Privacy Policy

Last updated: 25 October 2026

This Privacy Policy explains how TruxCRM, a software product owned and operated by GrowAx Enterprises, based in Lahore, Pakistan ("TruxCRM", "we", "us", or "our"), handles information in connection with our website at truxcrm.com and our application at app.truxcrm.com, including the forms, links and emails it produces (together, the "Service"). By using the Service, you agree to this Policy.

TruxCRM is a business tool for auto transport brokers. Most of the information in it is data a broker enters about its own business and its own customers. For that data, the broker is the controller, and TruxCRM acts only as a processor on the broker's behalf.

1. Our role

We provide a multi-company CRM. Each broker company ("Customer") manages its own records inside its own company-scoped workspace. For information a Customer enters about its customers, carriers and operations ("Customer Data"), the Customer is the controller and TruxCRM is the processor acting on the Customer's instructions. For a Customer's own account and the running of the Service, we act as a controller.

2. Information we collect

Account and business information

When a company account is created, we collect business details (such as company name, address, contact details, logo, and any MC, USDOT or license numbers entered) and details of admins and agents (name, email address, phone number, and a password, which is stored only as a one-way hash).

Customer and operational data you enter

The records you create, including leads, quotes, orders, customer contact details, vehicle information and VINs, pickup and delivery locations, carrier, driver and dispatch details, payment records, tasks, notes, and documents you generate or upload (such as signed order PDFs, invoices, insurance files and attachments).

Integration and email settings

If you connect an email account, we store its settings (such as host, username and From address). If you connect Central Dispatch, we store the connection it issues. Passwords and connection secrets are stored encrypted. API keys issued to lead providers are stored as one-way hashes.

Logs

We keep limited logs of messages sent through the Service (such as recipient, subject, type and status), of calls made to connected services such as Central Dispatch, and of actions taken in an account (such as imports, exports and settings changes), for delivery tracking, security, support and the account's own audit log.

Technical data

When you use the Service we receive standard technical data, such as IP address, browser type, timestamps and pages requested. This is used to run, secure and troubleshoot the Service.

3. Information collected through broker forms and links

Brokers use TruxCRM to collect information from their own customers, for example through a quote form on the broker's website, an order the customer reviews and signs, or a lead sent by a lead provider. That information, including any consent the customer gives to be contacted, is recorded in the broker's workspace and belongs to the broker. Questions about it should go to the broker; see section 15.

4. What we do not do

• We do not sell personal information.
• We do not share one company's data with another company.
• We do not process or store payment card numbers. The Service records payment notes and methods entered by the broker; it is not a payment system, and full card details should not be entered into it.
• We do not use advertising networks or cross-site advertising trackers in the application.

5. Cookies and browser storage

In the application, we use an essential sign-in cookie to keep you logged in, and your browser's local storage for small preferences such as the last tab you opened. They are required for the application to work and are not used for advertising or tracking. If you block them, you cannot sign in.

On the marketing website, we use Google Analytics to count visits and see which pages are useful. It sets cookies and sends Google your IP address, the pages you view, and general details such as browser and country. It does not receive your name or anything you type into a form. Google Signals is switched off, so this data is not used for advertising or combined with your activity on other sites. You can block it with any browser setting or extension that blocks analytics cookies, and the site still works. Analytics is not used inside the application.

6. How we use information

• To provide, operate and maintain the Service.
• To sign users in and enforce company-scoped, role-based access.
• To create documents (such as order PDFs and invoices) and send the messages you ask it to send, plus system messages such as password resets.
• To connect to services you choose, such as Central Dispatch, when you use those features.
• To give support, investigate problems, and protect the Service against abuse.
• To keep the Service reliable and improve it.

7. Email sending

Messages you send through the Service are delivered from the email account you set up, under your name. We send on your behalf using your settings; we do not read your mailbox. System messages, such as password resets and account emails, are sent by us from a TruxCRM address. You are responsible for the content of the messages you send and for following email and anti-spam laws.

8. AI assistant

The Service includes an optional, read-only AI assistant ("Truxie"). To answer a question, your question and the relevant records from your own company may be sent to our AI provider (Google) to produce a response. Truxie cannot create, change, send, dispatch or delete records, and only reads data from the same company as the user asking. AI answers can be wrong and should be checked before you rely on them. A company can ask us to switch Truxie off.

9. Integrations you connect

When you connect Central Dispatch and use it from TruxCRM, we send Central Dispatch the details needed for what you asked, such as the listing or dispatch for an order (route, dates, vehicles, price and the contacts you chose to include), and receive status updates and documents back. That information is then also handled by Central Dispatch under its own terms and privacy policy.

When you use VIN import, the VIN is sent to the US government's vehicle database (NHTSA) to look up the year, make and model. When you enter a ZIP code or view a route map, the ZIP code or locations are sent to public lookup and mapping services. These lookups do not include customer names or contact details.

10. Service providers

We use a small number of providers to run the Service and share information with them only as needed:

These providers handle data under their own terms and security practices. We may change providers as the Service develops and will update this list.

11. Where data is processed

The Service is operated from Pakistan. Data is stored and processed using infrastructure in Singapore (database, file storage and application hosting), with traffic passing through Cloudflare's global network. Some providers in section 10, such as Google and Central Dispatch, may process data in the United States or elsewhere. By using the Service, you agree to processing in these locations. We may change infrastructure or regions over time.

12. Security

We protect information with measures including: HTTPS for all traffic; passwords stored only as one-way hashes; encrypted email passwords and integration connections; hashed lead provider API keys; company-scoped access checked on the server for every request; private storage for documents, with signed, time-limited links; role-based permissions; rate limiting; and regular updates to the software we depend on. No system is completely secure, and we cannot guarantee absolute security. If we learn of a security incident affecting a Customer's data, we will tell that Customer without undue delay.

13. Separation between companies

Every record belongs to one company. A user's company and role come from their signed-in session, and every read and write is limited to that company before any data leaves the server. Other TruxCRM customers cannot see your data, and we do not share one company's data with another.

14. Retention and deletion

We keep account and Customer Data for as long as the account is active and as needed to provide the Service. Some records are removed automatically over time; for example, in-app notifications are cleared after 7 to 30 days and logs of calls to connected services after about a week.

When a subscription ends, an admin may ask for an export of the company's data within 30 days. After 60 days we may permanently delete it, unless the law requires us to keep it. Copies in backups are removed as those backups cycle out. We may keep limited records (such as billing records and security logs) where we have a legal or security reason to.

15. Your choices

Admins and agents can see and update much of their own information in the application. To ask for an export or deletion of company data, an admin can contact us at the address below.

If you are a customer of a broker that uses TruxCRM (for example you asked for a car shipping quote), your information is controlled by that broker. Please send access, correction or deletion requests to the broker. If you contact us, we will pass the request on and support the broker in handling it.

16. Broker responsibilities

If you use the Service to store or send information about your customers or other people, you are responsible for having a lawful basis to do so, getting any consents needed (for example to contact someone by phone, text or email), and following the laws that apply to that data and to the messages you send.

17. Children

The Service is a business tool for adults (18 and over) acting for a business. It is not directed to children, and we do not knowingly collect information from children.

18. Changes

We may update this Policy from time to time. For material changes we will update the date above and tell account admins by email. Continuing to use the Service after an update means you accept the updated Policy.

19. Contact

Questions about this Policy or your information can be sent to support@truxcrm.com, or by mail to GrowAx Enterprises, No. 1, Near UBL Bank, Manzoor Colony, Harbanspura Road, Lahore Cantt, Lahore, Pakistan. GrowAx Enterprises is the owner and operator of TruxCRM.