BorderConnect

Privacy Policy

Last updated May 13, 2026

BorderConnect provides cross-border eManifest and customs software to highway carriers, customs brokers, and logistics professionals across Canada, the United States, and Mexico. This policy explains what information we collect, how we process it, how Customer Data is handled, and the rights you have. We do not sell personal information.

Section 01

Overview

This Privacy Policy describes how Border Connect Inc., an Ontario corporation with offices at 1801 Walker Road, Second Floor, Windsor, Ontario, Canada N8W 3P3 (“BorderConnect,” “we,” “us,” or “our”), collects, uses, discloses, and protects information in connection with the BorderConnect software platform and related services (the “Services”). “BorderConnect” is a trademark of Border Connect Inc. and is used in this policy to refer both to Border Connect Inc., as the controller of personal information, and to the BorderConnect software platform that Border Connect Inc. operates; the intended meaning is determined by context. Border Connect Inc. is the controller of personal information processed under this Privacy Policy.

BorderConnect provides software and related services to trucking, customs, and logistics businesses operating across the U.S.-Canada and U.S.-Mexico borders. Our customers and their authorized users may submit, connect, upload, transmit, annotate, or process information through the services — including manifest data, shipment and trip records, driver and equipment records, supporting documents, connected mailbox content, OCR text, AI outputs, comments, and audit logs.

This policy distinguishes between two categories of information:

  • BorderConnect-Controlled Data — information BorderConnect collects directly, such as website, marketing, account, billing, support, security, and usage data.
  • Customer Data — information our customers and their authorized users submit, connect, upload, or otherwise process through the services.

As between BorderConnect and the customer, the customer owns or controls Customer Data. BorderConnect processes Customer Data only to provide, secure, support, improve, and operate the services, as described in this privacy policy, our agreements with customers, and applicable law.

Because we operate at the U.S.-Canada and U.S.-Mexico borders, much of the information submitted through BorderConnect is required by law to be transmitted to government agencies, including U.S. Customs and Border Protection (CBP) and the Canada Border Services Agency (CBSA).

This policy applies to borderconnect.com, our web application, our mobile eManifest App, our eManifest API, and any white-labelled portal we operate on behalf of a service provider.


Section 02

Information We Collect

We collect only the information we need to operate the service, file manifests on your behalf, bill you, support you, and improve the platform. The categories below describe what we collect and where it comes from.

1. Account and contact information

When your company signs up for BorderConnect or a user is added to an existing account, we collect: company name, business address, phone number, billing contact, individual user names, work email addresses, usernames, and passwords (stored as a one-way hash). For carriers and brokers, we also collect business identifiers used at the border, such as your SCAC code, ACI carrier code, bond number, MC/DOT number, and IRS or Business Number.

2. Operational Customer Data

To file manifests and run cross-border operations, your authorized users submit Customer Data about your trips, shipments, drivers, trucks, trailers, brokers, shippers, and consignees. This typically includes:

  • Driver information required by customs — full name, date of birth, citizenship, gender, FAST card or passport details, license details, and (for some programs) photo identification.
  • Equipment information — truck and trailer numbers, license plates, VINs, and dimensional data.
  • Shipment information — shipper, consignee, broker, commodity descriptions, weights, values, ports of entry, and supporting documents your users upload (invoices, BOLs, certificates of origin, etc.).
  • Derived data generated by the services — OCR text extracted from documents, fields extracted from messages or attachments, message-to-shipment links, labels, annotations, comments, assignments, workflow status, and audit logs.

The customer is responsible for the lawful collection and use of personal information about drivers, brokers, vendors, consignees, and other third parties that the customer submits or makes available through the services, and for any required notices or consents from those individuals.

3. Billing and payment information

When you pay for the Services — including invoice and balance payments you submit through the Make a Payment page inside the BorderConnect application — we collect billing contact details, the BorderConnect account and invoice the payment is being applied to, and the amount paid. We use Stripe, Inc. as our primary payment processor. Full payment-card numbers, CVV codes, and bank-account numbers are entered directly into Stripe’s secure, PCI DSS-compliant payment form embedded in the Make a Payment page and other payment flows, and are transmitted directly to Stripe; they are not stored on BorderConnect servers. BorderConnect retains only a tokenized reference to the payment method, the card brand and last four digits, the cardholder name and billing address, the transaction amount and currency, the Stripe transaction identifier, and the payment status, which we use for receipts, reconciliation, refunds, chargeback handling, fraud prevention, and recordkeeping. Stripe processes payment information as an independent controller and processor under its own privacy notice and merchant terms, available at stripe.com/privacy, in addition to acting as a subprocessor on our behalf for the limited information BorderConnect provides to Stripe to initiate and reconcile transactions.

