Privacy Policy

1. Information We Collect

Information you provide directly

• Account data: Name, email address, and password when you register
• Profile data: MC number, DOT number, home base ZIP, primary equipment type, and cost-per-mile
• Load data: Origin/destination, mileage, gross rate, broker information, equipment type, commodity, and pickup/delivery dates you enter when scoring loads
• IFTA data: Fuel stop dates, states, gallons purchased, fuel prices, vendors, and state mileage figures you enter for IFTA tracking

Information collected automatically

• Log data: IP address, browser type, pages visited, and timestamps when you use the Service
• Device data: Browser version, operating system, and screen resolution
• Cookies: Session cookies used to keep you logged in. We do not use third-party tracking cookies or advertising cookies

2. How We Use Your Information

We use your information solely to operate and improve the Service:

• To authenticate your account and keep your session secure
• To calculate load scores and net profit estimates using your cost-per-mile
• To calculate IFTA fuel tax estimates based on your fuel and mileage data
• To display your load history and IFTA records in your dashboard
• To send you account-related emails (password resets, billing notices, important service updates)
• To diagnose bugs and improve Service reliability and performance
• To comply with applicable laws and respond to legal requests

We do not use your data to train machine learning models, show you advertisements, or build behavioral profiles for third-party use.

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We share your data only in these limited circumstances:

Service providers

We use trusted third-party companies to help operate the Service. These providers access your data only as necessary to perform their services and are contractually required to protect it:

• Supabase — database and authentication hosting (supabase.com)
• Vercel — web application hosting (vercel.com)
• Stripe — payment processing when billing is enabled (stripe.com). Stripe handles payment card data directly; OPHaul never stores card numbers

Legal requirements

We may disclose your information if required to do so by law, subpoena, court order, or government request, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of OPHaul, our users, or the public.

Business transfers

If OPHaul is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you by email before your data is subject to a different privacy policy.

4. Data Retention

We retain your account and business data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (for example, billing records may be retained for up to 7 years for tax compliance purposes).

5. Security

We use industry-standard security measures to protect your data, including:

• TLS/HTTPS encryption for all data in transit
• Encrypted storage for all data at rest via Supabase
• Row-level security policies ensuring users can only access their own data
• Bcrypt password hashing — we never store passwords in plain text
• Service role credentials restricted to server-side code only

No method of transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. If you suspect a security breach involving your account, please contact us immediately at cpoole@revasyn.com.

6. Your Rights

You have the following rights regarding your data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate data through your account settings
• Deletion: Request deletion of your account and personal data
• Portability: Export your load and IFTA data in CSV format at any time from the dashboard
• Opt-out: Unsubscribe from marketing emails at any time using the unsubscribe link in those emails

To exercise any of these rights, email us at cpoole@revasyn.com. We will respond within 30 days.

If you are a resident of California, Virginia, Colorado, or another state with comprehensive privacy laws, you may have additional rights under those laws. Contact us to learn more.

7. Cookies

OPHaul uses only the following cookies:

• Authentication cookies: Set by Supabase to maintain your login session. These are strictly necessary for the Service to function and cannot be disabled while using the platform

We do not use advertising cookies, tracking pixels, or any cookies from third-party ad networks.

8. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us at cpoole@revasyn.com and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at your registered address and update the effective date above. We encourage you to review this policy periodically. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

10. Contact

Questions, requests, or concerns about this Privacy Policy? Contact us: