Legal

Privacy Policy

Effective September 28, 2026. Applies to the CargoFix web platform and the CargoFix and Jayrutty Cargo mobile apps, all published by EXODUS TECHNOLOGIES LIMITED.

Overview

EXODUS TECHNOLOGIES LIMITED (“we”, “us”) operates the CargoFix freight-forwarding platform: a web application used by cargo businesses to run their operations, and two customer-facing mobile apps built on the same platform — CargoFix, the official app any tenant's customers can use, and Jayrutty Cargo, a custom-branded build of the same app for one specific cargo company. This policy explains what information each of these collects, why, and how it's protected. Where a practice differs between the staff web app and the customer mobile apps, that's called out explicitly below.

Information We Collect

CargoFix web app (business/staff users): name, email address, phone number, and a password (stored hashed — never in plain text), plus the business records staff enter to run their operations — clients, shipments, boxes, batches, invoices and payments — which may include their own customers' contact details.

CargoFix / Jayrutty Cargo mobile apps (shipping customers): your name and phone number, used to sign you in with a one-time SMS code — there is no password. You may optionally add a profile photo. Once signed in, the app shows you the shipment, invoice, quote and warehouse information that the freight-forwarding company you ship with has on file for you.

Device permissions (mobile apps only): Camera access, used only to scan the QR code on a shipping label for tracking, and — if you choose — to take a profile photo. Photo-library access, only if you choose to pick an existing photo instead of using the camera. Neither is used for anything else, and nothing is captured unless you actively point the scanner or choose to set a photo.

We do not collect passwords for mobile app users (login is OTP-only), precise GPS location, your contacts, or advertising identifiers. Neither mobile app bundles any analytics, advertising, or crash-reporting SDK — nothing is sent to a third party for tracking purposes.

How We Use It

  • To authenticate you (password for the web app; a one-time SMS code for the mobile apps).
  • To run the core service: showing your business's operational data, or your own shipments, invoices, quotes and warehouse information, back to you.
  • To let you track a shipment and share a tracking link via WhatsApp, SMS or email, at your choice.
  • To notify you of shipment status changes.
  • To secure accounts — e.g. rate-limiting login attempts and one-time codes against abuse.

How It's Shared

If you're a shipping customer, the freight-forwarding company (tenant) you ship with can see the shipment/invoice/quote records associated with your account through their own staff systems — that is the entire purpose of the account. We share your phone number with NextSMS, our SMS delivery provider, solely to deliver your one-time login code — no other information is shared with them.

We do not sell personal data, and we do not share it with advertisers or data brokers. We may disclose information if required to by law.

Storage & Security

All data is transmitted over encrypted HTTPS connections. Web app passwords are stored hashed, never in plain text. On the mobile apps, your sign-in session is stored on-device using OS-level encrypted storage (Android Keystore-backed secure storage) — not in plain files. Access to any account's data is scoped to that account and, for shipping customers, to the specific freight company they are a customer of.

Data Retention

We retain account and business/shipment/invoice data for as long as the account is active, or as required for legitimate business and legal record-keeping (for example, financial records).

Your Rights

You can request access to, correction of, or deletion of your personal data at any time by contacting us directly (below), or — if you're a shipping customer — the freight company you're registered with. Signing out of a mobile app clears your session on that device; your account data remains with the company you're registered under until deletion is requested.

Children's Privacy

CargoFix and Jayrutty Cargo are business tools for freight-forwarding operations and their shipping customers, and are not directed at children. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page always reflects the latest version.

Contact Us

EXODUS TECHNOLOGIES LIMITED
Dar es Salaam, Tanzania
support@exodus.co.tz