4. Device, log, and usage data

When you use the website, the web application, the eManifest API, or the mobile eManifest App, our servers automatically record information such as IP address, browser type and version, device identifiers, operating system, referring page, the pages and features you accessed, timestamps, and error diagnostics. We collect this information for security, analytics, troubleshooting, fraud prevention, and service administration. Depending on context, this information may be personal information under applicable law.

5. Marketing and website data

On our public website we collect basic analytics about how visitors arrive and move through the site (see Advertising & Analytics), and we collect the information you voluntarily provide when you request a demo, contact our sales team, or subscribe to a newsletter.

6. Phone support communications

When you contact us by telephone for sales, support, or customer-service purposes — including our toll-free line at 1-800-596-5176 — your call is handled through our primary cloud telephony provider, RingCentral, Inc. Calls may be recorded and stored so that we can: (a) verify the accuracy of information exchanged during the call; (b) train, coach, and evaluate our support team; (c) perform quality assurance and analytics to improve our support experience; and (d) maintain a record of customer interactions for dispute resolution and audit purposes. In connection with these calls, we typically process your phone number, the date, time, and duration of the call, the audio recording, call metadata (such as routing, queue, and disposition data), and any information you choose to provide during the call. Recordings and associated metadata are stored by RingCentral on our behalf as a subprocessor under contractual confidentiality, security, and use restrictions consistent with this policy and applicable law, and are accessed only by authorized BorderConnect personnel for the purposes described above. Where required by applicable law, callers are provided with notice of the recording at the start of the call. By continuing the call after that notice, you consent to the recording and storage of the call on these terms; if you do not wish your call to be recorded, please contact us by email at support@borderconnect.com instead.

7. Chat support communications

When you contact us through the live chat feature on the BorderConnect website or web application for sales, support, or customer-service purposes, your chat session is handled through our primary chat provider, Zoho Corporation Pvt. Ltd., using its Zoho SalesIQ chat platform. Chat sessions are recorded and stored so that we can: (a) respond to your request and follow up where needed; (b) train, coach, and evaluate our support team; (c) perform quality assurance and analytics to improve our support experience; and (d) maintain a record of customer interactions for dispute resolution and audit purposes. In connection with these chats, we typically process the name and email address you provide to start or identify the chat, the full transcript of messages you exchange with us, and associated session metadata (such as date, time, page visited, IP address, browser, device, referring URL, and chat-routing or queue information). Chat transcripts, visitor identifiers, and associated metadata are stored by Zoho on our behalf as a subprocessor under contractual confidentiality, security, and use restrictions consistent with this policy and applicable law, and are accessed only by authorized BorderConnect personnel for the purposes described above. By starting or continuing a chat session, you consent to the recording and storage of the chat on these terms; if you do not wish your chat to be recorded, please contact us by email at support@borderconnect.com instead.

8. Optional Google account data (Mail Client)

If you choose to enable the BorderConnect Mail Client and connect a Google account, we access certain Google user data on your behalf. This is described in detail in the Google User Data & Mail Client section below.


Section 03

How We Use Information

We use the information described above for the following business purposes, subject to your consent and choices where required by applicable law:

  • Deliver the service. Authenticate users, run the application, transmit eManifests and related messages to customs authorities, and generate barcodes and lead sheets.
  • Customer support. Respond to your questions, help you fix rejected manifests, train new users, provide our optional customs consulting services, and review recorded phone support calls and chat support transcripts for quality assurance, training, and analytics as described under Phone support communications and Chat support communications in the previous section.
  • Billing. Generate invoices, process payments, prevent fraud, and collect amounts owed.
  • Security and reliability. Detect and respond to abuse, fraud, security incidents, and outages; investigate suspected violations of our terms; and keep audit logs of significant actions.
  • Operate AI, OCR, and automation features as described in the dedicated section below.
  • Improve the platform. Analyze aggregate usage to fix bugs, improve performance, and design new features.
  • Communicate with you. Send service notices, security alerts, training resources, regulatory updates from CBP/CBSA, and (where you have opted in) marketing communications.
  • Legal compliance. Comply with applicable laws, customs regulations, lawful requests from government agencies, and our own legal obligations.

