Privacy Policy

1 Who we are

Trazai, S.A. (“Trazai,” “we,” “us,” or “our”) is a freight audit and intelligence firm registered in the Republic of Panama (RUC: 1-NT-2-775046). We provide invoice auditing, carrier contract compliance, and freight intelligence services to enterprises across Latin America.

This Privacy Policy applies to our website at trazai.lat and to the personal and business data we process when delivering our services.

2 Data we collect

Information you provide

• Contact details: name, business email, phone number, and company name when you request an audit, complete a form, or contact us.
• Engagement data: carrier invoices, rate cards, contracts, and shipment manifests you share with us to perform an audit. This may incidentally contain names of your staff or counterparties.
• Correspondence: messages you send us by email, WhatsApp, or web form.
• WhatsApp alerts community: if you join our free "Alertas de Tarifas LatAm" WhatsApp community via the invite link, it is an announcements-only channel, only we (the administrators) can post, and other members cannot see you or your number. Your WhatsApp number and profile name are visible only to us as the community administrators, and we use them only to deliver the rate-alert announcements. We never share them with carriers or third parties. You may opt out at any time by leaving the community, after which we no longer have access to your number.

Information collected automatically

• Usage data: pages visited, referring URL, approximate location (derived from IP), browser and device type.
• Cookies and similar technologies: see Cookies below.

3 How we use data

• To deliver our freight audit services: parsing invoices, identifying billing errors, and producing recovery reports.
• To respond to your requests, schedule audits, and provide customer support.
• To send service-related communications and, where you have opted in, relevant updates.
• To operate, secure, and improve our website and services.
• To comply with legal, tax, and regulatory obligations.

4 Legal basis & our role

For the engagement data you share with us to perform an audit, Trazai acts as a data processor on your behalf; you remain the data controller. For website and contact data, we act as a data controller.

Freight invoices and supporting documents may contain personal data of third parties, for example the names, signatures, or contact details of drivers, consignees, and warehouse staff. We process this data solely to perform the audit you have engaged us for, under a Data Processing Agreement, and consistent with Colombia’s Statutory Law 1581 of 2012 and Mexico’s LFPDPPP. As the controller of that data, you are responsible for having a lawful basis to share it with us.

Depending on your jurisdiction, we rely on one or more of the following bases: performance of a contract, your consent, our legitimate interests in operating and securing our business, and compliance with legal obligations. We operate consistently with Mexico’s LFPDPPP, Colombia’s Statutory Law 1581 of 2012, and the EU GDPR where applicable.

5 Sharing & subprocessors

We do not sell your personal data. We share data only as needed to deliver our services and operate our business:

• Subprocessors: vetted infrastructure and tooling providers (e.g. enterprise cloud hosting) bound by contract to use data solely for service delivery.
• Carriers: only within dispute workflows you have explicitly approved. Your rate structures and contract terms are never disclosed to carriers without your authorization.
• Legal & compliance: where required by law, court order, or to protect our legal rights.

6 Retention

• Engagement files: original invoice files are automatically purged after 180 days unless a contract extension specifies otherwise.
• On termination: all client records, backups, and metadata are hard-deleted within 14 business days.
• Contact & correspondence: retained for as long as needed to manage our relationship and meet legal obligations, then deleted.

7 Security

We protect data with TLS 1.3 in transit, AES-256 at rest, per-tenant logical isolation, and a mutual NDA executed before any file is shared. Full detail is on our Security & Data Protection page.

No method of transmission or storage is perfectly secure, but we apply enterprise-grade controls and review them regularly.

8 Your rights

Subject to applicable law, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. In several Latin American jurisdictions these are known as ARCO rights (Access, Rectification, Cancellation, Objection).

To exercise any of these rights, contact us at privacy@trazai.lat. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

9 Cookies

We use a small number of cookies and similar technologies to make the site work and to understand how it is used. You can review and change your choices at any time via Cookie Preferences or through your browser settings.

10 International transfers

We are based in Panama and may process data on cloud infrastructure located in other countries (including the United States). Where data is transferred across borders, we apply appropriate safeguards and contractual protections consistent with applicable data protection law.

11 Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated “Last updated” date at the top of this page, and where appropriate we will notify you directly.

12 Contact us

For any privacy question or to exercise your rights, reach us at: