Privacy Policy

This policy applies to loadshield.net and the LoadShield web application (together, the “Service”). The data controller is Iron Flow Advisory, LLC, 6276 Addison Loomis, Cicero, NY 13039.

LoadShield is a business tool sold to motor carriers. The data you upload is generally commercial business data (rate confirmations, broker-carrier agreements, bills of lading) rather than consumer data, but we treat all of it as confidential either way.

• Account data. Name, business email address, company name, DOT number and optional MC number supplied at signup; driver and counterparty contact details entered while using the Service.
• Authentication data. Credentials and email-confirmation tokens managed by Supabase. Passwords pass through our encrypted signup/sign-in endpoints to Supabase and are not stored or logged by the application.
• Payment information. Card numbers are entered directly into Stripe and never touch LoadShield servers. We store only the Stripe customer ID, subscription ID, and subscription status (including whether you are in a free trial). Plans are a flat monthly price by fleet size; we do not meter or bill per analysis.
• Documents you upload. Rate confirmations, master broker-carrier or shipper-carrier agreements, bills of lading, delivery receipts, seal and damage photos, and any other file you add to a load.
• Load and operational data. Load numbers, counterparty names, pickup and delivery locations, appointment windows, arrival and departure timestamps, detention clocks, driver names and phone numbers you enter for handoff, and the proof-log entries the system generates.
• Usage data. Server-side request logs (timestamp, route, response status, IP address, user agent) kept for security, rate-limiting, and debugging. Application error reports may be captured to diagnose failures.
• Anti-abuse records. To enforce one account and one free trial per USDOT number and to match plans to FMCSA truck counts, we keep a record of which USDOT numbers have used a trial, attempts to sign up with a USDOT number that already has an account (the email entered, a one-way hash of the IP address, and the time), truck-count review requests you send us, and internal usage signals such as monthly analysis counts and the USDOT and MC numbers that appear in documents you analyze. These records are used only for fraud prevention and are not shown to anyone outside LoadShield.

• Deliver the Service: analyze document text, surface terms for review, organize loads and evidence, and record operational events.
• Send transactional email notices you request to saved contacts and display load status in-app. SMS delivery is not currently enabled.
• Process subscription billing, handle plan changes, and honor the money-back guarantee.
• Respond to your support requests.
• Keep the Service secure: abuse detection, rate limiting, fraud prevention, and debugging.
• Comply with legal obligations.

We do not use your documents or load data to train any public or third-party AI model, and we do not use them to build industry datasets or benchmarks sold to anyone else.

As of the effective date above, loadshield.net runs no third-party analytics or advertising trackers. There is no Google Analytics, no Google Tag Manager, no Meta/Facebook pixel, no TikTok or LinkedIn pixel, no Hotjar, no session-replay tool, and no advertising cookies. We do not build cross-site advertising profiles and we do not participate in third-party ad networks.

The only cookies and browser storage we set are strictly necessary ones: your authentication session and basic security tokens. If we ever add a privacy-respecting analytics tool, we will update this section before turning it on.

These processors handle data on our behalf under their own security and privacy commitments. Each one receives only what it needs to do its job:

• Stripe — payment processing and subscription billing. Receives your name, email, company name, and card details (entered directly with Stripe). Stripe is the system of record for your card.
• Supabase — application database and authentication, PostgreSQL database and private object storage. Stores account, analysis and load records, event histories, uploaded documents and proof files. Rate limits are stored in PostgreSQL. Access is scoped by account and authorized driver links.
• Vercel — application hosting, edge delivery, and server logs.
• OpenAI — AI document extraction. Receives the text of the documents you upload in order to identify clauses, deadlines, and dollar figures. OpenAI’s API terms state that business API data is not used to train their models.
• Resend — transactional email delivery for notices requested by a user to a saved load contact. Receives the recipient address and message contents. Supabase handles authentication confirmation email. No SMS is sent by this release.
• FMCSA public data (SAFER / QCMobile) — we look up publicly filed carrier and broker authority records by DOT or MC number. This is public government data; we send only the number being looked up.

We have never sold personal information and we do not share it for cross-context behavioral advertising. We do not sell, rent, license, or trade your documents, load data, rates, lane information, or contact details to brokers, shippers, factoring companies, lead brokers, data brokers, insurers, or anyone else.

The only situations where your data leaves the processors listed above are: (a) when you direct us to send something, such as a detention notice or billing packet to a broker; (b) when we are legally compelled by valid subpoena, warrant, or court order; or (c) in a merger or acquisition, in which case the acquirer is bound by this policy and you will be notified before any change in control of your data.

• Proof-log and evidence files: retained for the life of the account until a verified deletion request is processed, subject to legal retention obligations. There is no automatic four-year deletion schedule or guaranteed immutable evidence vault. Keep independent copies and consult counsel about legal retention requirements.
• Load and account records: retained for the life of your account until a verified deletion request is processed. Cancelling billing does not itself delete your account or documents.
• Billing records: retained up to seven years as required for tax and accounting purposes.
• Server and security logs: retained as needed for security and provider operations; retention varies by the hosting and authentication provider.

You can ask us to delete evidence files early. Doing so may remove the documentation you would need to defend a future cargo or detention claim, so we will confirm before acting.

All traffic to the Service is encrypted in transit with TLS and HSTS. Documents are stored in private Supabase Storage buckets. Database access is governed by row-level security so one carrier cannot read another carrier’s records. Secrets live in environment variables, never in source code. We enforce strict HTTP security headers including a content security policy, frame denial, and MIME-type protection.

No system is perfectly secure. If we discover a breach affecting your data, we will notify affected accounts without undue delay and describe what happened and what we are doing about it.

You may, at any time:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your account and associated data.
• Export your load records and documents in a portable format.
• Opt out of non-essential email. Operational alerts tied to your active loads are part of the Service; turning them off may mean you miss a deadline.

California residents (CCPA/CPRA). You have the right to know what personal information we collect and why, the right to delete it, the right to correct it, the right to data portability, the right to opt out of sale or sharing (we do neither), and the right to limit use of sensitive personal information (we do not collect sensitive categories such as government ID numbers, precise geolocation tracking, health, or biometric data). We will not discriminate against you for exercising any of these rights. You may use an authorized agent; we will verify the request against the email address on your account.

Residents of other states with comparable privacy laws — including Colorado, Connecticut, Virginia, Utah, and Texas — may exercise the equivalent rights under their state statute using the same process.

Email privacy@loadshield.net from the address on your account with the subject line “Data Deletion Request.” Tell us whether you want (a) your entire account deleted or (b) specific loads or documents removed.

• We acknowledge within 5 business days.
• We complete verified requests within 30 days, or tell you why we need up to 45 more.
• We will tell you in writing what was deleted and what we are legally required to keep (for example, billing records for tax purposes).
• Backup expiry follows our processors’ retention schedules. Deleted data may remain in restricted backups until those backups expire.

The Service is a commercial tool for licensed motor carriers and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a minor has given us information, contact us and we will delete it.

The Service is operated for U.S. motor carriers. Data is processed by the providers listed above according to their hosting and processing arrangements, including in the United States. The Service is not marketed to EU or UK residents.

We may update this policy as the Service changes. The effective date at the top always reflects the current version. For material changes — new categories of data, new processors handling your documents, or any change to the no-tracking and no-sale commitments above — we will email account holders before the change takes effect.

Iron Flow Advisory, LLC
6276 Addison Loomis, Cicero, NY 13039
Privacy and data requests: privacy@loadshield.net
General support: support@loadshield.net