We do not sell personal information, and we do not use Customer Data or Google User Data to train generalized machine-learning or artificial-intelligence models. The limited service-delivery uses of Customer Data by AI and OCR providers are described in AI, OCR & Automation.


Section 04

Optional add-on BorderConnect Mail Client

Google User Data & Mail Client

The BorderConnect Mail Client is an optional add-on to our core software. This section applies only if you choose to enable the Mail Client and connect your Google account to it. If you don't use the Mail Client, BorderConnect does not request, access, store, or otherwise process any Google user data described below — you can use the rest of BorderConnect without ever granting these permissions.

When you do connect your Google account to the Mail Client, BorderConnect uses Google APIs to deliver a full email experience inside our platform, and to power optional features such as OCR, shipment linking, shared inboxes, annotations, and workflow automation. The rest of this section explains exactly what Google account data we access, why we need it, and how we handle it.

Limited Use Disclosure

BorderConnect's use of and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.

BorderConnect will not transfer, sell, or use Google User Data — including any data derived from Google User Data — for advertising, data brokerage, creditworthiness assessment, or to create, train, or improve generalized AI or machine-learning models, advertising models, data-brokerage products, creditworthiness models, or any model that is not specific to the user-facing feature for the applicable user or customer.

In plain terms: we only use your Google data to power features you're actively using in the Mail Client, we don't sell it, we don't use it for advertising, we don't use it to train AI models, and humans don't read it except in the narrow cases described in section 5 below.

1. Scopes we request and why

We request only the scopes necessary to operate the Mail Client. We do not request anything we don't actively use.

  • Profile & identity Non-sensitive userinfo.profile, openid Used to identify your Google account and associate it with your BorderConnect login. Lets us show your name and avatar inside the Mail Client.
  • Contacts (People API) Sensitive https://www.googleapis.com/auth/contacts Used to autocomplete recipients when you compose an email and to let you add new contacts directly from the client. Contacts are fetched on demand for the compose UI.
  • Gmail (Gmail API) Restricted https://mail.google.com/ Required because BorderConnect Mail Client is a full email client. Used to read your messages so they can be displayed in your inbox, to compose and send messages you write, to organize messages (labels, threads, archive), and to delete messages at your request.

2. Data minimization

We only access the data needed to power the features you and your coworkers are actually using:

  • Emails are fetched as needed from Gmail to render your inbox and the message you're viewing.
  • Contacts are queried only when needed to populate the autocomplete list while you're composing.
  • No additional scopes are requested beyond those listed above.

3. Where your data lives

BorderConnect does not maintain a parallel copy of your entire mailbox. However, if you use OCR, annotation, shared inbox, shipment-linking, or automation features, BorderConnect may process message content, metadata, and attachments that are selected by you, made available through the connected mailbox, or processed under rules you configure. To make those features work across your account and authorized coworkers, we may store derived data such as:

  • OCR text and fields extracted from email attachments;
  • extracted trip, shipment, or document fields;
  • labels, annotations, message-to-shipment links, comments, assignments, and workflow status;
  • audit logs of who did what and when within the Mail Client.
  • OAuth tokens issued by Google are stored encrypted on our servers so you don't have to re-authenticate on every action. They are accessible only to the systems that need them to make API calls on your behalf.
  • Contact lists retrieved from the People API are used only to power autocomplete and are not retained beyond what is needed for that feature.

4. No selling, advertising, or AI training on your data

  • We do not sell Google User Data or data derived from Google User Data.
  • We do not share it with advertisers, data brokers, or any party for advertising purposes.
  • We do not use Google User Data to serve ads — including retargeting, personalized, or interest-based advertising.
  • We do not use Google User Data, or data derived from Google User Data, to create, train, or improve generalized AI or machine-learning models, advertising models, data-brokerage products, creditworthiness models, or any model that is not specific to the user-facing feature for the applicable user or customer, consistent with the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy.

