OFreight AI Privacy Policy

We may collect personal data that you voluntarily provide to us, including:

• Full name
• Company name
• Work email address
• Phone number, if provided
• Job title or department, if provided
• Country, city, or business location, if provided
• Preferred demo or meeting time
• Messages, inquiries, or business requirements submitted by you
• Information about your company’s freight, logistics, ERP, TMS, CRM, accounting, customs, warehouse, or supply chain requirements

The OFreight AI demo form currently collects full name, company name, and work email address before continuing to the booking process.

We may also collect technical information automatically when you visit our website or use our platform, including:

• IP address
• Browser type
• Device type
• Operating system
• Pages visited
• Session duration
• Referring website
• Cookies and similar technologies
• Error logs and security logs
• General location information

Because OFreight AI serves freight, logistics, shipping, and supply chain companies, you or your company may provide business-related information, including:

• Company profile and operational requirements
• Shipment, quotation, booking, documentation, customs, warehouse, finance, or customer service information
• ERP, TMS, CRM, accounting, document, email, or API integration requirements
• Workflow details and automation requirements
• Support requests and implementation information
• AI agent use cases and business process details

We treat this information as confidential business information and use it only for the purposes described in this Privacy Policy, our agreements with customers, and applicable UAE law.

We may use personal data for the following purposes:

• Responding to inquiries
• Scheduling and managing demo bookings
• Contacting you about your request
• Providing product information and demonstrations
• Understanding your company’s requirements
• Preparing proposals, quotations, commercial discussions, and service agreements
• Providing, operating, maintaining, and improving OFreight AI
• Supporting AI agents, automation, workflows, analytics, and integrations
• Managing customer accounts and service relationships
• Providing technical support and troubleshooting
• Improving website performance, security, and user experience
• Sending service updates and permitted business communications
• Sending marketing communications where permitted or consented to
• Preventing fraud, misuse, unauthorized access, or security incidents
• Maintaining legal, accounting, audit, tax, and business records
• Complying with UAE laws, court orders, regulatory requests, or legal obligations

Under the UAE PDPL, processing must follow principles such as lawful, fair, and transparent processing; collection for specific and clear purposes; data minimization; accuracy; security; and retention only as needed for the stated purpose.

Where required by UAE law, we will obtain your consent before processing your personal data.

Consent should be clear, specific, informed, and based on a positive action by the data subject. The UAE PDPL defines consent as authorization by the data subject in a specific, clear, and unambiguous manner through a clear positive statement or action.

We may also process personal data without consent where permitted by UAE law, including where processing is necessary for:

• Performing or entering into a contract
• Taking steps at your request before entering into a contract
• Complying with legal obligations
• Protecting public interest
• Establishing, exercising, or defending legal claims
• Protecting the rights or interests of OFreight AI, the data subject, or others, where permitted by law
• Other lawful grounds recognized under applicable UAE legislation

OFreight AI uses AI-powered agents and automation to support business workflows across freight forwarding, logistics, shipping, customs, operations, sales, customer service, documentation, warehouse coordination, finance, and management.

Depending on the services used, OFreight AI may process:

• User instructions and prompts
• AI-generated outputs
• Workflow actions
• Uploaded or connected documents
• Shipment, quotation, booking, task, finance, or operational data
• Integration data from ERP, TMS, CRM, accounting, email, customer portal, or other systems
• Logs, feedback, and support information

Unless otherwise agreed in writing:

We do not sell customer operational data.

We do not use customer confidential business data to train public AI models.

We restrict access to customer data to authorized personnel and approved service providers only.

Customers remain responsible for reviewing AI outputs before making legal, financial, customs, operational, or commercial decisions.

OFreight AI is designed to assist business users. It is not intended to make final legal, financial, customs, compliance, or employment decisions without human review.

We may use cookies and similar technologies to:

• Operate the website
• Improve website performance
• Understand how visitors use the website
• Remember user preferences
• Improve content and navigation
• Support security and fraud prevention
• Measure marketing effectiveness

Where required by UAE law or applicable regulations, we will obtain consent before using non-essential cookies.

You may disable cookies through your browser settings, but some website features may not work properly.

We do not sell your personal data.

We may share personal data with third parties only where necessary and lawful, including:

• Website hosting providers
• Cloud infrastructure providers
• CRM and sales tools
• Email and communication providers
• Calendar booking tools
• Analytics providers
• Customer support providers
• Payment processors, if applicable
• AI infrastructure or model service providers, where applicable
• Security, monitoring, and error-tracking providers
• Professional advisers, auditors, accountants, lawyers, and consultants
• Integration partners, where required to provide requested services
• UAE government authorities, courts, regulators, or law enforcement bodies where required by law

Third-party service providers may access personal data only as necessary to provide services to OFreight AI and must protect such data through appropriate confidentiality, security, and contractual obligations.

OFreight AI is based in the United Arab Emirates. We may use cloud infrastructure, technology providers, AI service providers, and business systems located inside or outside the UAE.

This means your personal data may be transferred to, stored in, or processed in countries outside the UAE.

