Privacy policy
Privacy Policy
Last Updated: August 2025
1. Introduction
Truxo, Inc. ("Truxo," "we," "us," or "our") provides a cloud-based Transportation Management System (TMS) and companion Android / iOS apps that enable brokers, carriers, drivers, dispatchers, and shippers to plan, track, and settle freight loads (the "Services"). Protecting your privacy is central to our mission.
This Privacy Policy explains what personal information we collect, how we use and share it, and the rights and choices available to you.
2. Scope
This Policy applies to personal information processed when you:
- Visit any Truxo-controlled website, including truxo.ai.
- Use the Truxo web platform.
- Install or interact with the Truxo mobile load-tracking app.
- Communicate with us by email, phone, or other channels.
Employee data collected in the context of employment is governed by a separate internal policy.
3. Key Definitions
| Term | Meaning |
|---|---|
| Personal Information (PI) | Data that identifies, relates to, describes, or could reasonably be linked to an individual or household. |
| Sensitive Personal Information (SPI) | Categories defined under the California Privacy Rights Act (CPRA), including precise geolocation, driver license numbers, bank details, and account log-in credentials. |
| Sale | Disclosure of PI to a third party for monetary or other valuable consideration. |
| Share | Disclosure of PI to a third party for cross-context behavioural advertising. |
| Consumer / You / Your | An individual whose PI is processed by Truxo. |
4. Information We Collect
| Category | Examples | Purpose |
|---|---|---|
| Account & Contact Data | Company name, contact name, email, phone, mailing address, billing details | Set up and manage user accounts; customer support |
| Operations Data | Load details, rate confirmations, invoices, proof-of-delivery documents | Provide core TMS functions; generate and reconcile invoices; audit trail |
| Mobile App Geolocation (SPI) | Real-time GPS pings from the driver app while a load is "In Transit" | Live load visibility; ETA calculations; safety and regulatory compliance |
| Payment Data (SPI) | Bank account numbers, payment-card details | Process subscription fees and carrier settlements; fraud prevention |
| Log & Usage Data | IP address, browser type, device ID, clickstream events, error logs | Platform security; analytics; service optimisation |
| Communications | Support tickets, emails, in-app chat, phone recordings | Customer service; quality assurance; training |
| Cookies & Similar Tech | Session cookies, local storage, pixels | Authenticate sessions; remember preferences; performance analytics |
You may decline certain data, but some features may not function properly without it.
5. How We Use Information
- Provide & Improve Services – dispatch loads, track shipments, automate invoicing, develop new features.
- Communicate – send account notices, updates, and support responses.
- Security & Fraud Prevention – verify users, detect malicious activity, enforce terms.
- Marketing – send product announcements or newsletters (email / SMS only with your consent; opt-out any time).
- Analytics & Machine Learning – use aggregated or de-identified data to improve route optimisation, pricing insights, and predictive ETAs.
- Legal & Compliance – meet tax, regulatory, and contractual obligations.
6. Legal Bases for Processing (EEA / UK)
Where the EU / UK General Data Protection Regulation applies, we rely on:
- Performance of Contract – to deliver the Services you request.
- Legitimate Interests – to improve Services, secure our platform, and communicate with you (interests balanced against your rights).
- Consent – for marketing communications and non-essential cookies.
- Legal Obligation – to comply with applicable laws (e.g., tax, bookkeeping).
You may withdraw consent at any time.
7. Sharing & Disclosure
Truxo does not sell Personal Information anddoes not share it for behavioural advertising. We disclose PI only to:
- Service Providers – cloud hosting, customer support, payment processors (e.g., Mapbox, Twilio, SendGrid, future partners such as Stripe, Samsara, Highway, DAT).
- Integration Partners – third-party systems you choose to connect.
- Affiliates / Successors – as part of a merger, acquisition, or asset transfer.
- Authorities – when required by law or to protect rights, safety, and property.
All recipients are bound by contractual obligations to safeguard PI and use it solely for the agreed purpose.
8. Cookies & Tracking Technologies
We use first-party cookies and similar technologies to:
- Authenticate users and maintain sessions.
- Remember preferences.
- Measure site performance and detect bugs.
You can control cookies through browser settings; disabling cookies may limit functionality.
9. Data Minimisation & Retention
| Data Type | Default Retention | Rationale |
|---|---|---|
| Load, shipment & invoice records | Duration of Account | Tax & regulatory compliance |
| GPS pings (mobile app) (SPI) | Duration of Account | Operational analytics; dispute resolution |
| Payment & billing data (SPI) | Duration of Account | Accounting standards |
| Support tickets & logs | Duration of Account | Quality assurance; legal defence |
| Marketing contact data | Until opt-out or 2 years of inactivity | Consent management |
After retention periods lapse, we delete or de-identify information unless legal obligations require longer storage.
10. Security
We use industry-standard safeguards, including:
- Encryption in transit and at rest.
- Role-based access controls and multi-factor authentication.
- Regular vulnerability scanning and annual penetration testing.
- Documented incident-response plan.
No security method is infallible; we encourage you to protect your credentials.
11. Additional Rights for California Residents
11.1 Notice at Collection
See Sections 4 and 9 for categories, purposes, and retention periods for PI and SPI.
11.2 Your CPRA Rights
California residents may, once verified, exercise the rights to know, access, delete, correct, port, opt-out of sale / sharing(not applicable today), limit use of SPI, and be free from discrimination.
11.3 How to Exercise Your Rights
- Web Form: Links labelled "Privacy Choices" in the footer and within account settings.
- Email: info@truxo.ai
We will respond within 45 days (one 45-day extension if reasonably necessary).
11.4 Sensitive Personal Information
We collect SPI only to provide or secure the Services and do not use it to infer characteristics about you.
11.5 Children
We do not knowingly collect, sell, or share PI of children under 16. Our Services target business users.
12. International Transfers
We operate primarily in the United States. If you access the Services from outside the U.S., your information will be transferred to, stored in, and processed in the U.S. and other countries where our service providers operate. We rely on legally recognised transfer mechanisms (e.g., Standard Contractual Clauses) when required.
13. Do Not Track
Currently, we do not respond to browser "Do Not Track" signals because an industry standard has not been finalised.
14. Updates to This Policy
We may revise this Policy periodically. Material changes will be posted here with a new "Last Updated" date and, where appropriate, notified by email or in-app message. Continued use of the Services after the effective date constitutes acceptance of the revised Policy.
15. Contact Us
ContactLet's move freighttogether
Questions about pricing, features, or switching from another TMS? Tell us a little about your operation — how many trucks, broker or carrier — and a real person will reply within one business day. No spam, no pressure.