Privacy Policy

NRA Ledger (“we”) provides NRA Ledger at nraledger.com to businesses. This policy explains what personal data we process when you visit the site or use the service, and the choices you have.

What we collect

• Account details: your name, work email address and a salted hash of your password. We never store your password itself.
• Sign-in sessions: a session cookie, plus the IP address and browser user agent recorded when you sign in, so you can stay signed in and we can protect your account.
• Workspace details: the workspace name, its members and their roles, and the trial and subscription status.
• Account emails: the address and contents of messages we send you, such as password reset links.
• Content your company adds: carrier buy rates, quotes and NRAs, shipper companies and the names, titles and email addresses of their representatives, shipments, and notes.
• Acceptance data entered by your company’s shippers on an acceptance link: name, title, email address, the time, and the IP address and browser user agent of the device used. We record these facts; we do not verify anyone’s identity or authority.
• Evidence files your company uploads, such as an email or a signed PDF showing an acceptance.
• Emails the service writes, such as acceptance links, confirmations and payment links, kept in a private outbox.
• Product events (for example, that a quote was issued or a form was rejected) and error reports, so we can see where the product fails users and fix it.

Your company’s shippers

For the data your company enters or collects about its shippers and their representatives, your company is the controller and we process it on its behalf, only to provide the service.

How we use it

We use this data to create and secure your account, provide the service, send messages you request, answer support requests and meet legal obligations. We do not sell personal data, do not use it for advertising, and use no advertising trackers.

Cookies

We use a strictly necessary cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Sharing

We share personal data only with service providers that host and operate the service for us, under contracts that limit their use of it, or when the law requires it. Your company’s workspace is visible only to its members.

Retention

We keep account and workspace data while your account is open, including after a subscription ends so your company can read and export its records. When the owner deletes the workspace, we delete its data, its files and its members’ accounts, except where we must keep records by law.

Your rights

You can ask to access, correct, export or delete your personal data, or object to how we use it, by emailing [email protected]. If you use the service through your employer, your employer controls the workspace data and we will help it respond to your request.

Contact

Questions about this policy go to [email protected]. If we change it materially, we will update this page before the change takes effect.