Privacy Policy

Information We Collect

We collect data required to deliver fleet and DOT compliance workflows, plus technical service telemetry.

• Account and organization data: names, email addresses, role and organization membership
• Fleet-compliance records: driver qualification records, CDL/license data, medical compliance dates, permits, fleet assets, and invoice records
• Operational metadata: audit logs, error logs, and API usage events
• Automatically collected technical data: IP address, browser/device details, and route usage

How We Use Information

• Operate Fleet-Compliance and Penny features requested by authorized users
• Provide compliance workflows, reminders, and reporting
• Respond to support requests and operational incidents
• Maintain service security and prevent abuse
• Comply with legal obligations

AI Processing and Model Training

Penny queries may be processed by configured AI providers to generate responses. We do not permit customer data to be used to train shared foundation models. We send only the minimum context needed for the requested response.

Information Sharing

We do not sell personal information. We only share data when needed to operate services or comply with law.

• Trusted subprocessors under confidentiality and security obligations
• Legal requests or rights/safety protection
• Business transfer events (merger/acquisition/asset sale)

Subprocessors

Key subprocessors used by the service include Vercel, Neon, Clerk, Railway, Anthropic, Sentry, Stripe, Resend, Datadog, and Upstash.

The current subprocessor list is maintained in SUBPROCESSORS.md.

Security and Retention

We apply administrative, technical, and organizational safeguards, including encrypted transport and restricted access. For canceled organizations, data is soft deleted at 30 days and hard deleted at 60 days under the offboarding lifecycle.

Individual deletion requests are handled through our privacy request process and may be completed earlier when legally required.

Cookies and Analytics

We use essential cookies and analytics tools to operate the website and understand usage. You can control cookies in your browser settings.

Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data.

To request privacy actions, contact jacob@truenorthstrategyops.com.

GDPR and CCPA

We support GDPR and CCPA requirements, including transparency, lawful processing, data subject rights, and breach notification procedures.

Third-Party Links and Children's Privacy

External websites are governed by their own policies. Our services are not directed to children under 18, and we do not knowingly collect their personal information.

Policy Updates and Contact

We may revise this policy over time and will update the date above when changes are posted.