Privacy Policy
Last updated: July 13, 2026
This policy explains what data Haulstats collects, how we use it, and who we share it with. It applies to visitors of our marketing site and to companies and users using the Service.
What we collect
Account information: your name, email, company name, and password (stored as a one-way hash, never in plain text). Operational data: whatever your company enters to run its dispatch operation — shipments, drivers, trucks, trailers, customers, invoices, and messages. Documents and photos: proof-of-delivery photos, signatures, and PDFs you or your drivers upload. Driver location: GPS coordinates, collected only when a driver explicitly opts in via the location-sharing toggle, used solely to show that driver's position on your company's live map. Payment information: handled entirely by Stripe — we never receive or store your card number.
How we use it
To operate the Service (storing and displaying your operational data back to you), to process subscription payments, to send transactional emails (password resets, welcome/subscription confirmations, notifications), and to respond when you contact support. We don't use your operational data to train any AI model, and we don't sell it to anyone.
Who we share it with
We use a small number of service providers to run Haulstats, each of which only sees the data it needs to do its job:
- Stripe — payment processing and subscription billing
- Resend — sending transactional emails on our behalf
- Cloudflare R2 — storage for uploaded documents and photos
- Railway — database and backend API hosting
- Vercel — web application hosting
We don't share your data with anyone else, except where required by law.
Data isolation between companies
Haulstats is multi-tenant: many trucking companies use the same platform, but every company's data is strictly isolated from every other company's. No other Haulstats customer can see your shipments, drivers, customers, or documents.
Security
Passwords are hashed (never stored in plain text), sensitive third-party credentials (like ELD API keys) are encrypted at rest, and all traffic to and from the Service is encrypted over HTTPS. No system is perfectly secure, but we take reasonable, industry-standard measures to protect your data.
Data retention and deletion
We retain your data for as long as your account is active. If you close your account, you can request deletion of your company's data, which we'll carry out within a reasonable timeframe except where we're required to retain records for legal or accounting purposes.
Your rights
You can access, correct, or request deletion of your personal data at any time by contacting us through the contact page. Drivers added to a company account should direct these requests to their company admin, who controls that data.
Children's privacy
Haulstats is a business tool and isn't directed at or intended for use by children.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated by email or an in-app notice before they take effect.
Contact
Questions about this policy? Reach us via the contact page.