Privacy Policy

1. Who we are and what this Policy covers

1.1 S&P Auto Transportation and Haul LLC, a Texas limited liability company ("Company", "we"), 5334 Bond St Apt 323, Irving, Texas 75038, is the controller of personal data processed through spautotransportation.com, the installable web app, Carrier Check, and our emails and text messages (the "Platform").

1.2 This Policy explains what we collect, why, with whom we share it, how long we keep it, and your choices and rights. Privacy questions: [the contact form at https://spautotransportation.com/contact] or (726) 348-2000.

2. Information we collect

2.1 Account data: name, email, phone, password (stored hashed), multi-factor authentication settings, role, language, and preferences.

2.2 Company data: legal name, DBA, address, USDOT and MC numbers, dealer or broker license numbers, member list, and, where requested, EIN.

2.3 FMCSA and public data: registration, operating authority, safety ratings, out-of-service orders, inspection and crash counts, and insurance on file, retrieved from FMCSA systems (QCMobile, SAFER, Licensing & Insurance) and other public sources.

2.4 Insurance documents: certificates of insurance you upload and the fields we extract from them (insurer, policy number, limits, effective and expiration dates, agent contact).

2.5 Identity verification: images of a government ID and a selfie, processed by a third-party provider [Stripe Identity]; we receive the result (pass/fail/review) and limited attributes such as name and document type.

2.6 Loads and transactions: vehicle details and VINs, pickup and delivery addresses and contacts, prices, requests and counters, dispatch records, messages between users, and ratings.

2.7 Inspection data: vehicle photos, damage notes, signer name and drawn signature, and precise geolocation with timestamp, captured only while a driver performs a pickup or delivery inspection and has granted browser location permission.

2.8 Payment data: handled by Stripe. We receive card brand, last four digits, billing address, and subscription status. We never store full card numbers.

2.9 Device and usage data: IP address, browser and operating system, device identifiers, pages viewed, clicks, funnel events, crash logs, and cookies or local storage.

2.10 Communications: emails, text messages, and support requests you exchange with us.

2.11 Prospecting data: business contact details of carriers and dealers from public sources (FMCSA census files, Google Places) used for business-to-business outreach.

3. How we use information

3.1 To operate the Platform: create accounts, publish Loads, record requests, counters, and Dispatch, store inspection records and bills of lading for the parties, and provide Carrier Check.

3.2 To verify eligibility and prevent fraud: check FMCSA data, extract and validate COIs, verify identity and phone numbers, detect duplicate or suspicious accounts, and re-check nightly. We use automated tools, including artificial intelligence (Anthropic models) to extract fields from documents and pre-screen identity images. Exceptions are reviewed by a person; you may contest an automated result at [the contact form at https://spautotransportation.com/contact].

3.3 To display Verification Data to counterparties and Carrier Check subscribers (see Section 4).

3.4 To send transactional notices by email, SMS, voice, and push (Section 7).

3.5 To bill subscriptions and collect applicable taxes.

3.6 To provide support, secure the Platform, debug, and analyze usage.

3.7 To comply with law, enforce our Terms, and protect rights and safety.

3.8 For business-to-business marketing, with the consents and opt-outs described in Section 7.

3.9 To produce de-identified, aggregated statistics (for example, average price per mile on a lane). We do not sell personal data and do not use it for targeted advertising.

4. How we share information

4.1 Counterparties. Before Dispatch, Carriers see a Shipper's company name, rating, completed-Load count, city-level pickup and delivery, vehicle type, dates, and price; Shippers see a Carrier's company name, USDOT/MC, authority and insurance status, ratings, and equipment. After Dispatch, both parties see each other's contact names, phone numbers, emails, exact addresses, and full VINs. Inspection photos, signatures, and geolocation stamps are shared with the parties to that Load.

4.2 Carrier Check subscribers see a carrier's public FMCSA data, insurance status (insurer, limits, expiration; not policy numbers), and ratings.

4.3 Service providers, under contracts that limit their use of data to providing services to us: Google (Firebase and Google Cloud: authentication, database, file storage, hosting; Maps and Places: address lookup and mileage); Vercel (web hosting); Resend (email delivery); Twilio (SMS and voice); Stripe (payments, tax calculation, identity verification); Anthropic (automated extraction of fields from documents you upload, under commercial terms that prohibit training on your data); and FMCSA systems (we send USDOT numbers to retrieve records).

