Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when you register for an account, use our Services, or communicate with us, including:

• Account Information: Name, email address, phone number, company name, job title, and account credentials.
• Company Information: DOT number, MC number, business address, tax identification numbers, insurance certificates, and operating authority details.
• Driver Information: Commercial driver's license (CDL) details, medical certificates, driving history, hours of service records, and qualification documents.
• Financial Information: Billing addresses, bank account details for ACH payments, and payment card information (processed through PCI-compliant third-party processors).
• Communication Data: Messages sent through NetExpress, support tickets, emails, and any other communications with us or through our platform.
• Documents: Bills of lading, proof of delivery, invoices, rate confirmations, and other transportation-related documents you upload.

1.2 Information Collected Automatically

When you use our Services, we automatically collect certain information, including:

• Device Information: Device type, operating system, browser type, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, features used, actions taken, time spent on pages, and navigation patterns.
• Location Data: GPS coordinates from mobile devices (with your consent) for fleet tracking, geofencing, and route optimization. See "Mobile App Location Data" below for details on background collection.
• Log Data: IP addresses, access times, referring URLs, and error logs.
• Cookies and Tracking: We use cookies, web beacons, and similar technologies to maintain session state, remember preferences, and analyze usage patterns.

1.3 Mobile App Location Data (Including Background Collection)

The NetModal mobile app collects precise location (GPS) data from drivers' devices to support active deliveries. When you are assigned to an active dispatch and location tracking is enabled, the app collects location data even when the app is closed or not in use (background collection). We collect this data to:

• Delivery tracking: Show dispatchers and authorized shipment parties the real-time position of an in-progress delivery.
• Estimated arrival times (ETAs): Calculate and update ETAs for pickup and delivery stops.
• Geofenced arrival/departure detection: Automatically record arrival at and departure from pickup and delivery locations.

Consent and control: Background location collection begins only after you (1) review an in-app disclosure, (2) affirmatively consent, and (3) grant the operating-system location permission. You can stop collection at any time from the app's Settings screen or by revoking the location permission in your device settings. Location data is never collected when you are off duty with tracking disabled.

Sharing: Driver location data is shared only with your employing company's authorized dispatch personnel and, in limited real-time tracking views, with parties to the specific shipment you are transporting. We do not sell location data, do not share it with advertisers, and do not use it for advertising or marketing purposes.

Retention: Location position history is retained as part of shipment operational records consistent with the retention periods in Section 5, and is used only for the purposes described above.

1.4 Information from Third Parties

We may receive information about you from third-party sources, including:

• ELD and telematics providers (driving data, vehicle diagnostics)
• Background check services (for driver qualification)
• Payment processors (transaction confirmations)
• Load board integrations (load and carrier data)
• FMCSA and DOT databases (compliance and safety records)

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our transportation management platform, including dispatch, tracking, billing, and compliance features.
• Account Management: To create and manage your account, authenticate your identity using our DID (Decentralized Identifier) system, and manage role-based access permissions.
• Communication: To send you service-related notifications, load updates, invoices, and customer support responses.
• Safety and Compliance: To monitor hours of service, track driver qualifications, maintain FMCSA compliance records, and support safety programs.
• Analytics and Improvement: To analyze usage patterns, identify trends, and improve our platform's features and performance.
• AI and Automation: To power our AI assistant, route optimization, smart dispatch, and other automated features.
• Security: To detect, prevent, and respond to fraud, unauthorized access, and other security threats.
• Legal Obligations: To comply with applicable laws, regulations, and legal processes.

3. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Within Your Organization: With other authorized users in your company based on their role-specific portal access and cell-level permissions.
• Business Partners: With brokers, shippers, receivers, and other parties involved in the transportation of loads you are handling, limited to information necessary for the transaction.
• Service Providers: With third-party vendors who perform services on our behalf, such as cloud hosting, payment processing, email delivery, and analytics.
• Integrations: With third-party services you choose to connect, such as ELD providers, accounting software, and load boards.
• Legal Requirements: When required by law, subpoena, court order, or other legal process, or when we believe disclosure is necessary to protect our rights or the safety of others.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, in which case your information may be transferred to the successor entity.

4. Data Security

We implement industry-leading security measures to protect your information:

• Encryption: All data in transit is protected with TLS 1.3. Sensitive data at rest is encrypted using AES-256. End-to-end encryption (AES-256-GCM) protects all NetExpress messages.
• Access Control: Our hierarchical bitmap permission engine ensures users only access data they are authorized to see, down to the individual field level.
• Audit Trails: All data access and modifications are logged with blockchain-backed immutable audit trails.
• Infrastructure: Our systems are hosted in SOC 2 Type II certified data centers with redundancy, automated backups, and disaster recovery procedures.
• DID Identity: Our decentralized identity system eliminates single points of failure in authentication and gives users ownership of their credentials.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you with our Services. Specific retention periods include:

• Account data: Duration of account plus 30 days after deletion request
• Load and transaction records: 7 years (as required by DOT and IRS regulations)
• Driver qualification files: Duration of employment plus 3 years
• Communication logs: 3 years
• Audit trail records: Permanently stored on blockchain

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request your data in a portable, machine-readable format. Our DID system ensures your identity is portable by design.
• Opt-Out: Opt out of marketing communications at any time by clicking the unsubscribe link in any email or updating your notification preferences.
• Location: Disable location tracking at any time from the mobile app's Settings screen or by revoking the location permission in your device's system settings, though this may limit delivery-tracking features.

To exercise any of these rights, contact us at privacy@netmodal.com or through your account settings.

7. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including standard contractual clauses and data processing agreements, to protect your information in accordance with this Privacy Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

NetModal, Inc.
Email: privacy@netmodal.com
Web: netmodal.com