Privacy Policy

We collect three kinds of information:

• Account information — your name, email address, company name, and phone number if you choose to provide it.
• Operations data you enter — the fleet and business records you and your team add to CargIQ, such as drivers, loads, equipment, documents, and accounting records.
• Technical data — our servers record requests (IP address, time, and the page or API called) to keep CargIQ secure and working.

We don't collect more than we need to run the service, and we don't buy data about you from third parties.

We use your information to provide and improve the service: running your account, displaying your fleet data to the people on your team who are authorized to see it, sending transactional emails (like password resets and notifications), and responding to support requests.

If you use our AI document features, the documents you upload (for example, rate confirmations) are processed to extract load details on your behalf.

We do not sell your data. Your data is used to provide the service to you — that's it.

We rely on a small number of service providers to run CargIQ. They process data only as needed to provide their part of the service:

• Amazon Web Services (AWS) — hosting and document storage.
• Postmark — transactional email delivery.
• OpenAI — AI document extraction. When you use AI features, document contents (such as rate confirmation details) are sent to OpenAI to extract structured load data.
• Samsara — an optional telematics integration. We only access Samsara data if you connect your own Samsara account.

Data in transit is encrypted with TLS (HTTPS). Documents are stored in AWS S3, and data at rest is encrypted using our cloud provider's encryption. Access within the app is controlled by roles and scoped by company, so users only see their own company's data. Sessions use short-lived access tokens with refresh tokens.

No system is perfectly secure, but we take reasonable, industry- standard measures to protect your information. You can read more on our Security page.

CargIQ Driver is our mobile app for drivers of carriers that use CargIQ. When you use it, the app processes:

• Profile information — your name, email address, company, and driver profile data, as provided by your employer.
• Your access code — stored on our servers only as a one-way hash.
• Device information — your device's push-notification token and device model, used to deliver load notifications.
• Photos and documents — the ones you choose to capture or upload. The app uses the camera only when you scan a company QR code or take a photo to upload, and your photo library only when you choose a photo to upload.
• Load events — the load event times you submit, such as when you complete a pickup or delivery.
• Crash and diagnostic reports — processed by Sentry. IP addresses are not stored.

The route map is displayed with the Google Maps SDK. Google provides it as an independent provider: when the map loads, your device sends Google a request that includes its IP address, and Google handles it under Google's privacy policy. We do not send Google your name or email address.

The app does not track your location and has no advertising. We do not sell your personal data, and we do not track you across other companies' apps or websites.

We share this information with your employer (the carrier account you belong to) and with service providers acting for us: Amazon Web Services (hosting), Expo, Apple and Google (push-notification delivery), and Sentry (crash and diagnostic reports).

Camera, photo, and notification permissions are optional. You can revoke them at any time in your phone's settings.

To delete your driver account, see Account Deletion.

• Carrier account data (users, loads, documents, driver records and statements) is kept while the carrier's CargIQ account is active, because the carrier needs it to run its business. When a carrier closes its account, we delete this data within 90 days, unless the law requires us to keep it longer.
• A driver's sign-in account is deleted within 30 days of a deletion request. A carrier can also remove a driver's access at any time, which takes effect immediately.
• Crash and diagnostic reports from the driver app are kept for up to 90 days.
• Server logs, which can include IP addresses, are kept for up to 90 days.
• Backups: database backups are kept for up to 7 days. Earlier and deleted versions of stored documents, including their backup copies, are kept for up to 90 days. Data deleted from CargIQ disappears from the backups when they expire.

Your data is yours. You can request an export of your data, or deletion of your account and its data, by emailing support@cargiq.com. Drivers can also request deletion in the CargIQ Driver app: open Me → Delete my account. We will confirm and act on verified requests within a reasonable time.

If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify you by email or in the app.

Questions about privacy or how we handle your data? Email us at support@cargiq.com.