Privacy Policy

CHARTERTRACE PRIVACY POLICY Effective Date: February 12, 2026 At CharterTrace, we treat logistics data as an asset class, not just a byproduct. We are committed to the principle that you own your data, and we are merely the secure vault and processor. This policy outlines how we protect Brokers from competitive espionage and Drivers from surveillance. 1. SECURITY: THE "VAULT" STANDARD We do not store plain text data. All information flowing through CharterTrace is secured using military-grade cryptography to ensure that even in the event of a breach, your data remains unreadable and useless to bad actors. • Encryption at Rest: All databases, file stores (including Rate Confirmations), and backups are encrypted using AES-256. • Encryption in Transit: All data moving between your device and our servers is protected via TLS 1.3 (the modern standard), preventing "man-in-the-middle" attacks at truck stops or public Wi-Fi. • Zero-Knowledge Architecture: For sensitive financial credentials (bank accounts), we use a "Zero-Knowledge" proof with Stripe; CharterTrace never sees or stores your raw banking numbers. 2. FOR BROKERS: ANTI-ESPIONAGE & DATA SOVEREIGNTY We understand that your "Lane History" and "Rate Confirmations" are your competitive advantage. We are not a load board; we do not sell your pricing data. A. Email Integration & "Whitelisting" • Strict Scope: When you connect your email (Gmail/Outlook), our algorithms strictly "whitelist" and parse only emails containing specific logistics keywords (e.g., "Rate Confirmation," "Load #," "DO NOT DUPLICATE"). • Instant Discard: All other emails (personal correspondence, internal memos) are ignored at the header level and are never downloaded, processed, or stored. • AI Training Consent: We do not use your proprietary rate data to train public AI models or market-rate prediction tools for your competitors. Your data trains only your specific instance of the CharterTrace engine. B. Document Retention & Purge • Automatic Purge: To minimize liability, you may configure CharterTrace to automatically permanently delete raw Rate Confirmation PDFs 30 days after Proof of Delivery (POD). We will retain only the necessary metadata (Origin, Destination, Rate) for your analytics dashboard. • Non-Compete Guarantee: CharterTrace creates a "Data Silo" for every brokerage. We contractually guarantee that we will never aggregate your specific lane data to build "Market Indices" or sell "Lead Lists" to other brokers. 3. FOR DRIVERS: PRIVACY, SAFETY & COMPENSATION You are a professional, not a tracking beacon. Our app is designed to prove your work, not spy on your life. A. The "Geofence Auto-Kill" Switch • Session-Based Tracking: GPS data collection is strictly tied to an active Load ID. • Automatic Termination: Tracking automatically ceases when two conditions are met: 1. The shipment status is updated to "Delivered." 2. The device exits the geofence of the delivery facility (radius: 1 mile). • Off-Duty Privacy: We do not collect, store, or transmit location data when you are "Off Duty" or between loads. If you forget to turn off the app, our "Stale Session" timer kills location services after 4 hours of inactivity. B. Anti-Bias & Metadata • Fraud Detection Only: We collect device battery level, network type, and timezone solely to detect "GPS Spoofing" and "Double Brokering" fraud. • No Algorithmic Scoring: We guarantee that this metadata is never used to generate a "Driver Reliability Score" or to filter you out of available loads. C. The Driver Data Dividend We believe if we use your data, you should be paid. • Verified Location Pay: Drivers are compensated for every verified location ping used to audit a shipment. • Data Ownership: You retain the right to download your full location history (e.g., to prove your location in a speeding ticket dispute or insurance claim) at any time. We will never sell your location history to insurance carriers or data brokers. 4. DATA RETENTION SCHEDULE Data Type | Retention Period | Action After Period GPS Coordinate Data | 90 Days post-delivery | Hard Delete (Scrubbed from servers) Rate Confirmations (PDF) | User Configurable (Default: 6 Months) | Hard Delete Financial Transaction Logs | 7 Years (IRS Requirement) | Archived in Cold Storage Chat/Message Logs | 1 Year | Anonymized (Names removed) 5. YOUR RIGHTS (CCPA, GDPR, & 2026 STATE LAWS) Regardless of where you live, CharterTrace extends these rights to all users: • Right to Delete: Request full deletion of your account and data. We process these requests within 15 days (faster than the legal 45-day requirement). • Global Privacy Control (GPC): Our website and app automatically recognize and honor "Do Not Sell/Share" signals from GPC-enabled browsers. • No "Gatekeeper" Contact: You do not need to email a specific person. Initiate all data requests directly through the "Data Privacy Center" in your app settings. 6. COMMERCIAL USE ONLY CharterTrace is a Business-to-Business (B2B) logistics utility. This Service is intended exclusively for use by independent freight contractors, carriers, and commercial drivers to verify freight milestones in exchange for financial compensation. This is not a consumer social, lifestyle, or navigation application. By accessing or using the Service, you acknowledge that you are entering into a commercial agreement to license specific telemetry data to us in exchange for payment. 7. THE "DATA-FOR-VALUE" COVENANT Unlike traditional tracking applications that monitor driver behavior for fleet management, CharterTrace operates as a Verification Marketplace. • The Transaction: You voluntarily provide high-fidelity location telemetry ("Proof of Location") strictly during the transportation of a specific freight load. • The Consideration: In exchange for this data, you receive a transactional fee ("Access Fee") upon successful completion of the data stream (i.e., Delivery). • Status: You acknowledge that you are acting as an independent business entity. You are not an employee of CharterTrace, LLC, and this data collection is a commercial deliverable, not employee surveillance. 8. THE "CONTRACT WINDOW" (TEMPORAL LIMITS ON TRACKING) We respect your right to privacy and disconnection. Location tracking is not continuous. It is strictly bound by the "Contract Window": • START (Consent): Tracking initiates only when you manually tap "Accept Load" within the Application, thereby consenting to the specific rate and terms of that load. • STOP (Termination): Tracking terminates automatically upon the submission of "Proof of Delivery" (POD) or manual cancellation of the load. • IDLE (Sleep Mode): When no active load is assigned, the Application enters a dormant state ("Sleep Mode"). No location data is accessed, recorded, or transmitted during this period. 9. DATA SHARING & THIRD PARTIES We do not sell, rent, or trade your personal data to data brokers, ad networks, or hedge funds. Data is shared strictly to fulfill the logistics contract: • The Freight Broker/Shipper: We share anonymized location coordinates and status updates with the specific Broker assigned to your active load. • Limitation: The Broker's access to your real-time location is revoked immediately upon load completion. • Anonymization: We strip direct personal contact details (e.g., personal cell number) from the data stream where possible, providing only "Asset Location" to the Broker. • Legal Compliance: We do not voluntarily share data with government agencies or law enforcement unless compelled by a valid subpoena, court order, or search warrant strictly related to a criminal investigation (e.g., cargo theft). 10. CHILDREN'S PRIVACY This Service is a B2B tool for professional drivers and is not intended for individuals under the age of 18. We do not knowingly collect data from children. 11. CHANGES TO THIS POLICY We may update this policy to reflect changes in our service or legal requirements. You will be notified of any material changes via an in-app notification. Continued use of the Service after such modifications constitutes your acknowledgment of the modified Policy. 12. CONTACT US For privacy-related questions, data export requests, security incidents, or to exercise your rights under CCPA/GDPR (where applicable), please contact: Email: jack@chartertrace.com CharterTrace, LLC