the IP address. We have turned off Google signals and ad personalization, and we do not send Google names, email addresses or other information you type into our forms. Visitors in the European Economic Area, the United Kingdom and Switzerland, and browsers that send a Global Privacy Control signal, are not given analytics cookies. You can also opt out with Google's browser add-on at https://tools.google.com/dlpage/gaoptout. The FalconaraTMS application itself (app.falconara.ai) does not use analytics cookies.

You can control cookies through your browser settings; disabling strictly necessary cookies will prevent the Service from working. We do not use advertising or cross-site tracking cookies. If we add advertising measurement (for example Google Ads conversion tracking), we will update this section first.

7. Security

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit (TLS) and at rest, database-enforced separation between customers (row-level security), access controls and least-privilege permissions, audit logging, and monitoring.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Protect your credentials and notify us promptly at security@falconara.ai of any suspected compromise. We will notify affected customers of a breach of their data without undue delay and as required by law.

8. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal information; to opt out of marketing; to opt out of sale or sharing (we do neither); to limit use of sensitive personal information (we do not use it to infer characteristics); to appeal a denial of a request where state law provides for appeal; and not to be discriminated against for exercising these rights.

To exercise a right, email privacy@falconara.ai. We will verify your identity before acting and respond within the time required by law (generally 45 days, extendable). An authorized agent may submit a request with proof of authorization.

If your data was put into the Service by one of our customers, direct your request to that customer. We will refer such requests to them and assist as their service provider.

EEA/UK: you may lodge a complaint with your supervisory authority.

9. International Transfers

We operate in the United States, and most of our service providers are in the United States (Section 4). If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data-protection laws than your country. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

10. Children

The Service is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 18, and we will delete it if we learn we have.

11. Changes

We may update this policy. We will post the revised version with a new version date and, for material changes, give notice by email or in-product notice at least thirty (30) days before the change takes effect.

12. Contact

Falconara Inc. · 2456 Stoney Run Dr, Oakboro, NC 28129 Privacy: privacy@falconara.ai · Security: security@falconara.ai · Support: support@falconara.ai