1. Who we are
MIR Transport (“we”, “us”) is the controller of personal information processed through the Service. For privacy questions or to exercise your rights, contact us at [email protected]. Where the Service is self-hosted by your organization, your organization is the controller of the data in its instance and this policy describes the software's data practices.
2. Information we collect
- Account information — name, email address, phone number, role, company affiliation, and password (stored only as a secure hash).
- Content you provide — the operational data you enter or upload, such as loads, shipments, stops and addresses, companies and contacts, fleet records, pay settings, and documents (e.g. rate confirmations, BOLs, PODs) including any data extracted from them.
- Technical & usage data — IP address, browser and device information, log data, and interactions with the Service, collected through cookies and similar technologies (see our Cookie Policy).
3. How we use information
- to provide, operate, secure, and maintain the Service;
- to authenticate you and keep your account and data safe;
- to perform AI-assisted extraction, routing, and mileage when you use those features;
- to provide support and respond to your requests;
- to detect, prevent, and address fraud, abuse, and technical issues;
- to comply with legal obligations and enforce our Terms.
We do not use your Customer Data to train third-party AI models, and we do not sell your personal information.
4. Legal bases (EU/UK GDPR)
Where the GDPR applies, we rely on the following legal bases:
- Performance of a contract — to provide the Service you request.
- Legitimate interests — to secure, maintain, and improve the Service, balanced against your rights.
- Consent — for optional cookies and any optional communications; you may withdraw consent at any time.
- Legal obligation — to comply with applicable law.
5. Cookies
We use strictly necessary cookies to sign you in and secure the app, and — with your consent — optional cookies for preferences and analytics. You can manage your choices at any time through our cookie banner or the Cookie Policy. We honor the Global Privacy Control (GPC) signal.
6. How we share information
We share personal information only as needed to run the Service:
- Service providers / processors — hosting and infrastructure providers who process data on our behalf under contract.
- Mapbox — when maps, geocoding, or mileage are used, stop addresses and coordinates are sent to Mapbox to render maps and compute routes.
- AI providers (e.g. OpenAI, Anthropic, Google) — when you use AI-assisted extraction, the document or data you submit is sent to the provider your deployment configures, subject to that provider's terms.
- Legal & safety — where required by law, or to protect our rights, users, or the public.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.
We do not sell your personal information and do not share it for cross-context behavioral advertising.
7. International transfers
Some providers (for example, certain AI or hosting services) may process data in the United States or other countries. Where personal data is transferred out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an equivalent mechanism.
8. Data retention
We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements. You can delete records within the Service, and you can request deletion of your account as described below.
9. Your rights
EU/UK (GDPR)
You have the right to access, rectify, erase, restrict, or object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.
United States (California CCPA/CPRA and similar state laws)
Depending on your state, you may have the right to know and access the personal information we hold, to delete it, to correct it, to opt out of “sale” or “sharing” (we do neither), and to not be discriminated against for exercising your rights. You may use an authorized agent to submit a request.
To exercise any of these rights, email [email protected]. We will verify your request and respond within the time required by applicable law.
10. Do Not Sell or Share
MIR Transport does not sell your personal information and does not share it for cross-context behavioral advertising. We also honor opt-out preference signals, including Global Privacy Control (GPC), sent by your browser.
11. Security
We use technical and organizational measures designed to protect personal information, including password hashing and signed session tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Children's privacy
The Service is intended for business use and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the “Last updated” date and, for material changes, provide additional notice where appropriate.
14. Contact
For any privacy question or request, contact us at [email protected].