4.4 Legal and safety: to regulators including FMCSA, law enforcement, courts, or insurers when required by law or legal process, to investigate fraud or double brokering, or to protect the rights and safety of users and the public.

4.5 Business transfers: to a successor in a merger, acquisition, or asset sale, subject to this Policy.

4.6 We do not sell personal data, do not share it for cross-context behavioral advertising, and do not process sensitive data for sale.

5. Retention

Account and company data: while the account is open and 3 years after closure. Load, Dispatch, inspection, and bill-of-lading records: 7 years, because parties to a Load may need them for Carmack claims and tax purposes. COIs and extracted insurance fields: 3 years after expiration. Identity-verification images: held by the provider; we keep only the result. Messages: 3 years. Usage logs: 24 months. Consent records for SMS and email: 5 years. Backups are purged within 90 days. We delete sooner on request where no legal hold or counterparty need applies, and we may keep de-identified data indefinitely.

6. Security

We use encryption in transit and at rest, database security rules that limit each user to their own data, multi-factor authentication, least-privilege access for staff, and audit logging. No system is perfectly secure. If a breach affects your data, we will notify you and regulators as required by Texas Business & Commerce Code § 521.053 and other applicable laws.

7. Your choices: email, SMS, calls, cookies, location

7.1 Email. Marketing emails include an unsubscribe link and our postal address; we honor opt-outs within 10 business days (CAN-SPAM). Transactional emails (verification, Dispatch, billing, security) continue while your account is open.

7.2 SMS. We send marketing texts only with your prior express written consent given through a separate, unchecked opt-in box. Reply STOP to any message to opt out, HELP for help. Transactional texts about your account and Loads are sent when you provide a phone number; you can turn them off in Account › Notifications or by replying STOP, which may limit the Platform's usefulness. Message frequency varies; message and data rates may apply. Full details are in the SMS Terms.

7.3 Calls. We may call you about your account or a Load. Marketing calls are made only with consent.

7.4 Push notifications can be turned off in your browser or device settings.

7.5 Cookies. We use essential cookies and local storage to keep you signed in and remember preferences, and first-party analytics to understand usage. We do not use third-party advertising cookies. Your browser can block or delete cookies.

7.6 Location. Precise location is requested only during inspections. You can decline in your browser; the inspection then records no coordinates and the counterparty will see that.

8. Your privacy rights

8.1 Texas. The Texas Data Privacy and Security Act (TDPSA) exempts small businesses as defined by the U.S. Small Business Administration, and we currently qualify for that exemption. We nevertheless honor the following rights for all users: to confirm whether we process your data and access it; to correct inaccuracies; to delete your data; to obtain a portable copy; and to opt out of sale, targeted advertising, and profiling (none of which we perform). We will respond within 45 days, extendable once by 45 days, and you may appeal a refusal by writing to [the contact form at https://spautotransportation.com/contact] with "Appeal" in the subject.

8.2 California. If you are a California resident, you have rights under the CCPA/CPRA to know, delete, correct, and limit, and not to be discriminated against for exercising them. We do not sell or share personal data as those terms are defined. We honor these rights even if we fall below the law's thresholds. An authorized agent may act for you with written permission.

8.3 Other U.S. states. We honor the same rights for residents of any state with a comprehensive privacy law.

8.4 Business contact data. Information about you in your capacity as a representative of a business (name, business email and phone, USDOT) may be exempt from some rights; we still honor correction and deletion requests where no legal retention duty applies.

8.5 How to exercise. Email [the contact form at https://spautotransportation.com/contact] or use Account › Privacy. We verify requests using your account email and, for sensitive requests, a second factor. Deletion of a company's records may be limited while open Dispatches or legal holds exist, and will not remove records a counterparty is entitled to keep.

9. Children

The Platform is for adults 18 and older. We do not knowingly collect data from minors and will delete such data on notice.

10. International transfers

Company is a U.S. entity and stores data in the United States (Google Cloud, [us-central1]). Our owner and operations staff are located in Mexico and access data remotely under the same security controls. FMCSA data is U.S. public data. By using the Platform you understand that your data is processed in the United States and accessed from Mexico, where laws may differ from your home jurisdiction.

11. Changes and contact

We will post changes here and, for material changes, notify you by email or in-app at least 15 days before they take effect. Contact: S&P Auto Transportation and Haul LLC, 5334 Bond St Apt 323, Irving, TX 75038 · (726) 348-2000 · [the contact form at https://spautotransportation.com/contact].

---