Privacy Policy

1. Scope

This policy covers personal and commercial information Haulpoint handles for users in Canada and the United States. It is written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and U.S. state privacy laws including the California Consumer Privacy Act as amended by the CPRA.

2. What we collect

Account details (name, company, email, phone); operating credentials (USDOT, MC and operating-authority status, surety bond, CVOR, CTQ, NSC numbers, insurer, policy number, coverage amounts and expiry dates); load and offer records; messages exchanged with counterparties; uploaded paperwork such as BOLs, PODs, invoices and certificates of insurance; ratings; and technical log data.

3. Why we use it

To operate the marketplace, verify operating authority and insurance, prevent cargo theft, fraud and double-brokering, display reputation, deliver notifications, and meet legal and record-keeping obligations. We do not sell or share personal information for cross-context behavioural advertising.

4. Consent (PIPEDA)

We collect, use and disclose personal information with your knowledge and consent, for the purposes stated above. You may withdraw consent at any time, subject to legal and contractual limits — note that withdrawing consent to verification checks means your account cannot remain active on the marketplace.

5. Cross-border transfer

Your information is processed on servers that may be located in the United States and Canada, and is disclosed to verification sources such as the FMCSA, provincial regulators and insurance-certificate monitoring providers. While in another country, information may be accessible to that country's courts and law enforcement. We use comparable contractual safeguards with every processor.

6. Your rights

You may request access to, correction of, or deletion of your information, request a portable copy, limit the use of sensitive information, and appoint an authorized agent. Californian users may exercise these rights without discrimination in service or price. Requests are answered within 30 days (PIPEDA) or 45 days (CCPA).

7. Retention and security

Transaction, document and verification records are retained while your account is active and afterwards only as long as required by transportation and tax record-keeping rules, then destroyed. Documents are held in private storage reachable only by the parties to that load; access is controlled by row-level database rules and short-lived signed links.

8. Complaints

Contact the platform operator's privacy officer first. Canadian users may escalate to the Office of the Privacy Commissioner of Canada; Californian users may contact the California Privacy Protection Agency.