5. Human access

No BorderConnect employee or contractor reads your Gmail messages or contacts as a routine part of their job. A human at BorderConnect may access Google User Data only when:

  • You give explicit permission — for example, you ask our support team to look at a specific issue and authorize them to view a specific message or thread.
  • It is necessary for security — for example, investigating a suspected account compromise, fraud, or abuse of the service.
  • It is legally required — for example, in response to a valid legal process.

In all cases, access is logged, scoped, approved, and limited to the minimum needed for the task.

6. Your control

  • Revoke access at any time. You can revoke BorderConnect's access to your Google account from your Google account at myaccount.google.com/permissions. Revoking access immediately stops BorderConnect from making future API calls to the connected Google account.
  • Revocation does not automatically delete Customer Data. Revoking access does not, on its own, delete Customer Data, annotations, extracted fields, audit logs, shipment records, or other data already stored in BorderConnect. Those are retained and deleted according to your account settings, your agreement with us, recordkeeping requirements, and applicable law.
  • Request deletion. You can ask us to delete the OAuth tokens we hold for your account, and to delete Customer Data we hold for you (subject to legal and contractual retention obligations), by contacting our support team.

Section 05

AI, OCR & Automation

BorderConnect uses artificial intelligence, optical character recognition (OCR), machine learning, and automation service providers — including OpenAI, Anthropic, and Google, alongside other providers identified in our subprocessor documentation — to process Customer Data as needed to provide user-facing BorderConnect features.

These features may include:

  • OCR of documents and email attachments;
  • extracting trip, shipment, or document fields from text and images;
  • classifying or linking emails to shipments;
  • generating summaries or draft replies;
  • detecting likely errors and recommending workflow steps;
  • assisting with actions that authorized users initiate or configure.

1. No training on your data by default

We do not permit AI service providers to use Customer Data or Google User Data to train, fine-tune, or otherwise improve generalized AI or machine-learning models unless the customer expressly opts in or agrees otherwise in a separate written agreement.

2. Service-delivery processing

Depending on the provider, endpoint, feature, and configuration, AI and OCR providers may temporarily process and retain prompts, inputs, outputs, files, metadata, abuse-monitoring logs, cached data, grounding data, or application state. We configure AI and OCR providers to disable generalized model training on Customer Data and Google User Data and to minimize retention where commercially and technically available. Current provider-specific retention, training, and processing details — for providers such as OpenAI, Anthropic, and Google Cloud — are described in our subprocessor documentation, which we update as provider terms change.

3. Human review and accuracy

AI- and OCR-generated outputs may be inaccurate, incomplete, delayed, or unsuitable for a particular purpose. Authorized users are responsible for reviewing and approving outputs before relying on them for customs filings, financial decisions, regulatory submissions, safety decisions, employment decisions, or external communications. BorderConnect does not provide legal, customs brokerage, tax, or compliance advice through AI or OCR features.

4. Agentic actions

Some automation features can act on behalf of the customer using rules, credentials, integrations, or permissions configured in the customer's account. Unless a feature is expressly configured by the customer for automatic execution, AI-generated actions are suggestions that require human approval. Where the customer enables automatic execution, the customer is responsible for monitoring those configurations and for the actions taken under them.

5. Google User Data and AI features

Where AI or OCR features process Google User Data, those features remain subject to the Limited Use restrictions described in the Google User Data & Mail Client section, including the prohibition on using Google User Data, or data derived from Google User Data, to train or improve generalized AI or machine-learning models.


Section 06

Customs & Government Submissions

BorderConnect’s core function is transmitting electronic manifests and related messages to government agencies on your behalf. When you submit a manifest, in-bond, or related message, the data is sent to the agency you have selected, including:

  • U.S. Customs and Border Protection (CBP) — ACE eManifest, U.S. in-bond filings (QP), and related messages.
  • Canada Border Services Agency (CBSA) — ACI eManifest, PARS, RNS Release Notifications, and Warehouse Arrival Certification Messages (WACM).

Once data is submitted to a government agency, its handling is governed by that agency’s laws and policies, not by this privacy policy. BorderConnect cannot retract, modify, or delete data that you have already transmitted to CBP or CBSA; corrections must be made by submitting an amendment through the appropriate program.

