Privacy Policy

Haulora (“Haulora,” “we,” “us,” or “our”) operates the Haulora freight operating system available at haulora.co and related apps, APIs, and driver experiences (the “Services”). This Privacy Policy explains how we process personal data worldwide.

For privacy requests, email privacy@haulora.co. For legal notices, email legal@haulora.co.

This policy applies to account holders, workspace members, drivers using Haulora tools, website visitors, and individuals whose business contact details appear in freight communications processed through the Services.

If your organization uses Haulora, that organization is typically the controller of workspace operational data, and Haulora processes that data as a service provider / processor under our Data Processing Agreement where applicable.

We collect information in three main ways: you provide it, your workspace generates it while using Haulora, and we receive it from connected services you authorize (such as Google Workspace).

• Account & identity: name, email, password or SSO identifiers, role, and workspace membership.
• Company & fleet ops: company profile, MC/USDOT details you enter, drivers, trucks, loads, trips, documents, invoices, and related operational records.
• Communications metadata & content you choose to process: broker emails, drafts, negotiation threads, and appointment notes stored in your workspace.
• Location & telemetry: driver GPS updates and map/route context needed for live tracking and trip replay when enabled.
• Billing: plan selection, subscription status, and payment references from our Merchant of Record (Creem). We do not store full card numbers.
• Device & usage: IP address, browser type, approximate region, app events, and diagnostics needed to secure and improve the Services.
• Support: messages you send to support@haulora.co or through in-product support channels.

When you connect Google Workspace, Haulora may access only the Google data required for the features you enable — for example reading and sending mail related to dispatch, reading or writing spreadsheet rows used as load boards or ops trackers, and reading or creating calendar events for appointments.

• Purpose limitation: Google user data is used only to provide or improve user-facing Haulora features that are prominent in the product (dispatch, communications, load sync, scheduling).
• No selling: We do not sell Google user data.
• No advertising: We do not use Google user data for advertising, including personalized or retargeted ads.
• No AI training for unrelated models: We do not use Google user data to train generalized AI/ML models unrelated to providing or improving Haulora’s user-facing features for your workspace.
• Human access: Human access to Google user data is limited to security, abuse investigation, compliance with law, or with your explicit request/consent — consistent with Google’s Limited Use rules.
• Transfer limits: We do not transfer Google user data except to provide the requested features (including subprocessors bound by contract), for security, to comply with law, or as part of a corporate transaction with required notices/consents.
• Revocation: You can disconnect Google in Settings and revoke access in your Google Account permissions at any time.

Haulora stores OAuth tokens in encrypted form and scopes access to the minimum permissions needed for the enabled integrations.

• Provide, operate, and secure the Services (authentication, routing, dispatch, documents, invoicing, AI assistance with human approval controls).
• Process billing and subscriptions through Creem as Merchant of Record.
• Send service, security, and transactional notices.
• Improve reliability, detect abuse, and troubleshoot incidents.
• Comply with legal obligations and enforce our Terms and Acceptable Use Policy.
• Respond to support and privacy requests.

Where required, we process personal data under one or more of the following bases: performance of a contract; legitimate interests (securing and improving a B2B freight ops platform, in a manner that does not override your rights); consent (for optional cookies/integrations); and legal obligation.

We share information with subprocessors that help us run Haulora (hosting, database, email delivery, maps, payments), with your workspace administrators, and when you instruct us to (for example sending a broker message).

• Infrastructure & security providers that process data under contract.
• Creem (Merchant of Record) for checkout, taxes, invoices, refunds, and chargebacks.
• Google, when you authorize Workspace integrations.
• Professional advisors or authorities when required by law or to protect rights and safety.
• A successor entity in a merger, acquisition, or asset sale, subject to appropriate protections.

We do not sell personal information as “sale” is commonly defined under US state privacy laws, and we do not share personal information for cross-context behavioral advertising.

Haulora is built for carriers and dispatch teams operating across borders. Personal data may be processed in the United States and other countries where we or our subprocessors operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses and vendor due diligence.

We retain account and operational records for as long as your workspace remains active and as needed to provide the Services, resolve disputes, enforce agreements, and meet legal, tax, and audit requirements. You may request deletion subject to those obligations and any retention your organization configures.

We use administrative, technical, and organizational measures appropriate to a multi-tenant freight ops platform, including encryption in transit, access controls, tenant isolation practices, encrypted secrets for integrations, and audit trails for high-impact automation. No method of transmission or storage is perfectly secure; please use strong credentials and role-based access.

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing, and to withdraw consent. US residents may also have rights under state laws (for example California, Virginia, Colorado, Connecticut, Utah) including the right to know, delete, correct, and opt out of targeted advertising or profiling where applicable.

To exercise rights, email privacy@haulora.co. We may need to verify your identity and, for workspace data, coordinate with your organization. You may also contact your local supervisory authority if you believe we have not resolved a concern.

Haulora is a business service and is not directed to children. We do not knowingly collect personal data from anyone under 16 (or the higher age required in your jurisdiction).

We may update this Privacy Policy to reflect product, legal, or operational changes. We will post the updated date above and, when changes are material, provide additional notice through the Services or email.