Privacy Policy

Last updated: September 30, 2026

1. Who we are

This policy explains how Synaps Global Trade Ltd. ("Synaps", "we", "us") handles personal information in connection with:

• the website at www.intero-tms.com (the "Website"); and
• the Intero TMS transportation management application, including company sign-in pages at *.intero-tms.com, customer portals, and the emails the application sends from @mail.intero-tms.com (together, the "Service").

We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and apply its principles to the personal information we handle.

2. Our role: controller and service provider

Intero TMS is used by freight companies (each a "Company") to run their business. When a Company enters information about its own staff, customers, carriers, vendors or shipments into the Service, that Company is responsible for that information and decides why and how it is used. We process it on the Company's behalf, under our agreement with it, and only to provide the Service.

If you are a customer, carrier or contact of a Company that uses Intero and you have a question about your information, please contact that Company first. Its name appears as the sender on the emails you receive. We will help the Company respond, and you can also write to us.

For the Website, and for account and security information we need to operate the Service itself, Synaps is responsible for the information directly.

3. Information we collect

On the Website

• Contact form: your name, email address, company (optional) and message. We also record the IP address and approximate country the message came from, to help detect abuse.
• Spam protection: the form uses Cloudflare Turnstile, which checks technical signals from your browser to confirm a person is submitting it.
• Technical information: like any website, our hosting provider receives standard request information (such as IP address, browser type and the page requested) to deliver the page and protect it from attack.

The Website does not use analytics, advertising or tracking cookies.

In the Service

• Account information: name, business email address, phone number, company, role and sign-in details of the people authorized to use the Service.
• Business records a Company enters: for example, customer, carrier and vendor company details and contacts (names, business emails, phone numbers, addresses); orders, shipments, stop locations and appointment times; rates, quotes, invoices, bills and payments; and documents such as rate confirmations and proofs of delivery.
• Communications: emails the Service sends for a Company (rate confirmations, invoices, statements, notifications and invitations) and their delivery status.
• Activity and audit records: which user created or changed a record, what changed and when. This is part of the Service's integrity controls.
• Technical and security information: IP addresses, browser information, session identifiers and error reports, used to keep the Service secure and working.

The Service is intended for business use. We do not knowingly collect information from children.

4. How we use information

• To provide, maintain and support the Service for the Companies that use it, as they instruct.
• To send the emails and documents a Company asks the Service to send.
• To authenticate users, prevent fraud and misuse, and secure the Service.
• To diagnose errors and improve reliability.
• To answer messages sent through the Website contact form.
• To meet legal, tax, accounting and regulatory obligations.

We do not sell or rent personal information, use it for advertising, or use Company data for any purpose other than providing the Service to that Company.

5. Consent

We rely on your consent, which may be implied from the context, as PIPEDA allows. When you send us a message, you consent to our using your details to reply. Companies are responsible for having the consents needed for the information they enter into the Service. You may withdraw consent at any time, subject to legal or contractual limits. Withdrawing consent may mean we or the Company can no longer provide a particular service.

6. Service providers

We use carefully chosen providers to host and run the Website and the Service. They may process personal information only on our instructions and are bound to protect it.

Integrations a Company chooses

A Company may connect the Service to its own accounts with other providers, such as Intuit QuickBooks Online. When it does, the Service exchanges accounting information (such as customers, vendors, invoices, bills and payments) with that account on the Company's instructions. That information is then also governed by the provider's own privacy policy. The Company can disconnect an integration at any time. We use the data received from such integrations only to provide the Service to that Company.

7. Where information is stored

The Service's database is hosted in Toronto, Canada. Some of our service providers store or process information in the United States or elsewhere. When information is outside Canada, it is subject to the laws of that country and may be accessible to its courts, law enforcement and national security authorities. We use contractual and other measures to protect information handled by our providers.

8. How long we keep information

• Company data is kept for as long as the Company uses the Service, and afterwards as our agreement with the Company provides. It is then deleted or returned, except where the law requires us to keep it longer.
• Contact-form messages are kept in our email for as long as needed to respond and keep a reasonable record of the conversation.
• Security and technical logs are kept for a limited period and then deleted.

9. How we protect information

We use safeguards appropriate to the sensitivity of the information. These include encryption in transit (HTTPS/TLS), encrypted database connections, strict separation of each Company's data within the Service, role-based access for users, audit records of changes, and restricting our own staff's access to what is needed to operate and support the Service. No system is perfectly secure. If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals, the Office of the Privacy Commissioner of Canada and the affected Company, as the law requires.

10. Your rights

You may ask to access the personal information we hold about you, ask us to correct it, or withdraw your consent. For information a Company entered into the Service, we will refer your request to that Company or help it respond. We will reply within the time the law requires (generally 30 days), and may need to confirm your identity first.

To make a request, write to contact@intero-tms.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

11. Cookies

The Website does not set its own cookies. The Service uses cookies and similar browser storage that are strictly necessary to keep you signed in, secure your session and remember display preferences. We do not use advertising or cross-site tracking cookies.

12. Changes to this policy

We may update this policy as the Website and Service change. The "last updated" date above shows when it last changed. If a change is significant, we will let Companies using the Service know in advance.

13. Contact us

Privacy questions and requests: contact@intero-tms.com
Synaps Global Trade Ltd., Ontario, Canada