Privacy Policy

1. Introduction

Cybership Technologies Inc. (“Cybership,” “we,” “our,” or “us”) is a leading logistics, third-party logistics (3PL), and warehouse management system (WMS) provider. We offer services including inventory management, order fulfillment, shipping coordination, rate shopping, cycle counting, pick-and-pack operations, and warehouse solutions.

This Privacy Policy describes how Cybership collects, uses, shares, retains, and protects the personal information of individuals who use our websites, applications, and related services (collectively, our “Services”). By using our Services, you acknowledge the collection, use, disclosure, and processing of your information as described by this Privacy Policy.

Beyond this Privacy Policy, your use of our Services is also subject to the Cybership Terms of Service and any additional agreements you may enter into with us.

2. Definitions

For the purposes of this Privacy Policy:

You

means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.

Company

(referred to as "the Company," "We," "Us," or "Our") refers to Cybership Technologies Inc.

Affiliate

means any entity, subsidiaries, joint venture partners, or other companies under the control of Cybership Technologies Inc.

Account

means a unique account created for you to access our Service or parts of our Service.

Data Controller

means the entity that determines the purposes and means of processing Personal Data. Depending on the context, this may be a Cybership customer or Cybership.

Data Processor

means Cybership Technologies Inc. when processing Personal Data on behalf of a customer to provide the Services.

Business / Controller Activities

means situations where Cybership determines the purposes and means of processing, such as operating our website, managing direct customer relationships, account administration, security, billing, and legal compliance.

Website

refers to any publicly available online Cybership offering, including but not limited to the Cybership site at cybership.io.

Service

refers to any Cybership offering, product, or platform.

Service Provider

means any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, provide the Service on behalf of the Company, perform services related to the Service, or assist the Company in analyzing how the Service is used.

Personal Data

is any information that relates to an identified or identifiable individual.

Sensitive Personal Data

means Personal Data that reveals racial or ethnic origin, religious beliefs, health data, biometric data, sexual orientation, or similar categories as defined by applicable law.

Cookies

are small files that are placed on your computer, mobile device, or any other device by a website, containing the details of your browsing history on that website among its many uses.

Usage Data

refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

3. Information We Collect

3.1 Information You Provide

Registration Information. When you sign up for an account, register to use our Services, or sign up for emails or other updates, we collect your name, company name, email address, phone number, job title, and contact preferences.

Account Information. Information required to create and manage your account, including usernames, passwords, and security questions.

Billing and Payment Information. Including credit card numbers, billing addresses, bank account details, and transaction history. Payment information may be collected by our third-party payment processor on our behalf.

Communications. Records of your communications with Cybership, including emails, phone calls, chat messages, support inquiries, and any information you submit through forms or questionnaires.

Events. If you register for an event we host, whether in-person or online, we may collect relevant information such as your name, phone number, email address, and event-specific details.

3.2 Operational and Logistics Information

Order Data. Details of the orders you process through our platform, including shipping addresses, item descriptions, quantities, and tracking numbers.

Inventory Data. Information about your stock levels, locations within the warehouse, product identifiers, and allocation details.

Fulfillment and Delivery Data. Information on shipments, delivery dates, carrier information, and delivery confirmation.

3.3 Automatically Collected Information

Device and Browser Information. Such as your IP address, browser type and settings, operating system, device identifiers, and system activity.

Usage Data. Information about how you use our Services, including the pages you visit, features you interact with, session lengths and times, crash reports, and performance metrics.

Location Data. Data regarding your location, derived from your IP address or GPS data when using location-based services like delivery tracking or optimized routing.

Cookies and Similar Technologies. We and our third-party partners may collect information using cookies, pixel tags, or similar technologies. See Section 10 for details.

3.4 Information from Other Sources

We may receive information about you from other sources, including from third parties that help us update, expand, and analyze our records, identify new customers, or detect or prevent fraud. We may also receive information about you from social media platforms when you interact with us on those platforms.

4. Categories of Personal Data We Collect

The table below outlines the non-sensitive categories of Personal Data Cybership collects, the purpose of collection, and how it is handled.