We may also be required to disclose information to law enforcement, regulators, or courts in response to a valid subpoena, court order, or other lawful request. Where we are permitted to do so, we will give the affected customer notice before responding.


Section 07

Cookies & Local Storage

We use cookies, similar technologies (such as browser local storage), and mobile device identifiers for the following purposes:

  • Essential cookies keep you logged in, remember which company you are working in, and protect against cross-site request forgery. These cookies are required for the application to function.
  • Preference cookies remember your settings, such as preferred columns or display options.
  • Analytics and marketing cookies (described in the next section) help us understand how visitors use our public website.

You can clear or block cookies and local storage through your browser settings. If you block essential cookies, parts of the BorderConnect application may not function correctly.


Section 08

Online Advertising, Analytics & Attribution

We use Google Ads (including remarketing) and Google Analytics to measure the performance of our public marketing and to display relevant ads to people who have visited BorderConnect.com. These tools collect online identifiers, device and browser information, usage events, referral information, and similar public-website analytics data, which may be personal information depending on context. They do not give Google or advertising providers access to your BorderConnect account, Customer Data, Google User Data, Mail Client mailbox, customs submissions, or AI / OCR outputs.

We do not use Customer Data, customs submissions, Google User Data, or AI / OCR outputs for any advertising or analytics purpose.

If you’d like to opt out of online advertising through your browser, you can do so via the Network Advertising Initiative or by adjusting your Google Ads Settings.

1. Marketing analytics and attribution data

To better understand how users discover BorderConnect and to improve our registration experience, we collect “attribution data” on our public website.

  • UTM parameters. When you arrive via a marketing link, we collect UTM tags identifying the source (e.g. Google), the medium (e.g. CPC or email), and the specific campaign that led you to us.
  • Referral data. We record the website or platform you visited immediately before arriving at BorderConnect.
  • Session information. We track your journey through our registration flow to identify where users might encounter friction.

2. Why we collect this data

We use this information for these business purposes, subject to your consent and choices where required by applicable law:

  • Optimize registration. Ensure our sign-up pages are intuitive and functional.
  • Measure marketing ROI. Ensure our advertising reach is efficient and relevant to the trucking and logistics industry.
  • Personalize onboarding. Provide relevant resources based on the specific service you were seeking when you found us.

3. Technologies used (local storage)

In addition to traditional cookies, we use browser local storage to maintain attribution data. Local storage is more persistent than a session cookie and lets us deliver a consistent experience — and accurately attribute your sign-up to the correct source — even if you leave our site and return later to finish registering.

Where third-party analytics partners such as Google Analytics 4 are involved, the data is processed in aggregated form.

4. Your choices and opt-outs

We believe in giving you control over your data. If you prefer not to be tracked via these methods:

  • Clear browser data. You can clear your browser's local storage or site data at any time through your browser settings to remove existing attribution tags.
  • Industry standards. You can use the Network Advertising Initiative opt-out tool at optout.networkadvertising.org.

Section 09

Information Sharing & Subprocessors

We do not sell, rent, or trade personal information. We share information only in the limited circumstances described below.

1. Within your company and shared inboxes

Authorized users on the same BorderConnect account can see the trips, shipments, drivers, equipment, and other operational data belonging to that account, subject to the permissions configured by your account administrator. Depending on customer settings and user permissions, authorized coworkers in the same BorderConnect account may also be able to view connected mailbox content, attachments, OCR results, shipment links, annotations, comments, assignments, and workflow history. Account administrators are responsible for configuring permissions and removing access when users leave or change roles.

2. Government agencies

Manifest and in-bond data is transmitted to the customs authority you have selected (CBP, CBSA, or others). See Customs & Government Submissions above.

