Privacy Policy

1. Information We Collect

• Account information: name, email address, password hash, role, and organization affiliation.
• Operational data: loads, invoices, expenses, fuel transactions, settlements, customer and driver records, and related documents you upload.
• Driver and vehicle data: license and medical document images, vehicle information, GPS location while on duty, and odometer readings.
• QuickBooks Online integration data: when you connect a QuickBooks Online company, we receive OAuth tokens, your QuickBooks company (realm) ID, company name, and invoice and customer data necessary to push invoices to your accounting system. Tokens are encrypted at rest.
• Technical data: IP address, browser type, device identifiers, log files, and usage analytics.
• Cookies: session and authentication cookies required to operate the Service.

2. How We Use Information

• Provide, maintain, and improve the Service.
• Authenticate users and enforce role-based access.
• Process and sync invoices, payments, and accounting records.
• Communicate with you about your account, security, and updates.
• Comply with legal obligations and prevent fraud or abuse.

3. Legal Bases

We process personal information based on contract performance, legitimate interests in operating and improving the Service, your consent (where applicable), and compliance with legal obligations.

4. How We Share Information

• Service providers: infrastructure, database, email, payment, and analytics vendors who process data on our behalf under confidentiality obligations.
• Intuit / QuickBooks Online: when you authorize the integration, we send invoice, customer, and related data to your QuickBooks company.
• Within your organization: administrators, dispatchers, and accountants in your tenant may see operational data per their role.
• Legal: to comply with law, valid legal process, or to protect rights, safety, or property.
• Business transfers: in connection with a merger, acquisition, or sale of assets.

We do not sell personal information.

5. Data Retention

We retain personal information for as long as your account is active, as required to provide the Service, or as required by law. You may request deletion of your account at any time.

6. Security

We use industry-standard safeguards including encrypted connections (TLS), encrypted OAuth token storage (AES-256-GCM), row-level database security, hashed passwords, and role-based access controls. No system is perfectly secure; we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to processing or withdraw consent. To exercise these rights, contact us at the address below.

8. Disconnecting QuickBooks

You may disconnect your QuickBooks Online company at any time from the Integrations panel in Settings, or from Intuit’s App Management page. When you disconnect, we revoke the OAuth tokens and remove them from our systems.

9. International Transfers

Data may be processed and stored in the United States or other countries where our service providers operate. We rely on appropriate safeguards for cross-border transfers.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email.

12. Contact

For privacy questions or to exercise your rights, contact:

American Cargo & Service LLC
privacy@americancargoandservice.com