Draft pending legal review

Privacy

This notice is a draft for counsel. It describes what the app stores today.

What is collected

An account stores your name, email address, a password hash, the time you accepted the terms, and the desk you belong to. The desk stores watchlist notes, submission notes, alert rows, and audit events. Audit events can include an IP address. The contact form stores an email address and a message. It does not ask for a personal name. Carrier records are the public FMCSA corpus, not information you submit about yourself.

How long it is kept

• Report views are deleted after 400 days.
• Audit events, including the IP address on those rows, are deleted after 90 days.
• Email bodies are deleted after 30 days. Stored bodies do not keep live links.
• Rate-limit buckets are deleted after 2 days. Ingest run rows are deleted after 30 days. Read alerts are deleted after 180 days.

The daily job performs that cleanup. It does not run on an ordinary page view.

Deletion

You can delete your account from the account page. Confirm with your password. If you are the last person on the desk, the desk and its notes, alerts, and submissions are deleted with it. Carrier rows from the public record are not deleted, because other desks may use them.