3. Service providers and subprocessors

We use service providers and subprocessors to host, secure, support, analyze, and operate the services. They process information only on our instructions and are bound by contractual confidentiality, security, and use restrictions consistent with this policy and applicable law. BorderConnect remains accountable for personal information that we transfer to a service provider for processing. Typical categories include:

  • Cloud hosting and infrastructure providers that run our servers, databases, storage, and networks.
  • AI, OCR, and automation providers — including OpenAI, Anthropic, and Google — that process Customer Data on our instructions to deliver AI and OCR features.
  • Payment processors that process credit-card, ACH, and other payments for subscription billing and customer-initiated invoice and balance payments. Our primary payment processor is Stripe, Inc., which handles payment-card and bank-account data submitted through the Make a Payment page and other payment flows inside the BorderConnect application, as described under Billing and payment information in the Information We Collect section.
  • Email, telephony, and fax providers used for service notices, support, and the optional Mail Client. Our primary telephony provider is RingCentral, Inc., which provides our toll-free support line and hosts the call recordings and associated metadata generated on that line, as described under Phone support communications in the Information We Collect section.
  • Live chat provider used for in-product and website chat support. Our primary chat provider is Zoho Corporation Pvt. Ltd., operating the Zoho SalesIQ chat platform, which hosts chat transcripts, visitor identifiers (including the name and email address you provide), and associated session metadata, as described under Chat support communications in the Information We Collect section.
  • Analytics and advertising providers as described in the previous section.
  • Error monitoring, support, and security tools that help us detect and respond to outages, bugs, and abuse.

A current list of our subprocessors, including processing purposes and locations, is available on request and through our subprocessor documentation.

4. White-label and reseller partners

Some service providers and customs brokers resell BorderConnect under their own brand. If you registered through a white-labelled portal, your account information is shared with that partner so they can provide you with sales, billing, and support services.

5. Business transfers

If BorderConnect is involved in a merger, acquisition, financing, or sale of assets, customer information may be transferred as part of that transaction. We will require the acquiring party to honour the commitments in this policy or notify you of any material changes.

6. Legal and safety reasons

We may disclose information if we believe in good faith that doing so is necessary to comply with the law, enforce our terms, protect the rights or safety of BorderConnect, our customers, or the public, or investigate fraud or abuse.


Section 10

International Data Transfers

BorderConnect is headquartered in Ontario, Canada. Because we serve cross-border carriers operating between Canada, the United States, and Mexico, and rely on service providers in multiple jurisdictions, information may be processed and stored in Canada, the United States, Mexico, and other jurisdictions where BorderConnect or its service providers operate. Examples of cross-border processing include:

  • Manifest data destined for CBP is transmitted to U.S. government systems.
  • Manifest data destined for CBSA is transmitted to Canadian government systems.
  • AI, OCR, hosting, and other service providers may operate in the United States or other countries.

Personal information processed outside your province, state, or country may be subject to the laws of that jurisdiction, including lawful access by courts, law enforcement, regulators, or national security authorities. BorderConnect remains responsible for personal information under its control and uses contractual and other safeguards to require comparable protection from its service providers.


Section 11

Data Retention

We retain Customer Data and other information for as long as needed to provide the services, comply with customer instructions, maintain business records, resolve disputes, enforce agreements, meet legal or regulatory obligations, and maintain security and audit logs. In practice:

  • Account and operational Customer Data is retained while the account is active and for a period after closure to satisfy customs recordkeeping, tax, and audit requirements. Cross-border records are subject to multi-year retention requirements under U.S. and Canadian customs law.
  • Billing records are retained for as long as required by tax and accounting laws in our jurisdiction.
  • Diagnostic and security logs are retained for a limited period (typically days to months) to support security and troubleshooting.
  • Phone support call recordings and associated metadata are stored by RingCentral on our behalf and retained for as long as needed for the quality-assurance, training, analytics, dispute-resolution, and recordkeeping purposes described in the Information We Collect section, after which they are deleted or anonymized in accordance with our retention schedule and applicable law.
  • Chat support transcripts, visitor identifiers, and associated metadata are stored by Zoho on our behalf and retained for as long as needed for the quality-assurance, training, analytics, dispute-resolution, and recordkeeping purposes described in the Information We Collect section, after which they are deleted or anonymized in accordance with our retention schedule and applicable law.
  • Mail Client — OAuth tokens are retained only while the integration is enabled or as otherwise needed to administer or secure the account.
  • Mail Client — cached email content is retained only as needed to serve the feature you are using.
  • Mail Client — derived data — including OCR text, extracted fields, labels, annotations, message-to-shipment links, comments, assignments, workflow status, and audit logs — may be retained with the customer's BorderConnect account unless deleted under account settings, agreement terms, or applicable law.

When information is no longer needed, we delete it or render it irreversibly anonymized.


