Home / Privacy Statement

Privacy Statement

Last updated 14 October 2026

No Horn (“No Horn”, “we”, “us”, “our”) provides an AI execution and automation layer for freight procurement that operates on top of a customer’s existing Transport Management System (TMS), mailbox, and messaging tools. This Privacy Statement explains what information we process, why, and the choices available to you. It applies to our web application, our workflow automation services, and the mailbox integrations you connect to No Horn.

No Horn is a business-to-business product used by logistics operations teams. We process most personal data on behalf of our customers (the organisations that subscribe to No Horn) as a data processor, acting on their instructions.

1. Information we process

Account & profile data

When your organisation provisions your account, we store your name, work email address, organisation, assigned role, and authentication identifiers. We do not create passwords for you; sign-in is handled by our authentication provider.

Connected mailbox data (Microsoft 365 / Google Workspace)

No Horn’s procurement workflow sends requests-for-quote (RFQs) from your own mailbox and captures vendor replies. To do this, you may connect your Microsoft 365 or Google mailbox via OAuth. When you connect a Microsoft account, No Horn requests the following Microsoft Graph permissions:

We access mailbox content only to the extent needed to operate the procurement workflow you initiate — principally the message body, sender, subject, conversation identifiers, and attachments of vendor correspondence tied to a No Horn enquiry. We do not read, index, or mine your broader inbox, and we do not use mailbox data for advertising or profiling.

Procurement & operational data

We store the freight enquiries, vendor records, quotes/bids, vehicle and driver declarations, approvals, and audit events generated as you use the product. Vendor correspondence captured from your mailbox is stored as an append-only conversation record against the relevant enquiry.

Usage & technical data

We collect standard log and diagnostic data (e.g. request metadata, timestamps, error traces) and limited product-analytics events to operate and improve the service. Analytics events are stripped of sensitive commercial fields such as internal benchmark cost and margin figures.

Website analytics

Our public website (nohorn.in) uses Google Analytics to understand how visitors find and use it, for example which pages are viewed and how people arrive. Google Analytics sets cookies and collects device, browser, approximate location and page-visit data. We do not use it to identify individual visitors. You can block these cookies in your browser settings or with Google's opt-out add-on at tools.google.com/dlpage/gaoptout.

2. How we use information

3. Automated processing (AI/LLM)

No Horn uses large language models to extract structured information from vendor emails — for example, reading a reply and identifying the quoted price, or parsing a declared vehicle number, driver name, and phone number. For this we send the relevant message content to our AI provider, Anthropic. These requests are sent with the “no training” flag set, meaning the content is not used to train models. We do not use these models to make legally or similarly significant decisions about individuals without human review.

4. How we share information

We do not sell personal data. We share information only with service providers ("sub-processors") that help us run No Horn, under contractual confidentiality and security obligations:

We may also disclose information where required by law, or to protect the rights, safety, and security of No Horn, our customers, and users.

5. Security

6. Data retention

We retain account, procurement, and correspondence data for as long as your organisation maintains its No Horn account, and as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. When you disconnect a mailbox, we stop accessing it and delete the stored access/refresh tokens for that connection. On account termination, we delete or anonymise personal data within a commercially reasonable period, subject to legal retention requirements.

7. Your choices & rights

8. International transfers

No Horn primarily hosts data in India (Mumbai / ap-south-1). Some sub-processors may process limited data in other regions (for example, product analytics with EU residency). Where data crosses borders, we rely on appropriate safeguards as required by applicable law.

9. Children

No Horn is a workplace product and is not directed to, or intended for use by, individuals under the age of 18.

10. Changes to this statement

We may update this Privacy Statement from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.

11. Contact

Questions about this Privacy Statement or our data practices can be sent to yash@nohorn.in. No Horn is operated from Bengaluru, India.

Home · Privacy · Terms · About