Sale and Targeted Advertising Disclosure

• Sale of Personal Data: Cybership does not sell any category of Personal Data to third parties.
• Targeted Advertising: Cybership does not share Personal Data from authenticated Services with third parties for targeted advertising purposes. On our public website, the marketing technologies described in Section 10 may collect and use visitor identifiers for advertising and campaign measurement.
• Profiling: Cybership does not use Personal Data for profiling in furtherance of decisions that produce legal or similarly significant effects.

5. Categories of Sensitive Personal Data

If a specific engagement requires processing of Sensitive Personal Data, Cybership will obtain your explicit consent before any such processing and will apply enhanced security measures.

6. How We Use the Information We Collect

We use the information we collect for the following purposes:

• Service Provision: To manage your orders, process transactions, coordinate warehouse operations, and ensure timely fulfillment and delivery.
• Personalization: To tailor our Services to your specific needs, preferences, and operational requirements.
• Communication: To send you important updates, respond to your inquiries, and provide support related to your account and logistics operations.
• Security: To monitor and protect against security threats, fraud, and unauthorized access to our platform and Services.
• Analytics and Product Development:To analyze usage trends, measure performance, and optimize our platform's features for a better user experience.
• Compliance: To comply with legal requirements, including tax, regulatory, and contractual obligations.
• Aggregation: We may aggregate or anonymize Personal Data and use the resulting information for statistical analysis, benchmarking, or operational improvement. Anonymized data does not identify individuals.

7. How We Share the Information We Collect

7.1 Processors (Service Providers)

We work with trusted service providers who assist us in delivering our logistics Services. These providers process your data on our behalf and are contractually obligated to protect your information. They are not permitted to use your data for their own purposes. Our processors include:

Cybership conducts vendor assessments to ensure that third-party providers adhere to data protection standards. We enter into data processing agreements with processors requiring them to implement adequate security measures and comply with applicable data protection laws.

7.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity to ensure continuity of service. You will be notified if such a transfer occurs, and your information will remain subject to this Privacy Policy.

7.3 Legal Obligations

We may disclose your information if required by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements. We may also disclose your data to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others' rights, property, or safety.

7.4 With Your Consent

We may share your data with third parties when you explicitly consent to such sharing for specific purposes.

7.5 Transparency

Cybership is committed to transparency regarding legal requests for user data. If we receive a request from a government or law enforcement agency, we will notify the affected user unless prohibited by law.

8. Your Rights and Choices

Depending on your location and applicable law, you have the following rights regarding your Personal Data:

• Right to Access: Request a copy of the Personal Data we hold about you and how we use it.
• Right to Correct: Update or correct any inaccuracies in your Personal Data.
• Right to Delete: Request the deletion of your Personal Data, subject to certain legal exceptions.
• Right to Data Portability: Request that we provide your Personal Data in a structured, commonly used, and machine-readable format.
• Right to Restrict Processing: Request that we limit the processing of your Personal Data under certain circumstances.
• Right to Object: Object to our processing of your Personal Data if it is based on legitimate interests.
• Right to Withdraw Consent: Withdraw any consent you previously provided for the processing of your Personal Data at any time.
• Right to Opt-Out: Opt out of the sale of Personal Data (note: Cybership does not sell Personal Data) and sharing for targeted advertising.
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights.
• Right to Appeal: If you disagree with our decision about your request, you have the right to appeal.

8.1 How to Exercise Your Rights

You can submit a request to exercise your Personal Data rights by emailing us at jack@cybership.io. Please include “Privacy Rights Request” in the subject line.

To protect your privacy, we will verify your identity before processing your request. Verification will be conducted by sending a confirmation email to the address we have on file. We may request additional identifying information, such as the last four digits of a phone number or other account details provided during registration.

Response Timeline: We will respond to your request within 45 days (or within 15 days when required by applicable US Privacy Law). In certain cases, we may inform you that we need an additional 45 days to process your request. If we suspect fraudulent or malicious activity, we will delay acting on your request until we can verify your identity and the authenticity of the request.

We reserve the right to decline to process or charge a reasonable fee for requests that are manifestly unfounded, excessive, or repetitive.

8.2 Authorized Agents

You may designate an authorized agent to make a rights request on your behalf. Your authorized agent must provide verification of their authority in addition to the identity verification described above. Submit authorized agent requests to jack@cybership.io.

