Privacy notice

This notice explains how WebPOS LLC, a Colorado limited liability company (“WebPOS”, “we”, “us”), handles personal information through the CyberForward marketing site, accounts, software platform and separately ordered services. It does not replace a customer’s own privacy notice for freight, employee, supplier or end-customer data that the customer controls.

Scope and our roles

For website enquiries, account administration, subscription records, support, security and product-usage information, WebPOS generally acts as the business or controller. For freight records, customer contacts, documents, messages and other workspace content submitted by or for a customer, the customer generally acts as the business or controller and WebPOS processes the content as a service provider or processor on the customer’s instructions. A data processing addendum, order or managed-services schedule may further define the parties’ roles for a specific service and controls if it conflicts with this general description.

Categories of information

• Identity, account and business contact data: names, work email addresses, telephone numbers, organization, job role, login identifiers and workspace permissions.
• Subscription and transaction data: plan, order, invoice, tax, payment status and limited processor references. Payment processors, not CyberForward, handle full payment-card details.
• Customer workspace content: freight requests, quotations, shipment and milestone records, customer and supplier contacts, documents, invoices, communications, commercial terms and other records a customer chooses to process.
• Connector and managed-service data: integration configuration, provider identifiers, access tokens or credentials stored using applicable security controls, event data, support records and information needed for an expressly ordered operating scope.
• Device, usage and security data: IP address, browser and device details, timestamps, authentication events, logs, audit evidence, feature interactions, diagnostics and fraud or abuse indicators.
• AI inputs and outputs: content sent to an enabled AI-assisted feature, extracted fields, classifications, summaries, confidence indicators, source references and user corrections.
• Potentially sensitive content: freight documents may contain government identifiers, financial details, precise locations or other sensitive information if a customer submits it. Customers must limit this data to what is authorized, necessary and supported by their order.

Sources of information

We receive information directly from customers, authorized users and website visitors; automatically from browsers, devices and the service; from payment, hosting, security, communications and support providers; and from accounting, email, tracking, customs, insurance, EDI or other systems a customer authorizes CyberForward to connect to. Managed operators or network participants may provide data only within the agreed service scope.

Purposes of processing

We use information to respond to enquiries; establish and administer accounts and workspaces; authenticate users; process orders and subscriptions; provide freight workflow, customer portal, document, finance, connector, AI-assisted and support functions; provision and monitor an ordered ERPNext tenant; perform separately ordered managed operations, network or continuity work; secure and troubleshoot the service; maintain audit evidence; prevent fraud and abuse; comply with law; enforce agreements; and improve reliability and usability. We may create aggregated or deidentified information where permitted by law and do not attempt to reidentify information that applicable law treats as deidentified.

Cookies and similar technologies

The public marketing pages may use essential storage needed for site delivery and user choices. The application may use session cookies or similar storage for authentication, security and preferences. If optional analytics are introduced, the applicable notice or consent control should identify them. CyberForward does not currently describe or offer third-party cross-context behavioral advertising, but third-party sites opened through a connector or link apply their own cookie practices.

AI-assisted processing

Enabled AI features can extract, classify, summarize and prepare workflow drafts from customer content. They are designed to keep source evidence, confidence and human approval visible and are not a substitute for required freight, customs, insurance, legal, tax, employment or other professional judgment. AI providers may process the minimum content needed to deliver the enabled feature under the applicable configuration and contract. Customers should not submit information they lack authority to process and should document any required retention, location or model-training restriction in their order or data processing addendum.

Disclosures and subprocessors

We may disclose information to infrastructure, hosting, database, security, communications, customer-support, payment, document-processing and AI providers that help operate the service; to accounting, email, tracking, customs, insurance, EDI and other connector providers selected by the customer; to managed operators or network participants for an expressly approved scope; to professional advisers and authorities when reasonably necessary for legal, security or compliance purposes; and in a financing, reorganization, sale or similar transaction subject to appropriate safeguards. Provider availability and data location can vary by tenant. Customers may request current subprocessor information and should use an order or data processing addendum for mandatory advance-notice or location requirements.

No sale or sharing for behavioral advertising

Based on the current service design, WebPOS does not sell personal information for money and does not share personal information for cross-context behavioral advertising or process it for targeted advertising. Disclosures to processors, service providers, customer-authorized connectors and approved operators are made to provide the requested service and may be treated differently under particular state laws. If CyberForward’s practices change in a way that creates an opt-out right, we will update this notice and provide the required method before or when the changed practice applies.

Retention

We retain account, subscription, support, security and legal records for as long as reasonably necessary for the purposes described above, including contractual, tax, dispute, fraud-prevention and legal obligations. Customer workspace content is retained according to the subscription, customer configuration, applicable order and backup cycle. When information is no longer required, we delete, deidentify or isolate it unless continued retention is required or permitted by law. Customers should export needed content before account closure.

Security

We use administrative, technical and organizational safeguards designed for the nature of the service, which may include access controls, tenant separation, authentication controls, encryption in transit, protection for connector secrets, logging, backups and provider review. Customers are responsible for user access, credential security, lawful configuration and reviewing consequential actions. No service can guarantee absolute security; incident notice obligations are governed by applicable law and any controlling contract.

International transfers

CyberForward is operated from the United States, and providers or customer-authorized participants may process information in the United States or other countries. Those countries may have different privacy laws. Where an applicable law requires a transfer mechanism or additional contractual safeguards, the applicable order or data processing addendum should document them.

US state privacy rights and appeals

Depending on residence, the nature of the information and whether a law applies to WebPOS, an individual may have rights to confirm processing; access, correct or delete personal information; obtain a portable copy; opt out of sale, sharing, targeted advertising or certain profiling; limit or withdraw consent for certain sensitive information; use an authorized agent; and receive non-discriminatory treatment. To submit a request, email privacy@cyberforward.us with “CyberForward privacy request” and enough detail to identify the relevant relationship. We may verify identity and authority, apply lawful exceptions and direct a request to the customer that controls workspace content. If applicable law gives a right to appeal a denial, reply within the period stated in our decision with “Appeal” and the reason for reconsideration. A requester may also contact the appropriate state regulator where the law permits.

Children

CyberForward is a business service and is not directed to children under 18. We do not knowingly collect personal information from a child under 13 through the service. If you believe a child provided personal information without appropriate authorization, contact us so the information can be reviewed and deleted where required.

Customer-controlled data requests

For personal information in a customer workspace, the customer ordinarily controls the data and decides how to answer a rights request. Individuals should first contact the organization that collected or entered the information. WebPOS will support a customer’s verified instructions as required by the applicable contract and law, but will not independently change a customer’s freight or commercial record without authority.

Updates and contact

We may update this notice as services, providers or law change. The effective date above identifies the current published version, and material changes will be communicated through the site, account or other reasonable channel where required. Privacy questions, requests and complaints may be sent to privacy@cyberforward.us. WebPOS LLC is the verified contracting entity and is a Colorado limited liability company.