Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account information: name, email address, phone number, and password (managed by Clerk)
• Business information: company name, role, Motor Carrier (MC) number, Department of Transportation (DOT) number, and business type
• Ratings and reviews: ratings across 8 categories, written reviews, and scam reports you submit
• Payment information: billing address and payment method details (processed and stored by Stripe; we do not store card numbers)
• Communications: messages you send to us via email or through the platform

1.2 Information Collected Automatically

• Usage data: pages visited, features used, search queries, companies viewed, reports generated, and interactions with the platform
• Device information: browser type, operating system, device type, screen resolution, and language preferences
• Log data: IP address, access times, referring URLs, and error logs
• Cookies: essential cookies for authentication and session management (see Section 10)

1.3 Information from Third-Party Sources

• FMCSA data: operating authority status, insurance filings, safety ratings, inspection history, and complaint records from the Federal Motor Carrier Safety Administration
• SaferWebAPI data: supplementary carrier data from SaferWebAPI.com
• Web intelligence: publicly available mentions, reviews, and reports about companies gathered through automated web crawling via Firecrawl

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Verify your business identity through FMCSA federal databases
• Calculate Trust Scores and generate verification reports
• Display ratings, reviews, and scam reports to other users
• Process subscription payments and manage your billing
• Enforce usage limits based on your subscription plan
• Send transactional communications (account confirmations, billing receipts, security alerts)
• Detect and prevent fraud, abuse, and violations of our Terms of Service
• Analyze usage patterns to improve the Service
• Respond to your inquiries and support requests

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• With other users: When you submit a rating, your verified business identity (company name and MC/DOT number) is associated with that rating. Individual reviewer names are not displayed publicly.
• Clerk (authentication): Account credentials and session data for secure authentication
• Stripe (billing): Payment and subscription information for processing transactions
• FMCSA (verification): MC and DOT numbers submitted for business verification against federal databases
• Firecrawl (web intelligence): Company names and identifiers for gathering publicly available web mentions
• Law enforcement: When required by law, subpoena, court order, or governmental request
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we retain certain data as follows:

• Ratings and reviews: May persist in anonymized form as they contribute to community Trust Scores
• Transaction records: Retained for 7 years as required by financial regulations
• Log data: Retained for up to 90 days for security and debugging purposes
• Web intelligence cache: Automatically purged after 30 days

You may request complete data deletion by contacting support@true-verify.com. We will process deletion requests within 30 days, subject to legal retention obligations.

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal requirements
• Portability: Request a machine-readable export of your data
• Objection: Object to certain processing of your personal data
• Opt-out: Unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at support@true-verify.com. We will respond to all valid requests within 30 days.

6. Security Measures

We implement industry-standard security measures to protect your information:

• All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher
• Authentication is managed by Clerk with secure session handling and optional multi-factor authentication
• Payment processing is handled entirely by Stripe (PCI DSS Level 1 certified)
• Database access is restricted and encrypted at rest
• Regular security reviews and monitoring of access patterns

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Children's Privacy

TrueVerify is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a person under 18, we will delete that information promptly. If you believe a minor has provided us with personal information, please contact us at support@true-verify.com.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know: You may request disclosure of the categories and specific pieces of personal information we collect about you
• Right to delete: You may request deletion of your personal information, subject to certain exceptions
• Right to opt-out of sale: We do not sell personal information. If this changes, we will provide a clear opt-out mechanism
• Non-discrimination: We will not discriminate against you for exercising your privacy rights

To submit a CCPA request, contact us at support@true-verify.com. We will verify your identity before processing any request.

9. International Users

TrueVerify is operated from the United States and is designed for the North American trucking industry. If you access the Service from outside the United States, you understand and consent to the transfer of your information to the United States, where data protection laws may differ from those in your jurisdiction.

10. Cookies Policy

We use the following types of cookies:

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled.
• Functional cookies: Remember your preferences such as billing cycle selection and search history
• Analytics cookies: Help us understand how the Service is used to improve the user experience. These are anonymized.

We do not use advertising or tracking cookies. You can manage cookie preferences through your browser settings, though disabling essential cookies may prevent you from using the Service.

11. Third-Party Services

The Service integrates with third-party services that have their own privacy policies. We encourage you to review the privacy policies of:

• Clerk (authentication): clerk.com/privacy
• Stripe (payments): stripe.com/privacy
• Vercel (hosting): vercel.com/legal/privacy-policy
• Supabase (database): supabase.com/privacy

We are not responsible for the privacy practices of these third-party services.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to the address associated with your account or through a prominent notice within the Service at least 30 days before they take effect. The "Last updated" date at the top of this page indicates when this policy was last revised.

13. Contact Us

For privacy-related inquiries, data requests, or concerns, contact us at:

support@true-verify.com

Nousphere Inc. · TrueVerify · true-verify.com