Privacy Policy

1. Introduction

TruckFlowUS (“Company,” “we,” “us,” or “our”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the TruckFlowUS platform (“Service”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

Information you provide directly:

• Account registration data (name, email address, company name, password)
• Driver profiles (name, phone number, driver's license information, PIN)
• Broker profiles (name, company, phone number, email)
• Customer and job data (names, addresses, materials, quantities, rates)
• Financial information (payroll data, invoice amounts, check records, bank account numbers, routing numbers, and payment credentials)
• Documents and photos uploaded to the platform (driver documents, ticket photos, logos)
• Communications sent through the Service (SMS messages, support inquiries)

Information collected automatically:

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (operating system, device type)
• Usage data (features used, actions taken within the platform)
• Cookies and similar tracking technologies (see Section 9)

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process job assignments, tickets, invoices, and payroll
• Send transactional SMS messages and email communications
• Authenticate users and secure accounts
• Generate reports, trip sheets, and business analytics for your company
• Improve and personalize the Service
• Respond to customer support requests
• Comply with legal obligations
• Detect and prevent fraud, abuse, or security incidents

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Within your organization: Dispatchers can view driver, customer, broker, and job data within their company account as part of normal platform operations.
• Service providers: We use third-party services to operate the platform, including cloud hosting (Vercel), database hosting (PostgreSQL providers), file storage (Vercel Blob), and SMS delivery (Twilio). These providers access your data only to perform services on our behalf and are contractually obligated to protect it.
• Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will provide notice before your information becomes subject to a different privacy policy.
• With your consent: We may share information with third parties when you have given us explicit consent to do so.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We may also retain data as required to comply with legal obligations, resolve disputes, enforce agreements, and for legitimate business purposes (such as maintaining financial records).

When data is no longer needed, we securely delete or anonymize it. You may request deletion of your account and associated data by contacting us (see Section 11).

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure password hashing (bcrypt)
• JWT-based session authentication with expiration
• Rate limiting on authentication endpoints
• Role-based access controls and tenant isolation
• Regular security audits

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

7. Data Breach Notification

In the event of a data breach that compromises the security, confidentiality, or integrity of your personal information, TruckFlowUS will:

• Investigate promptly: We will conduct a thorough investigation to determine the nature and scope of the breach.
• Notify affected users: We will notify affected individuals as required by applicable federal and state data breach notification laws, including but not limited to the laws of Texas (Tex. Bus. & Com. Code § 521.053) and any other state where affected users reside. Notification will be made without unreasonable delay and no later than 60 days after discovery of the breach, or as otherwise required by law.
• Notify authorities: Where required by law, we will notify the appropriate state attorneys general, the Federal Trade Commission, or other regulatory bodies.
• Remediate: We will take reasonable steps to contain the breach, mitigate harm, and prevent future incidents.

Breach notifications will include, to the extent known: a description of the incident, the types of information involved, the steps we are taking in response, and steps you can take to protect yourself. Notifications will be delivered via email to the address on your account and, where required, by US mail.

8. Sensitive Financial Data

Certain features of the Service (such as check printing and company payment settings) may allow you to enter sensitive financial information, including bank account numbers, routing numbers, and payment credentials. We want to be transparent about how this data is handled:

• Storage: Financial data is stored in our secured database with encryption at rest and in transit. Access is restricted to authorized personnel and systems on a need-to-know basis.
• Use: Financial data you provide is used solely for the purposes you specify within the platform (e.g., generating checks, processing payroll records). We do not use this data for any other purpose.
• No verification: TruckFlowUS does not verify the accuracy of banking information you enter. We do not validate account numbers or routing numbers against banking institutions. You are solely responsible for ensuring this information is correct.
• No financial services: TruckFlowUS is not a bank, financial institution, money services business, or payment processor. We do not initiate ACH transfers, wire transfers, or any direct banking transactions on your behalf.
• Liability: TruckFlowUS is not responsible for any financial losses, unauthorized transactions, misdirected payments, or other damages resulting from inaccurate, unauthorized, or compromised financial data entered into the platform. See our Terms of Service for full liability terms.

We strongly recommend that you limit who within your organization has access to financial settings, regularly review stored banking information for accuracy, and immediately contact us at admin@truckflowus.com if you suspect unauthorized access to your financial data.

9. SMS and Phone Communications

If a phone number is provided to TruckFlowUS (by a dispatcher adding a driver or broker), we may send transactional SMS messages related to job assignments and dispatch operations. Phone numbers are stored securely and are not shared with third parties for marketing.

See our SMS Terms & Consent page for full details on messaging practices, frequency, and opt-out instructions.

10. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember preferences, and secure your account. We use:

• Essential cookies: Required for authentication and core platform functionality. These cannot be disabled.
• Functional cookies: Used to remember your preferences (such as language settings).

We do not use advertising or third-party tracking cookies. We do not sell data collected through cookies. For a complete list of cookies we use, see our Cookie Policy.

11. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.

12. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Right to access: Request a copy of the personal information we hold about you
• Right to correction: Request correction of inaccurate or incomplete information
• Right to deletion: Request deletion of your personal information, subject to certain exceptions
• Right to opt out of SMS: Reply STOP to any TruckFlowUS message or contact your dispatcher
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

California Residents (CCPA/CPRA):

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact us using the information in Section 15.

Virginia Residents (VCDPA):

Virginia residents have the right to access, correct, delete, and obtain a copy of their personal data, as well as the right to opt out of the processing of personal data for targeted advertising, sale, or profiling. TruckFlowUS does not engage in the sale of personal data or profiling. To exercise your rights, contact us at the email below. We will respond within 45 days and you may appeal any denial.

Colorado Residents (CPA):

Colorado residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, or certain profiling. We do not sell personal data. To exercise your rights, contact us below. We will respond within 45 days.

Texas Residents (TDPSA):

Texas residents have the right to confirm whether we process their personal data, to access and correct that data, to request deletion, and to obtain a portable copy. You also have the right to opt out of the sale of personal data, targeted advertising, and profiling. We do not sell personal data. To exercise your rights, contact us below. We will respond within 45 days.

Connecticut Residents (CTDPA):

Connecticut residents have similar rights to access, correct, delete, and port their personal data, and to opt out of the sale of personal data, targeted advertising, and profiling. We do not sell personal data. Contact us below to exercise your rights. We will respond within 45 days.

Other State Privacy Laws:

Several other states have enacted or are enacting comprehensive consumer privacy laws (including Oregon, Montana, Utah, Iowa, Indiana, Tennessee, and others). TruckFlowUS is committed to complying with all applicable state privacy laws. Regardless of your state of residence, you may contact us to exercise any privacy rights available to you under applicable law.

To exercise any of these rights, contact us at admin@truckflowus.com. We will respond to your request within the timeframe required by your state's law (typically 30–45 days). We will not discriminate against you for exercising your privacy rights.

13. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party services you access.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a revised “Last updated” date. Your continued use of the Service after changes are posted constitutes acceptance of the modified policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

TruckFlowUS
Email: admin@truckflowus.com
Website: truckflowus.com/contact