CarrierHero Privacy Policy

Effective: May 16, 2026

CarrierHero ("we", "us") operates a temporary, consent-based delivery tracking service for third-party carrier loads. This Privacy Policy explains what we collect, how we use it, who we share it with, and your choices. By using CarrierHero, you agree to the terms below.

1. What we collect

When a dispatcher creates a tracking request, we collect:

• The driver's phone number, used solely to deliver the tracking link.
• Load reference, pickup/delivery names and windows, optional delivery coordinates, and dispatcher notes you provide.
• An optional Samsara route identifier so we can write a clean text status note back to your Samsara route.

When a driver opens the tracking link and starts sharing, we additionally collect:

• Precise GPS location while the tracking session is active.
• Location timestamp, accuracy, and speed when reported by the device.
• The driver's tracking actions: acceptance, individual location pings, Delivered, and Stop Sharing.

We do not collect any location information before the driver opens the link and taps Start Sharing. We do not collect contacts, photos, microphone, camera, or files.

2. How we use the data

Location and load data is used only for the following purposes:

• Display the live delivery status on the dispatcher dashboard.
• Display a text-only status page to the customer recipient designated by the dispatcher.
• Update your Samsara route's notes field with status text when Samsara sync is enabled by the dispatcher and the org has installed CarrierHero on Samsara.
• Provide an audit trail of the delivery for legitimate operational and compliance use.

We do not use location data for advertising, marketing, profile building, ranking, or any analytics other than essential service reliability metrics. We do not sell location data.

3. Sharing

Location and shipment status may be shared only with:

• The shipper (dispatcher organization) that created the tracking request.
• The customer status link recipient designated by the dispatcher (text-only, no map).
• Samsara, when the shipper has installed CarrierHero on their Samsara organization and provided a route id. We write only the route notes field. We do not write to actual arrival, stop state, route progress, or vehicle telematics fields.
• Service providers under contractual confidentiality obligations who help us host, secure, and operate the service (currently: Railway for compute and database, Stripe for billing, Twilio for SMS delivery).

We never sell personal data and we do not share data for cross-context behavioral advertising.

4. Retention

• Active location pings are retained for 30 days, then deleted.
• Load event audit records are retained for 12 months, then deleted, unless a longer retention is required by law or pending dispute resolution.
• Customer status links auto-expire 14 days after creation and are removed after that.
• Account records are retained for the life of your account plus 30 days, after which they are deleted unless legal hold applies.

5. Driver controls

The driver always controls location sharing. The driver can:

• Tap Stop Sharing in CarrierHero at any time to end location collection immediately.
• Tap Delivered to mark the load complete and end tracking.
• Revoke location permission in iOS or Android system settings.
• Reply STOP to any SMS to opt out of CarrierHero messages permanently.

6. Deletion and access requests

Drivers, dispatchers, and customers may request access to or deletion of personal information held by CarrierHero by emailing [email protected]. We will respond within 30 days. We may verify your identity before fulfilling a request.

7. Security

• All traffic is served over HTTPS / TLS 1.2 or higher in production.
• Driver and customer link tokens are encrypted at rest and indexed by HMAC-SHA256 hash.
• Samsara OAuth tokens are encrypted at rest using AES-256-GCM.
• Tracking sessions automatically expire after 48 hours of inactivity by default.
• Access to operational data is limited to authorized engineering staff with auditable access.

No system is perfectly secure. Report suspected vulnerabilities to [email protected].

8. Children

CarrierHero is a business operations tool and is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has used CarrierHero, contact us so we can delete the data.

9. International transfers

CarrierHero is operated from Canada. If you use CarrierHero from outside Canada, your information may be transferred to Canada and to United States data centers operated by our service providers. We rely on standard contractual safeguards with those providers.

10. Changes

We may update this policy from time to time. Material changes will be announced in-app and on our website at least 14 days before they take effect. Continued use of CarrierHero after the effective date constitutes acceptance.

11. Contact

CarrierHero
Privacy contact: [email protected]
General contact: [email protected]

Terms of Service · Support