Privacy Policy

Cinch Technologies Ltd. provides a B2B software-as-a-service (SaaS) platform that helps logistics teams manage their spend in real-time ("Company," "we," "us," or "our"). Our platform and website (“Services”) are designed for enterprise use and primarily processes operational and commercial data, such as shipment metadata, event logs, and performance analytics. This data does not focus on individuals and is generally not about people or personal data. We do not offer services to consumers, and our platform is not intended for personal or household use.

While providing our services, Cinch may access and use limited personal data, such as names, work emails, and business contact details of individuals involved in our customers’ logistics operations. This may include employees of our customers, representatives of service providers or logistics partners, or other individuals participating in shipment workflows. In these contexts, Cinch acts as a ‘data processor’, meaning we process such data solely on behalf of our customers and in accordance with their documented instructions.

We are committed to the security and confidentiality of customer data and have implemented technical and organizational safeguards aligned with industry standards, including role-based access controls, data encryption in transit and at rest, and regular security reviews. Moreover, Cinch holds a SOC 2 Type II certification and follows its principles. 

This privacy notice describes how and why we collect, use, and share personal information when acting as a ‘data controller’. That is, when we decide what personal data to collect how it will be used. This typically occurs when you:

• Visit our website at https://www.cinchtry.com, or any website of ours that links to this privacy notice
• Engage with us in other related ways, including any sales, marketing, or events

For clarity, this notice does not apply to data that we process as a data processor on behalf of our customers through the Cinch platform. Such processing is governed by our agreements with those customers, including any applicable data processing agreements.

If you have any questions or concerns regarding this notice or our privacy practices, please contact us at privacy@cinchtry.com.

How do you exercise your rights?

The easiest way to exercise your rights is by contacting us via the following email address privacy@cinchtry.com. We will consider and act upon any request in accordance with applicable data protection laws.

What information do we collect?

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us, including when you express an interest in obtaining information about us or our products and services or otherwise when you contact us.

Personal Information Provided by You. The personal information (or personal data) we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following: names, email addresses and other contact details, the content of your inquiry or our conversations, professional information and background. 

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate our website and platform. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

The information we collect includes:

How do we process your information?

• Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. 
• Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout .

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To deliver and facilitate our Services.
• To send administrative information to you.
• To request feedback. We may process your information when necessary to request feedback and to contact you about your use of our Services. 
• To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
• To evaluate and improve our Services, products, marketing, and your experience. We may process your information when we believe it is necessary to identify usage trends, determine the effectiveness of our promotional campaigns, and to evaluate and improve our Services, products, marketing, and your experience.
• To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.

To comply with our legal obligations. We may process your information to comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.

What legal bases do we rely on to process?

We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in Canada, this section applies to you.

We process personal information in accordance with applicable Canadian privacy laws. In most cases, this means we rely on your consent — either express or implied — for purposes such as responding to inquiries, providing services, or communicating with you. You may withdraw your consent at any time by contacting us.

In limited circumstances, we may also process your information without consent where permitted by law, such as for fraud prevention, legal compliance, or where the information is publicly available.

If you are located in Israel

You are not legally obligated to provide us with personal data, and any such data is shared with us voluntarily  (for example, when you choose to visit our website, engage with our Services, or contact us in any way). By doing so, you consent to this privacy notice, including the collection, use, and sharing of your personal data as described here.

If you do not consent to the use of your personal data for certain purposes, we may not be able to provide you with some of our services. For example:

• Without identifying information, we may be unable to register you or provide support;
• Without your contact details or preferences, we may not be able to send you relevant updates or offers;
• Without logs or service-related interactions, we may be limited in how we ensure service quality or address your requests.

When and with whom do we share your personal information?

We may share information in specific situations described in this section and/or with the following categories of third parties.

Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents ("third parties") who perform services for us or on our behalf and require access to such information to do that work. The categories of third parties we may share personal information with include Cloud Computing Services, Data Analytics Services, Data Storage Service Providers and Finance & Accounting Tools.

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.

Law Enforcement. We may disclose Personal Data to a third party where we are legally required to do so in order to comply with any applicable law, regulation, legal process or governmental request, including government authorities, law enforcement and others.

Your personal information may be transferred to and processed in countries outside your country of residence, including Israel (where we are headquartered) and other jurisdictions where our service providers operate. Where required by law, we take appropriate measures to ensure such transfers provide an adequate level of data protection, including through contractual safeguards such as Standard Contractual Clauses.

How long do we keep your information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

How do we keep your information safe?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

Do we collect information from minors?

No. Our services are intended for companies and business users, not for personal or household use, and therefore, we do not knowingly collect or target information from individuals under 18.

What are our privacy rights?

Depending on your location and applicable data protection laws, including the EU and UK General Data Protection Regulation (GDPR), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and Israel’s Privacy Protection Law, you may have certain rights regarding your personal data. These may include the right to:

California residents additional information:

• Request access to the personal information we hold about you.
• Request correction, deletion, or updating of your data.
• Object to or restrict certain types of processing.
• Withdraw consent where processing is based on your consent.
• Request data portability, where applicable.
• If we are relying on your consent to process your personal information, depending on the applicable law, you may have the right to withdraw your consent at any time. 
• We will not discriminate against you for exercising your privacy rights.

To exercise your rights, ‍or if you have questions or comments about your privacy rights, you can contact us at privacy@cinchtry.com. We will review and respond to your request in accordance with the applicable law. We may need to verify your identity before fulfilling certain privacy rights requests. We will only use the information provided in this context for verification purposes. If you believe your rights have been infringed, you may also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

Controls for do-not-track features:

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA), including the right to request access to your personal information, request deletion, or ask for details about how we use your data. You may also have the right to opt out of the “sale” of your personal information, where applicable.

We do not sell or share personal data as defined under applicable U.S. privacy laws. 

‍What categories of personal information do we collect?

We have collected the following categories of personal information in the past twelve (12) months:
‍