Privacy Policy

1. Scope and Services

This Privacy Policy applies to TruckLoad.me services, including our web app, mobile app, related APIs, support channels, onboarding and compliance workflows, and subscription and billing operations. It explains what data we collect, why we collect it, how we use and protect it, and the choices available to you.

2. Data We Collect

We may collect the following categories of data:

• Account data: full name, email, phone, password credentials, role, account type.
• Profile and operational data: company details, city/state, operating regions, fleet data.
• KYC and compliance data: identity and business documents, document numbers, expiry dates, verification statuses, reviewer notes.
• Transaction and billing data: Stripe customer/subscription identifiers, plan tier, invoice/payment status, renewal dates, add-on purchases.
• Load and trip workflow data: load details, bids, assignments, proof and status updates.
• Device and usage data: browser/app events, IP, approximate location metadata, timestamps, crash/debug logs, analytics events.
• Support and communication data: support tickets, email interactions, and administrative communications.

3. How We Collect Data

• Directly from you during signup, profile updates, KYC uploads, and service usage.
• Automatically through app/web telemetry, cookies, and analytics tooling.
• From integrated providers required to operate the platform (for example, payment and identity verification related providers).
• From operational actions by authorized admins/reviewers as part of compliance and support workflows.

4. Why We Use Data

• To create and manage accounts and authenticate users securely.
• To operate load posting, bidding, assignment, and fulfillment workflows.
• To perform KYC/compliance checks and enforce platform trust and safety controls.
• To process subscriptions, add-ons, invoices, renewals, and related account-state changes.
• To provide support, send operational notifications, and handle dispute/issue resolution.
• To monitor service quality, prevent fraud/abuse, and improve features and reliability.
• To comply with legal, regulatory, and contractual obligations.

5. Legal Basis and Compliance

We process data where needed to provide contracted services, meet legal obligations, operate legitimate business interests (such as security and fraud prevention), and where required, based on user consent. We retain records required for legal, financial, tax, dispute, compliance, and audit purposes.

6. Payments and Billing

Payments are processed via Stripe. We do not store full card numbers or card security codes. We store payment-related metadata required to maintain subscription state, entitlement, reconciliation, and support (for example customer/subscription IDs, invoice/payment statuses, and plan mappings). Stripe handles sensitive card data under its own security and privacy terms.

7. KYC, Document Handling, and Expiry Tracking

For regulated operational access, we collect and review identity and business documentation. Document expiry metadata may be required for compliance validity checks and renewal reminders.

• Documents are used for verification, risk review, and eligibility determination.
• Verification outcomes can include pending, approved, rejected, missing, or expired states.
• Document status can affect platform capabilities until compliance requirements are met.

8. Location and Operational Proof Data

Certain workflows may require location-aware or proof-related signals to confirm operational milestones (for example pickup/delivery status). Data collection is limited to what is needed for service execution, auditability, trust, and dispute resolution.

9. Data Sharing

We do not sell personal data. We may share data with:

• Service providers and processors needed to run the platform (hosting, auth, billing, email, analytics).
• Authorized business counterparties where needed to perform logistics operations.
• Authorities, regulators, or legal entities where required by law or to protect rights and safety.
• Corporate successors in the event of a merger, acquisition, financing, or asset transaction.

10. Data Retention

We retain data for as long as needed to provide services and satisfy legal/compliance needs. Retention periods vary by data type and operational purpose. When no longer required, data is deleted, de-identified, or securely archived per policy and legal obligations.

11. Security Controls

We implement technical and organizational safeguards designed to protect confidentiality, integrity, and availability of data.

• Role-based access controls for internal tools and sensitive operations.
• Encrypted transmission for data in transit and platform-level protection for stored data.
• Audit and monitoring controls for critical operational and admin actions.
• Incident response processes for investigation and remediation.

12. Your Rights and Choices

Subject to applicable law, you may request to:

• Access, correct, or update your personal data.
• Delete data where deletion does not conflict with legal/compliance obligations.
• Object to or restrict certain processing where legally permitted.
• Receive account and policy communications required for service operation.

13. Cross-Border Processing

Data may be processed in jurisdictions where our infrastructure and providers operate. Where required, we apply contractual and operational safeguards for lawful transfer and handling.

14. Children’s Privacy

Services are not intended for minors. We do not knowingly collect personal data from children. If you believe a child provided data, contact us so we can take corrective action.

15. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date and, where appropriate, through in-app or email notice.

16. Contact

For privacy questions, requests, or concerns, contact: support@truckload.me