8.3 Communications Preferences

You can unsubscribe from our promotional and marketing emails via the unsubscribe link provided in each email or by adjusting your communication preferences in your account settings. You may continue to receive administrative messages necessary to service your account after opting out of promotional communications.

9. Data Retention

Cybership retains your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Actual retention periods may vary depending on the data type, business context, and applicable legal requirements. Our general retention guidelines are as follows:

Once data is no longer needed, it will be securely deleted or anonymized in accordance with our data retention schedules. We regularly review our data collection and retention practices to ensure we are not retaining excessive or unnecessary data.

10. Cookies and Tracking Technologies

Cybership uses cookies and similar tracking technologies to collect information about your usage of our platform and improve your experience. Cookies are small data files placed on your device when you visit our website.

10.1 Types of Cookies We Use

10.2 Managing Tracking Technologies

Analytics and marketing technologies load automatically on our public website pages. You can manage cookies and similar technologies through your browser settings, including blocking or deleting them, though doing so may affect your experience on our website. You may also contact us using the details in this Policy to exercise privacy rights available in your jurisdiction.

11. Data Security

Cybership takes the security of your data seriously. We employ a range of security measures designed to protect your Personal Data and operational data from unauthorized access, disclosure, alteration, or destruction.

11.1 Encryption

We use encryption to protect sensitive data both during transmission (TLS/SSL) and while at rest. Our infrastructure provider is SOC 2 Type 2 certified and provides encryption at rest, disk encryption, and encrypted private networking between services. This ensures that your personal and operational data remains secure at all times.

11.2 Access Controls

We restrict access to your Personal Data to authorized personnel who need access to perform their job functions. All personnel are required to adhere to strict confidentiality obligations.

11.3 Network Security

Critical services and data stores are not exposed to the public internet. Internal service communication is encrypted over private networking. Administrative access to infrastructure requires VPN authentication.

11.4 Regular Security Audits

We conduct regular security assessments to identify and address potential vulnerabilities. Our security protocols are continuously updated to adapt to emerging threats.

11.5 Incident Response Plan

Cybership has an incident response plan in place to address potential security breaches or data leaks. Our plan includes identifying the incident, containing its impact, investigating the cause, and notifying affected users and authorities as required.

11.6 Employee Training

Cybership provides data privacy and security training for its employees and contractors. These programs ensure that our staff understand their responsibilities in protecting user data and maintaining compliance with applicable data protection regulations.

12. International Data Transfers

Your data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that differ from your own. When transferring data outside of your jurisdiction, we ensure that appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable
• Compliance with international data transfer frameworks such as the EU-U.S. Data Privacy Framework
• Data localization where required by applicable law, ensuring that data centers within the required jurisdiction handle local data

For more information about how we transfer Personal Data internationally, or to obtain a copy of the safeguards we use, please contact us at jack@cybership.io.

13. Children's Privacy

Cybership's Services are not intended for children under the age of 16. We do not knowingly collect Personal Data from children under 16. If we become aware that we have inadvertently collected Personal Data from a child under 16, we will take steps to delete that information as quickly as possible. If you believe that we might have information from a child under 16, please contact us at jack@cybership.io.

14. Compliance with Global Data Protection Laws

Cybership complies with applicable data protection laws across all jurisdictions in which we operate, including but not limited to:

• European Union: General Data Protection Regulation (GDPR)
• United States: California Consumer Privacy Act (CCPA) and consumer privacy laws of Tennessee, Minnesota, Maryland, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia
• Canada: Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec Law 25
• Australia: Australian Privacy Principles (APPs)
• United Kingdom: UK GDPR and Data Protection Act 2018
• Switzerland: Swiss Federal Act on Data Protection (FADP)

We ensure that all Personal Data is processed lawfully, transparently, and fairly, regardless of where you are located.

14.1 Privacy by Design and Default

Cybership incorporates the principles of privacy by design and privacy by default into the development of its products and Services. Data protection is considered from the outset of new features and processes, and privacy-protective settings are enabled by default unless the user chooses otherwise.

14.2 Privacy Reviews

Cybership considers the privacy implications of new features and data processing activities during development. We aim to identify and mitigate risks associated with the collection, storage, and use of Personal Data before changes are deployed.