Where personal data is transferred outside the UAE, we will take appropriate steps required under UAE law to protect it. The UAE PDPL allows international transfers where the destination country has adequate personal data protection laws, or where appropriate contractual or legal safeguards are used. The law also recognizes contractual arrangements requiring the recipient to apply protections, controls, and requirements consistent with the UAE PDPL.

Where required, we may use:

• Data processing agreements
• Confidentiality obligations
• Contractual safeguards
• Security and access controls
• Vendor due diligence
• Transfer impact checks
• Consent or other lawful transfer mechanisms permitted by UAE law

We use reasonable technical, administrative, and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These measures may include:

• Encryption in transit
• Secure hosting environments
• Access controls
• User authentication
• Role-based permissions
• Logging and monitoring
• Firewall and network security
• Confidentiality obligations
• Internal data handling procedures
• Vendor security controls
• Backup and recovery procedures

The UAE PDPL requires controllers and processors to apply appropriate technical and organizational measures to maintain the confidentiality, privacy, integrity, and availability of personal data.

However, no electronic transmission or storage method is completely secure. We cannot guarantee absolute security.

If a data breach occurs that may affect the privacy, confidentiality, or security of personal data, we will take appropriate steps in accordance with UAE law.

Where required, we will notify the relevant UAE authority and affected data subjects within the legally required timeframe and provide information about the breach and the measures taken. The UAE PDPL requires notification to the data subject where a breach would prejudice the privacy, confidentiality, or security of personal data.

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by UAE law.

Retention periods may depend on:

• The nature of the data
• The purpose of processing
• Customer contract terms
• Legal, tax, accounting, or audit requirements
• Security and fraud prevention needs
• Dispute resolution or enforcement requirements
• User deletion requests

Demo request and contact form information may be retained for customer relationship management, sales follow-up, business records, audit, and legal purposes unless deletion is requested and legally permitted.

Customer platform data retention may be governed by a separate service agreement, subscription agreement, data processing agreement, or customer settings.

Subject to UAE law and applicable limitations, you may have the right to:

• Request information about how your personal data is processed
• Request access to your personal data
• Request correction of inaccurate or incomplete personal data
• Request deletion of your personal data
• Request restriction or suspension of processing
• Object to certain processing
• Withdraw consent where processing is based on consent
• Request transfer of your personal data to another controller, where technically feasible
• Object to decisions based solely on automated processing, including profiling, where applicable
• Submit a complaint to the relevant UAE data protection authority

The UAE PDPL grants data subjects rights including receiving information, data portability, correction or erasure, restriction or stopping of processing, and objection to automated decision-making and profiling.

To exercise your rights, contact us at:

info@circlebit.ae

We may need to verify your identity before processing your request. We may decline or limit requests where permitted by UAE law, including where data must be retained for legal, contractual, accounting, audit, security, dispute-resolution, or legitimate business reasons.

OFreight AI’s demo and contact forms are not intended to collect sensitive personal data.

Please do not submit sensitive personal data unless specifically requested and necessary for a service.

Sensitive personal data may include information relating to:

• Family or ethnic origin
• Political opinions
• Religious or philosophical beliefs
• Criminal record
• Biometric data
• Health, physical, psychological, mental, genetic, or sexual condition

The UAE PDPL includes these categories within sensitive personal data.

If sensitive personal data is required for a specific enterprise service, integration, legal requirement, or customer workflow, we will handle it in accordance with UAE law, applicable agreements, and appropriate security measures.

OFreight AI is intended for business and professional use. Our website and services are not directed to children.

We do not knowingly collect personal data from children. If we become aware that children’s personal data has been collected without proper authorization, we will take reasonable steps to delete it.

Where a customer uploads, connects, or processes personal data through OFreight AI, the customer is responsible for ensuring that it has the necessary authority, consent, notice, lawful basis, and rights to provide such data to OFreight AI.

Customers are responsible for:

• Informing their employees, users, customers, vendors, and partners about relevant processing
• Ensuring lawful collection and transfer of personal data to OFreight AI
• Managing user permissions and access rights
• Avoiding unauthorized upload of restricted or unnecessary sensitive data
• Reviewing AI outputs before acting on them
• Complying with UAE privacy, logistics, trade, customs, employment, and other applicable laws

Where OFreight AI processes data on behalf of a customer, OFreight AI may act as a processor, and the customer may act as the controller, depending on the service arrangement.

Our website or platform may contain links to third-party websites, embedded content, videos, APIs, or integrations.

We are not responsible for the privacy, security, or content practices of third-party services. You should review the privacy policies of third-party services before using them.

We may update this Privacy Policy from time to time to reflect changes in our services, technology, security practices, legal requirements, or business operations.

When we make material changes, we may notify users by posting an updated policy, changing the “Last Updated” date, sending notice by email, or providing other appropriate notice.

Your continued use of OFreight AI after updates are posted means you accept the updated Privacy Policy, where permitted by UAE law.

For privacy questions, requests, complaints, or concerns, please contact:

• CIRCLE BIT SOFTWARE SOLUTIONS TRADING L.L.C
• Office 2404, The Citadel Tower, Business Bay,
• Dubai, United Arab Emirates
• PO Box: 72101 Dubai, UAE
• Email: info@circlebit.ae