DOT compliance records, deadlines, and managed support in one workspace.

Legal

Privacy Policy

Draft for pre-launch review. This policy has not been reviewed by legal counsel and its effective date is a placeholder. See docs/product/phase-9-public-website-and-sales.md for the Launch Gate requirement to finalize both before production launch.

Effective date: [PLACEHOLDER — to be finalized at Launch Gate]

This policy describes the information DOT Compliance collects through this website and the client portal, and how it is used, stored, and protected.

Information we collect

We collect the following categories of information:

  • Contact-form information: the name, company name, work email, phone number, USDOT number, fleet-size range, area of interest, and message you submit through our contact form, along with limited attribution (the page you submitted from and, if present, campaign source/medium/name).
  • Auth and account information: if you become a client, your email address and authentication credentials (managed by our authentication provider, Supabase Auth), your organization’s identity, and your role within it.
  • Compliance records: if you become a client, the driver, vehicle, company, and document records you or our staff enter into the platform on your organization’s behalf.
  • Document storage: files you or our staff upload to the platform, stored privately and accessed only through short-lived signed links or an authorized application request that re-checks your permissions.

Service providers

We rely on the following service providers to operate the platform:

  • Supabase — database hosting and authentication.
  • Google Cloud Storage — private document storage.
  • Our configured email delivery provider — transactional notification email, when enabled.

We do not sell your information, and we do not share it with third parties for their own marketing purposes.

Security and retention

Data is encrypted in transit and, where our providers support it, at rest. Access to client data is separated by organization and by role, and every access path is enforced at the server, not only in the interface you see. We retain contact-form submissions and account records for as long as reasonably necessary for the purposes described here, or as required by law; specific retention periods per data category are still being finalized (see the Launch Gate note above).

Contact requests

Submitting our contact form does not create an account, an organization, or a subscription. A member of our compliance team reviews the request and follows up directly; we do not send you a system-generated invitation until a staff member takes that deliberate action.

Your rights

You may ask us what information we hold about you, request a correction, or request deletion, by contacting us through the contact form. We will respond to verified requests within a reasonable time.