14.3 Legal Basis for Processing

Cybership processes Personal Data based on the following legal grounds: the necessity of the data for the performance of a contract; compliance with legal obligations; protection of vital interests; legitimate interests pursued by Cybership (unless overridden by the rights of the data subject); and your explicit consent where applicable.

15. Data Breach Notification

In the event of a data breach that may result in a risk to your rights and freedoms, Cybership will:

• Notify affected users and relevant regulatory authorities within 72 hours of becoming aware of the breach
• Provide information about the nature of the breach and the categories and approximate number of individuals affected
• Describe the likely consequences of the breach
• Detail the measures taken or proposed to address the breach, including measures to mitigate its adverse effects

16. Additional Rights Under GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following additional rights under the General Data Protection Regulation (GDPR):

• Right to Object: You may object to our processing of your Personal Data if it is based on legitimate interests, and you may object to processing for direct marketing purposes at any time.
• Right to Restrict Processing: You can ask us to suspend processing in specific cases, such as when you contest the accuracy of the data or believe processing is unlawful.
• Right to Data Portability: You can request a copy of your Personal Data in a structured, commonly used, and machine-readable format, and request transfer to another controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local supervisory authority. We encourage you to contact us first at jack@cybership.io to resolve any issues.

16.1 Data Subject Requests (DSRs)

Cybership provides a formal process for handling data subject requests under GDPR. To submit a DSR, contact us at jack@cybership.io. We will respond within the timelines required by applicable laws (generally 30 days). Identification may be required to verify the legitimacy of the request.

16.2 Automated Decision-Making and Profiling

Cybership may use automated decision-making in certain areas, such as optimizing logistics routes or analyzing operational efficiency. Where such processes significantly affect you, you have the right to request human intervention, express your point of view, or challenge the decision. Contact us at jack@cybership.io to exercise this right.

17. User Rights Under CCPA

Under the California Consumer Privacy Act (CCPA), California residents have the following specific rights:

• Right to Know: You can request information about the categories of Personal Data we have collected, the purposes for collecting it, and the third parties with whom we share it.
• Right to Delete: You can request the deletion of your Personal Data, subject to certain exceptions such as compliance with legal obligations.
• Right to Opt-Out of Sale: You have the right to opt out of the sale of your Personal Data. Cybership does not sell Personal Data; however, we fully respect your right to opt out.
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your CCPA rights.

To exercise your CCPA rights, email us at jack@cybership.io with the subject line “CCPA Rights Request.” We will respond within 45 days (or 15 days for opt-out requests).

17.1 Notice of Right to Opt-Out of Sale/Sharing

Cybership does not sell your Personal Data. Some analytics and advertising technologies described in Section 10 may involve disclosures that applicable law defines as sharing for targeted advertising. To request an opt-out or ask about your status, email us at jack@cybership.io.

17.2 Notice of Right to Limit Sensitive Personal Data

You have the right to limit certain uses of Sensitive Personal Data. Cybership does not intentionally collect or process sensitive categories such as health, biometric, religious, racial or ethnic origin, or sexual orientation data as part of its standard Services. When requested delivery workflows involve precise geolocation, we use it only as needed to provide the requested delivery or routing functionality.

18. Canadian Privacy Compliance

Cybership complies with all aspects of Canadian privacy regulations, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Law 25. Canadian residents have the following rights:

• Right to be informed about the collection and use of your Personal Data
• Right to access your Personal Data
• Right to rectification of inaccurate data
• Right to erasure of your Personal Data
• Right to withdraw consent at any time
• Right to restrict processing
• Right to data portability

For questions about Canadian compliance, contact our Data Privacy Officer at jack@cybership.io.

19. Third-Party Websites and Services

Cybership's Services may include links to third-party websites or services that are not controlled by us. We are not responsible for the privacy practices or content of such websites or services. We encourage you to review the privacy policies of any third parties you interact with through our platform. This Privacy Policy does not apply to your activities on third-party services or any information you disclose to third parties.

20. Changes to This Privacy Policy

Cybership may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by:

• Posting an updated Privacy Policy on our website with the revised “Last Updated” date
• Providing notice via email or other communication channels where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

21. Contact Us

If you have any questions about this Privacy Policy, your rights, or how we handle your Personal Data, please contact us:

Cybership Technologies Inc.

We are committed to addressing any concerns you may have and ensuring that your privacy is protected.