Section 12

Your Privacy Rights

Depending on where you live, you may have specific rights over your personal information under laws such as Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial laws (including Quebec’s Law 25), U.S. state privacy laws, and Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). These rights generally include:

  • Access. Request a copy of the personal information we hold about you.
  • Correction. Ask us to fix inaccurate or incomplete information.
  • Deletion. Ask us to delete personal information, subject to legal and contractual retention obligations.
  • Withdraw consent for processing that relies on consent, including marketing communications.
  • Object to processing of your information for direct marketing.
  • File a complaint with your local data protection authority (for example, the Office of the Privacy Commissioner of Canada or your provincial regulator).

Quebec residents

Under Quebec’s private-sector privacy law (commonly referred to as Law 25), you have the rights described above as well as the right to receive certain personal information in a structured, commonly used technological format and to file a complaint with the Commission d’accès à l’information du Québec. BorderConnect’s privacy officer is identified at the bottom of this page.

Mexican residents

Under the LFPDPPP, you may exercise your ARCO rights — access, rectification, cancellation, and opposition — and withdraw consent for the processing of your personal data. To exercise these rights, contact our privacy team using the details at the bottom of this page.

U.S. residents

Where U.S. state privacy laws apply to our processing, we will respond to requests in accordance with those laws. BorderConnect does not sell personal information and does not use Customer Data for cross-context behavioural advertising.

Routing of individual requests

Where BorderConnect processes personal information on behalf of a customer — for example, information about drivers, brokers, consignees, or coworkers within the customer’s account — the customer is the party responsible for the data, and we act on their instructions. If you are an employee, driver, contractor, or other individual whose information was provided by a BorderConnect customer, please direct your request to the customer first. We will assist them in responding.

To exercise any of your rights, contact us using the details at the bottom of this page. We will respond within the timeframes required by applicable law. To protect your information, we may need to verify your identity before acting on a request.


Section 13

Security

We use a layered set of administrative, technical, and physical safeguards to protect personal information, including:

  • Encryption of data in transit (HTTPS / TLS) and encryption of sensitive credentials at rest.
  • Role-based access control, least-privilege administration, and audit logging of significant actions.
  • Regular software updates, vulnerability monitoring, and infrastructure hardening.
  • Background screening, confidentiality agreements, and ongoing privacy and security training for personnel.
  • Backups and disaster-recovery procedures so that your data is recoverable in the event of an incident.

No method of transmission or storage is 100% secure. If we become aware of a security incident that affects your personal information, we will notify you and the appropriate regulators in accordance with applicable breach-notification laws.


Section 14

Children’s Privacy

BorderConnect is a business-to-business platform for licensed carriers and customs professionals and is not directed to children. We do not knowingly collect personal information from individuals under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.



Section 16

Service Communications

Transactional and administrative messages. We send messages necessary to operate the service — including billing notices, security alerts, manifest-status notifications, regulatory updates affecting ACE/ACI programs, and important account changes. Because these are required to provide the service, you cannot unsubscribe from them while your account is active.

Marketing communications. Product newsletters, promotional announcements, and similar messages are separate. You may opt out at any time using the unsubscribe link in the email or by contacting us. In Canada, we handle commercial electronic messages in accordance with Canada’s Anti-Spam Legislation (CASL).


Section 17

Governing Law

This privacy policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable in Ontario, without regard to conflict-of-laws principles. Nothing in this policy limits any non-waivable rights you have under the privacy laws of your own jurisdiction.


Section 18

Notification of Changes

We may update this privacy policy from time to time. When we do, we will revise the “Last updated” date at the top of the page and, for material changes, notify account administrators by email or through an in-app notice. If a change materially expands how we use personal information beyond what was disclosed when it was collected, we will obtain your consent where required by law.

Contact our privacy team

The person in charge of personal information at BorderConnect is the BorderConnect Privacy Officer. You may reach the Privacy Officer by email at support@borderconnect.com (subject line: “Privacy Officer”), by toll-free phone at 1-800-596-5176, or by mail at:

Border Connect Inc. — Attn: Privacy Officer
1801 Walker Road, Second Floor
Windsor, Ontario, Canada N8W 3P3

Quebec residents may use the contact details above to reach the person in charge of personal information for the purposes of Quebec’s private-sector privacy law.