Privacy Policy

1. INTRODUCTION

2. Information We Collect

We collect information in the following ways:

3. How We Use Your Information

We use the information we collect to:

• •Provide, operate, maintain, and improve the Service.
• •Process and fulfil requests for product demonstrations and onboarding.
• •Send you transactional and administrative communications such as account confirmations, audit reports, and system alerts.
• •Send you marketing and promotional communications where you have provided consent, and honour opt-out requests without delay.
• •Analyse usage patterns, conduct research, and improve product features and user experience.
• •Detect, prevent, and address technical issues, security incidents, and fraudulent activity.
• •Comply with applicable legal obligations and enforce our agreements.
• •Respond to lawful requests from public and government authorities.

4. Sharing of Information

WE DO NOT SELL, RENT, OR TRADE YOUR PERSONAL INFORMATION. We may share your information only in the following limited circumstances:

4a. Subprocessors

Current Subprocessors. We use the following categories of subprocessors to deliver the Service: cloud infrastructure (Microsoft Azure), email delivery, and payment processing. An up-to-date list of subprocessors is available upon request at hello@cubesite.ai.

We will notify customers of any intended changes to subprocessors — including additions or replacements — with reasonable advance notice, giving customers the opportunity to object to such changes before they take effect.

5. Data Retention

Customer freight data — including carrier invoices, rate cards, shipment records, and associated documents — is retained for the duration of the active customer relationship. Upon account termination, Customer Data is deleted within 90 days unless a longer retention period is required by applicable law or agreed in writing.

We retain personal information for as long as necessary to fulfil the purposes outlined in this policy, to comply with our legal obligations, to resolve disputes, and to enforce our agreements.

6. Security

We implement industry-standard technical and organisational safeguards to protect your personal information, including encryption of data in transit (TLS) and at rest, role-based access controls, and regular security assessments.

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Cubesite is hosted on Microsoft Azure with EU data residency available for enterprise customers. We are currently pursuing SOC 2 Type II certification. A summary of our security practices is available upon request.

7. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• •Right of Access – request a copy of the personal information we hold about you.
• •Right to Rectification – request correction of inaccurate or incomplete information.
• •Right to Erasure – request deletion of your personal information, subject to legal obligations.
• •Right to Object – object to or request restriction of certain processing activities.
• •Right to Portability – receive your data in a structured, machine-readable format.
• •Right to Withdraw Consent – withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at hello@cubesite.ai. We will respond to your request within 30 days.

8. Cookies and Tracking

We use cookies, web beacons, and similar tracking technologies to track activity on the Service and to hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier sent to your browser from a website and stored on your device.

We use analytics tools to understand how users interact with the Service. This helps us identify areas for improvement and optimise the user experience.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of the Service.

9. International Data Transfers and Data Residency

NTHORBIT SOLUTIONS PRIVATE LIMITED is incorporated in India and serves customers across India and internationally. Our privacy and data handling practices are designed to support compliance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (India), the General Data Protection Regulation (GDPR), the UK GDPR, and other applicable regulations.

Data Residency. Enterprise customers may have requirements for Customer Data to be stored and processed within specific geographic regions. Where commercially agreed and technically feasible, Cubesite can support regional data residency through appropriate infrastructure configuration and contractual arrangements. Customers with specific data residency requirements should contact us at hello@cubesite.ai.

International Data Transfers. Where personal data is transferred across jurisdictions, Cubesite implements appropriate safeguards in accordance with applicable law, including Standard Contractual Clauses (SCCs) or other legally recognised transfer mechanisms where required.

Consistent Security Standards. Regardless of where Customer Data is processed, Cubesite applies consistent technical and organisational security measures to protect the confidentiality, integrity, and availability of customer information.

Data Processing Agreements. Cubesite enters into Data Processing Agreements (DPAs) with enterprise customers as required under Article 28 of the GDPR and equivalent applicable regulations. Our DPA incorporates the European Commission's Standard Contractual Clauses (2021) for international data transfers where required. To request a DPA, please contact hello@cubesite.ai.

10. Children's Privacy

The Service is intended solely for use by business professionals and is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately at hello@cubesite.ai and we will take steps to delete such information promptly.

11. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on this page with a revised Effective Date and, where appropriate, by sending an email notification to registered users.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.