Privacy Policy

Last updated: May 2, 2026

Operator: TruckerProfit Inc., a Sultan Freight Logistics company. Newark, NJ.

TL;DR: We collect only what's needed to operate the app (email, name, location for IFTA/routing, voice commands while you use them). We don't sell your data. We don't track you across the web. You can delete your data anytime by emailing privacy@truckerprofit.com.

1. What we collect

Account data

Email address (for login + receipts + service notifications)
Name (display + invoicing)
Phone number (optional, for SMS dispatch alerts)
Subscription tier (Free, Pro, Fleet)

Operational data

Approximate location (state-level for IFTA filing) and precise location while routing (state line crossings, deadhead miles, fuel stop suggestions)
Trip records you log: origin, destination, miles, revenue, fuel, tolls, detention
Voice commands (transcribed locally on Web Speech API or via OpenAI Whisper if configured) — used immediately for dispatch actions, not stored beyond the session
BOL/POD images, fuel receipts (only when you choose to attach them)
Device identifiers (random UUID for anti-trial-abuse — D10)

Payment data

Card data is handled exclusively by Stripe (PCI Level 1). We never see or store your card number, CVV, or full PAN. We store only the Stripe customer ID and last-4 of the card for display in your billing portal.

2. How we use it

Operate the app: calculate profit, file IFTA, route loads, manage your subscription.
Communicate with you: service emails (receipts, password resets, refund confirmations) and optional newsletter (opt-in only).
Improve the product: aggregated, anonymized usage trends — no individual tracking, no third-party analytics SDKs that profile you.
Comply with law: respond to subpoenas, prevent fraud, enforce our Terms.

3. Who we share with

We share data only with these processors, only for the stated purpose:

Stripe — payment processing.
HostGator / Bluehost — server hosting (data resides in U.S. data centers).
EmailJS / SMTP provider — transactional and marketing email delivery.
OpenAI (only if you use AI Profit Score with our key) — voice transcription and intent classification. We never send PII; only the load math.
Geoapify / TollGuru — routing and toll calculation. Only the route's coordinates, no user identity.

We do not sell your data, share it with advertisers, or feed it to data brokers.

4. Your rights

California (CCPA/CPRA)

Right to know: request a copy of all data we hold about you (email privacy@truckerprofit.com; we respond within 45 days).
Right to delete: request deletion of your data. We delete within 30 days, except records we must keep for tax/legal reasons (Stripe receipts, IFTA filings).
Right to opt-out of sale: we don't sell, but you can confirm via the same email.
Non-discrimination: exercising your rights does not affect your service or pricing.

EU/UK (GDPR)

Lawful basis: contract performance (subscription) + legitimate interest (fraud prevention, product improvement) + consent (marketing email).
Right to access, rectify, erase, restrict, port, object: email privacy@truckerprofit.com; we respond within 30 days (extendable to 60 for complex requests).
Lodge a complaint with your supervisory authority if unsatisfied.

5. Data retention

Active accounts: as long as you have a subscription.
Canceled accounts: 30 days, then full deletion (except Stripe receipts and IFTA filings retained 7 years for tax law).
Voice transcripts: not stored. Discarded after the dispatch action completes.
Server logs: 90 days, then rotated.

6. Security

We use HTTPS for all traffic, encryption at rest for the database, role-based access for our team, and weekly automated security scans. We follow the principle of least privilege and rotate credentials quarterly. If we ever experience a data breach affecting your data, we'll notify you within 72 hours per GDPR (or 30 days per CCPA, whichever applies).

7. Children

TruckerProfit is for adults holding a Commercial Driver's License (CDL). We don't knowingly collect data from anyone under 18. If you believe we have, email privacy@truckerprofit.com and we'll delete it.

8. Changes

If we make material changes, we'll notify active subscribers via email at least 30 days before they take effect. Minor updates (typos, clarifications) take effect immediately and are reflected in the "Last updated" date above.

9. Contact

Privacy questions: privacy@truckerprofit.com
Data deletion / DSAR: privacy@truckerprofit.com with subject "DSAR — [your email]"
Postal: TruckerProfit Inc., 2028 Madison Ave, New York NY (registered) · operations: Sultan Freight Logistics LLC, Newark NJ