Privacy Policy
Last updated:
OnlyTrucking (the “Service”) is operated by Amazing Carriers LLC (“we”, “us”). This policy describes what personal information we collect through the OnlyTrucking web application at app.onlytrucking.app and the OnlyTrucking mobile application, why we collect it, and the choices you have.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
Who we process data about
- Company users — owners, dispatchers, accountants and safety managers of carrier companies that register on the platform.
- Drivers — employees or contractors of those companies, and independent owner-operators who use the driver tools directly.
- Marketplace and community participants — users who post equipment listings, job applications, reviews, or forum content.
- Website visitors — this marketing site does not use cookies, analytics, or trackers.
What we collect
Account and profile data
Name, nickname, email address, phone number, password (stored only as a cryptographic hash), profile photo, locale and timezone, date of birth and gender if you choose to provide them, and notification preferences.
Company data
Company name and legal name, MC and DOT numbers, EIN, business address, phone, website, and logo. We verify carrier status against the public FMCSA registry (see “Third parties” below).
Driver qualification and safety data
If your company uses the safety module, or you use the driver tools: CDL number, class, state and expiration; medical card expiration; endorsements; years of experience; and copies of driver qualification documents your company or you upload — such as CDL copies, medical cards, MVR and PSP reports, drug test results, road test forms and annual reviews. These documents may contain sensitive information. They are visible only to you and to authorized users of your company, and are stored in private storage that is not publicly accessible.
Operational and location data
Loads, stops, delivery addresses, proof-of-delivery photos, rate confirmations, vehicle inspection (DVIR) records and photos, fuel purchases, and driver settlement statements. If your company connects a telematics provider (for example Samsara), we receive vehicle GPS positions, headings and odometer readings from that provider. The mobile app does not track your personal location in the background; location data comes from load stops you record and from your company’s telematics system.
Financial data
If you connect a bank account, the connection is made through Plaid. We receive the institution name, account type, masked account number (last digits only) and transaction data for expense tracking. We never see or store your bank username or password — those are entered directly with Plaid. Expense records, receipts and per-mile cost calculations you create are stored on our servers.
Content you post
Marketplace listings (including equipment details, VIN, photos and price), job postings and applications, reviews of brokers and facilities, and forum posts. Listings and reviews are public to other users of the Service by design.
Why we process it
- To provide the Service: dispatching, settlements, safety compliance, marketplace, and community features.
- To verify carrier identity and authority via the FMCSA registry (fraud prevention and marketplace trust).
- To send transactional messages: verification codes, invitations, alerts about expiring documents, and dispatch notifications. Marketing broadcasts are opt-out.
- To maintain security, investigate abuse, and comply with legal obligations applicable to motor carrier records.
Our legal bases (where GDPR applies): performance of a contract, our legitimate interests in operating and securing the Service, compliance with legal obligations, and your consent where required (which you may withdraw).
Third parties that process data for us
We share data only with service providers that are necessary to run the Service, under their own privacy policies:
| Provider | Purpose | Policy |
|---|---|---|
| Plaid Inc. | Bank account connection and transactions | plaid.com/legal |
| FMCSA (U.S. DOT) | Carrier verification against the public QCMobile registry | transportation.gov/privacy |
| Google Maps Platform | Geocoding of addresses and road mileage | policies.google.com/privacy |
| Google (Gmail API) | Read-only import of load and rate confirmation emails, only if your company connects its mailbox | policies.google.com/privacy |
| OpenStreetMap / Nominatim | Fallback address geocoding | osmfoundation.org/wiki/Privacy_Policy |
| Google Firebase (FCM) | Push notifications to the mobile app | firebase.google.com/support/privacy |
| Samsara | Vehicle telematics, only if your company connects its Samsara account | samsara.com/privacy |
| Anthropic | Automated extraction of data from rate confirmation PDFs your company imports | anthropic.com/privacy |
| Telegram | Optional notifications, only if you link your Telegram account | telegram.org/privacy |
| Sentry | Error monitoring (technical diagnostics) | sentry.io/privacy |
| Cloudflare | Hosting, content delivery and file storage (R2) | cloudflare.com/privacypolicy |
| Amazon Web Services | File storage and backups | aws.amazon.com/privacy |
We do not use advertising networks or data brokers.
Retention and deletion
We keep your data while your account is active. When you delete your account (see Account & Data Deletion), personal data is removed or irreversibly anonymized, except records we must keep by law — for example, driver qualification files and certain motor carrier records that federal regulations require carriers to retain for defined periods, and financial records required for tax purposes. Backups are rotated on a fixed schedule, so deleted data also disappears from backups within that cycle.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of its sale or sharing (we do not sell or share it in the CCPA/CPRA sense).
- California residents (CCPA/CPRA): you may exercise these rights by emailing us; we will not discriminate against you for doing so.
- EU/EEA visitors (GDPR): you additionally have the rights to restrict or object to processing and to lodge a complaint with a supervisory authority.
To exercise any right, email [email protected]. We respond within the timelines required by applicable law (45 days under CCPA, one month under GDPR, extendable as permitted).
Children
The Service is intended for commercial use by people who are at least 18 years old. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.
Security
Access to data is scoped per company; drivers see only their own records. Documents and photos are stored in private buckets and served through time-limited links. Passwords are hashed; bank credentials never touch our servers. Two-factor authentication is available for all accounts and required for platform administrators.
Changes
We will post any changes on this page and update the date above. For material changes we will notify you in the app or by email.
Contact
Amazing Carriers LLC — [email protected]