Privacy Policy

1. Our role

Most of what flows through Azali is business information about shipments and companies rather than personal information about individuals. Where personal information is involved, our role depends on the context.

• For information about our own users, prospects, and visitors (account details, support conversations, website analytics), we decide how it is used and are responsible for it directly.
• For information inside customer shipment data (the names and contact details that appear on invoices, packing lists, and entry documents), we process it on our customer's instructions in order to provide the Services, subject to the recordkeeping and regulatory duties described below.

2. Information we collect

Account and organization information

Name, work email, phone number, job title, employer, and the settings and permissions of the users in your organization. If you sign in through a single sign-on provider, we receive the identifiers that provider sends us.

Trade and shipment data

Commercial invoices, packing lists, bills of lading, purchase orders, arrival notices, and the data extracted from them: product descriptions and specifications, HTS classifications, valuations, quantities, country of origin, incoterms, importer and exporter identifiers, entry and bond numbers, and duty and fee calculations. These documents routinely contain names, signatures, and contact details of individuals at your company and your counterparties.

Regulatory identifiers

Where required to transact customs business, identifiers such as importer of record numbers, Employer Identification Numbers, CBP-assigned numbers, and, where an individual is the importer of record and no other identifier exists, government-issued identification numbers.

Screening data

The party names, addresses, and identifiers you submit for restricted-party, denied-party, and sanctions screening, together with the match results we return.

Billing information

Billing contact and address, invoices, and payment records. Card and bank details are collected and stored by our payment processor, not by us.

Usage, device, and log data

IP address, browser and device type, pages and features used, timestamps, referring URLs, and error and performance logs. We also keep audit logs of actions taken in the platform (who classified, approved, or filed what, and when), because customs work requires an accountable trail.

Communications

Emails, support tickets, and in-product messages you send us, and our responses.

3. How we use information

We use information to:

• Provide the Services: classify goods, screen parties, assemble and validate entries, calculate duties, monitor tariff exposure, and identify duty recovery opportunities.
• Prepare and transmit customs filings to CBP and Partner Government Agencies where you have engaged us as your broker.
• Authenticate users, administer accounts, and enforce permissions and autonomy settings.
• Bill you, collect payment, and handle disbursements.
• Provide support, investigate issues, and communicate about the Services.
• Secure the platform: detect and prevent fraud, abuse, and unauthorized access.
• Improve the Services, including measuring the accuracy of classification and screening output and diagnosing where it goes wrong.
• Meet our legal, regulatory, and recordkeeping obligations, including those of a licensed customs broker.
• Send you product and marketing communications, which you can opt out of at any time.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

4. AI processing and third-party model providers

Classification, document extraction, and parts of the review workflow are powered by large language models. To produce that output we send relevant content (typically product descriptions, document text, and shipment attributes, which may include names and contact details appearing on those documents) to third-party AI providers who process it on our behalf as subprocessors under written agreements.

Those providers are contractually prohibited from using your content to train their models. We use their enterprise or commercial offerings, under which content is processed to return a response and is retained only for the limited period their terms permit for abuse monitoring and service operation, if at all.

We do not train our own foundation models on your content. Where we tune or evaluate internal components, we use data that has been aggregated or de-identified, or data you have expressly permitted us to use for that purpose.

A current list of our AI subprocessors is available on request at a@azali.ai. Because AI output can be wrong, the platform is built for human review; see the Terms for how that responsibility is allocated.

5. How we share information

Government agencies

To perform customs business we transmit entry and shipment information to U.S. Customs and Border Protection through the Automated Commercial Environment, and to Partner Government Agencies where your goods require it. This disclosure is inherent to the service and required by law; it cannot be opted out of while using our brokerage services. Where we act as your broker, your records are additionally protected as client records under 19 C.F.R. § 111.24 and are not disclosed to others except as the law requires.

Service providers and subprocessors

Cloud hosting and storage, AI model providers, error monitoring and analytics, email delivery, payment processing, customer support tooling, and identity providers. They act on our instructions under contracts that restrict their use of the information to providing their service to us.

