Privacy Policy

1.1 Information You Provide Directly

• Account Information: name, email address, phone number, job title, and organization name when you register for an Account
• Payment Information: billing address and payment method details processed through our third-party payment processor, Stripe, Inc. We do not store your full credit card number on our servers.
• Carrier Screening Data: DOT numbers, MC numbers, load identifiers, lane information, equipment types, and risk modifiers you enter when using the Service
• Team Management Data: names, email addresses, roles, and titles of team members you add to your organization
• Communications: any messages or information you send to us through email or support channels

1.2 Information Collected Automatically

• Usage Data: pages visited, features used, screens generated, timestamps, and interaction patterns
• Device Information: browser type, operating system, device identifiers, and screen resolution
• Log Data: IP address, access times, referring URLs, and server response data
• Cookies and Similar Technologies: we use cookies, local storage, and similar technologies to maintain your session, remember preferences, and analyze usage patterns

1.3 Information from Third-Party Sources

• FMCSA Data: carrier safety records, authority status, insurance information, crash history, and inspection data retrieved from the Federal Motor Carrier Safety Administration QCMobile public-record system
• Payment Processor: transaction status and confirmation data from Stripe, Inc.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process carrier-selection screens and generate review files
• Process payments and manage your subscription
• Send transactional communications (account confirmations, billing receipts, security alerts)
• Provide customer support and respond to your inquiries
• Analyze usage patterns to improve the Service and develop new features
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues
• Enforce our Terms of Service and comply with legal obligations
• Maintain the integrity of our hash-chained audit trail system

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service Providers: with third-party vendors who perform services on our behalf (e.g., Stripe for payment processing, Supabase for data hosting, Vercel for application hosting), subject to confidentiality obligations
• Within Your Organization:account administrators and supervisors within your organization may access team member activity, screens, and review files as part of the Service's team management features
• Legal Compliance: when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others
• Business Transfers: in connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction
• With Your Consent: when you have given us explicit permission to share your information for a specific purpose

We retain your personal information for as long as your Account is active or as needed to provide the Service. Review files and audit trail records are retained for a minimum of seven (7) years to support regulatory compliance and litigation defense purposes. Upon Account termination, we will delete or anonymize your personal information within ninety (90) days, except for data we are required or permitted to retain by law or for legitimate business purposes (such as audit trail records).

We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS 1.2+) and at rest
• SHA-256 hash-chaining of all review file events to ensure tamper-evidence
• Role-based access controls within our systems and within your organization's Account
• Regular security assessments and monitoring
• Secure payment processing through PCI DSS-compliant third-party processors

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

We use the following types of cookies and technologies:

• Essential Cookies: required for the Service to function (authentication, session management, security)
• Functional Cookies: remember your preferences and settings
• Analytics Cookies: help us understand how you use the Service to improve performance and features

You can control cookies through your browser settings. Disabling essential cookies may impair your ability to use the Service.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you
• Correction: request that we correct inaccurate or incomplete information
• Deletion: request that we delete your personal information, subject to legal retention requirements
• Portability: request a machine-readable copy of your data
• Opt-Out: unsubscribe from marketing communications at any time
• Restriction: request that we limit the processing of your information in certain circumstances

To exercise any of these rights, contact us at info@dotscreener.com. We will respond to your request within thirty (30) days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt out of the “sale” of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To submit a CCPA request, email us at info@dotscreener.com with the subject line “CCPA Request.”

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at info@dotscreener.com.

The Service may contain links to or integrate with third-party services (e.g., FMCSA, Stripe). This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you interact with. Key third-party services include:

• FMCSA QCMobile: public-record carrier safety data source
• Stripe, Inc.: payment processing — see stripe.com/privacy
• Supabase: database and authentication services
• Vercel: application hosting and deployment

Your information may be transferred to and processed in the United States, where our servers and service providers are located. By using the Service, you consent to the transfer of your information to the United States and acknowledge that data protection laws in the United States may differ from those in your jurisdiction.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Privacy Policy on the Service and updating the “Last Updated” date. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

If you have questions about this Privacy Policy or our data practices, please contact us: