This policy explains what information Carriovix (operated by [Company LLC], "we") collects, why, who processes it for us, and the choices you have. Carriovix is back-office software for trucking carriers: a carrier company (our customer) uses it to manage loads, documents, dispatch, invoices and driver pay. Questions: support@carriovix.com.
1. Who is responsible for the data
For business records a carrier enters or imports (loads, rate confirmations, BOLs, PODs, invoices, broker and driver records), the carrier company decides what is collected and why; we process those records on its behalf. For account and website data (your sign-in, security logs, billing contact) we are responsible.
2. What we collect
- Account data: name, email, password (stored only as a secure hash by our authentication provider), company name, role.
- Business documents and records: rate confirmations, bills of lading, proofs of delivery, payment remittances and the data read from them (load numbers, stops, dates, rates, broker and carrier identifiers, signatures).
- Broker records: broker names, MC/USDOT numbers and public authority data from the FMCSA (U.S. Department of Transportation).
- Driver data: driver name and contact details entered by the carrier, trip status, uploaded photos/scans, pay statements.
- Driver location: the driver app sends the phone's location when the driver confirms pickup or delivery and, while the app is open on an active trip, at most every 2 minutes. It is used only to show the carrier where the trip is. Location is never collected when the app is closed or when the driver has no active trip, and the phone always asks the driver for permission first.
- Connected mailbox data (optional): see section 4.
- Technical data: security and error logs needed to run the service (request time, page, error details). Error reports are scrubbed of personal details before they are sent.
We do not sell personal information, we do not use it for advertising, and we use no advertising or analytics cookies.
3. Why we use it
- To provide the service: create loads from documents, verify brokers, dispatch drivers, prepare invoices and driver settlements.
- To keep the service secure and working: sign-in, fraud and abuse prevention, error monitoring, backups.
- To communicate with you about your account (for example password reset or invoice delivery notices).
4. Gmail and Outlook connections
A carrier may connect a Gmail or Microsoft 365/Outlook mailbox so freight paperwork arrives automatically. We request read-only access. We check message metadata (subject and attachment names) with fixed rules to find freight paperwork, such as a PDF rate confirmation, BOL, POD or a payment advice. Only those messages and their attachments are imported. Other messages are not stored. We never send, delete or change email in your mailbox. You can disconnect at any time in Settings → Email connections and also revoke access in your Google or Microsoft account.
Carriovix's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google or Microsoft APIs is not used to train AI models and is not shared except with the service providers in section 5, only as needed to provide the features you use.
5. Service providers
We use these providers to run Carriovix. They process data only on our instructions.
| Provider | Purpose |
|---|---|
| Supabase | Database, file storage and sign-in |
| Netlify | Website hosting and server functions |
| OpenAI (API) | Reading freight documents (uploaded or imported from a connected mailbox) to identify the document type and extract load data. Under OpenAI's API terms this data is not used to train their models. |
| Resend | Sending and receiving service email (invoices, account notices) |
| Sentry | Error monitoring, with personal details removed |
| TomTom | Route distance and drive-time calculation (addresses and coordinates of stops) |
| FMCSA / U.S. DOT data services | Public broker authority lookups (MC/USDOT numbers only) |
| Google, Microsoft | Optional mailbox connection (section 4) |
| Stripe (when billing is enabled) | Subscription payments. We do not store card numbers. |
We may also disclose information when required by law, or to protect the rights and safety of our users and the service.
6. Retention and deletion
- Records are kept while the carrier's account is active, so invoices, delivery proof and pay history stay available.
- Any user can delete their own login in Settings → Account & data.
- An owner can close the company account. Access is locked at once, and all company data (records, documents, connected mailboxes) is permanently deleted 30 days later. Until then, the owner can cancel the closure or download an export.
- Backups and logs are kept for a limited time and then expire.
7. Your choices and rights
You can see and correct your account information in the app, export company data (owners and admins), disconnect mailboxes and delete your login. Drivers can ask their carrier, or us, about their data. Depending on where you live (for example California), you may have rights to access, correct, delete or obtain a copy of your personal information. Email support@carriovix.com. We will not discriminate against you for using these rights. If a request concerns records a carrier controls, we will work with that carrier.
8. Security
Data is encrypted in transit. Each company can access only its own data. Mailbox access tokens are encrypted, and sensitive operations run only on our servers. No system is perfectly secure. If we learn of a breach affecting your personal information, we will notify you as required by law.
9. Children
Carriovix is a business tool and is not directed to children under 16. We do not knowingly collect their information.
10. Changes
We will post changes on this page and update the date above. For material changes we will notify account owners by email or in the app.