Your counterparties and agents

Where necessary to move your goods: carriers, forwarders, bonded warehouses, surety providers, and other brokers you designate.

Professional advisers and legal disclosures

Auditors, insurers, and legal counsel; and where we are required by law, regulation, subpoena, or court order, or where disclosure is necessary to protect our rights, your safety, or the security of the Services.

Corporate transactions

If Azali is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to the receiving party continuing to honor this policy.

6. Cookies, analytics, and similar technologies

We use cookies and similar technologies on azali.ai and in the platform. These fall into a few categories:

• Strictly necessary: sign-in, session management, security, and load balancing. The platform does not work without these and they cannot be switched off.
• Preference: remembering settings such as theme and interface state.
• Analytics: understanding which pages and features are used, and where errors and slowdowns occur, so we can improve them.
• Marketing: measuring the effectiveness of our own campaigns on our public website.

You can block or delete cookies through your browser settings, though strictly necessary cookies are required for the platform to function. Where the law requires consent for non-essential cookies, we ask for it before setting them. We do not currently respond to browser Do Not Track signals; we do honor Global Privacy Control signals where we are required to.

7. Retention, and the five-year customs recordkeeping rule

How long we keep information depends on what it is.

Customs records are subject to a statutory retention period. Under 19 C.F.R. Part 163, records relating to an import transaction generally must be kept for five years from the date of entry. Where we act as your customs broker, we are legally required to retain those records for that period. This has a consequence worth stating plainly: during that window we cannot delete customs records on request, including in response to an individual deletion request or a general request to close your account. The obligation is imposed on us by law and overrides deletion preferences.

Other categories follow ordinary retention rules. Account and profile information is kept for the life of the account and a short period afterwards. Billing and tax records are kept as long as tax and accounting law requires, generally seven years. Support communications are kept for up to three years. Usage and security logs are kept for up to two years. Marketing contact data is kept until you opt out.

Where you are receiving software services only and we are not your broker, we delete or de-identify your Customer Data after the export window described in the Terms, other than records we must retain for legal reasons and backup copies that expire on their normal cycle.

8. Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold: encryption in transit and at rest, role-based access control and least-privilege access for our staff, audit logging, network isolation, vulnerability management, and vendor security review. Access to customer trade data by our personnel is limited to those who need it to provide or support the Services.

No system is perfectly secure. If we become aware of a breach affecting your information, we will notify you and any regulator as required by law and without undue delay. Report a suspected vulnerability or incident to a@azali.ai.

9. Your choices and rights

You can:

• Access and correct your account information in the platform, or by contacting us.
• Export your Customer Data using the platform's export functionality.
• Opt out of marketing email using the unsubscribe link, or by contacting us. Service and transactional messages about your account, filings, and billing are not marketing and cannot be opted out of while your account is active.
• Ask us to delete information, subject to the statutory retention limits in section 7.
• Ask what information we hold about you and who we have shared it with.

Depending on where you live, you may have additional rights under state privacy law, including in California. To exercise any of these, write to a@azali.ai. We will verify your identity before acting, respond within the period the applicable law allows, and will not discriminate against you for making a request.

If the personal information concerns you but was submitted to us by one of our customers as part of their shipment data, we will refer your request to that customer, who is best placed to answer it.

10. International data

Azali is based in the United States and information we process is stored and handled there, and in other countries where our service providers operate. International trade data is by nature cross-border: to clear your goods, information may be transmitted to authorities and counterparties outside your own country. Where we transfer personal information from a jurisdiction that restricts such transfers, we use an appropriate legal transfer mechanism.

11. Children

The Services are for business use and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the Services and the law change. The effective date at the top shows when it was last revised. For material changes we will give notice by email or in the platform before they take effect.

13. Contact us

For privacy questions, requests, or complaints, write to a@azali.ai, or to Azali, Inc., [mailing address]. If you are not satisfied with our response, you may have the right to complain to your local data protection or consumer protection authority.