Privacy Policy

This policy explains what DueHaul collects, why, who it goes to, how long we keep it, and how you can see, fix, or delete it. DueHaul is a self-serve product for truckers and small fleets, run from Illinois, USA. If you have a question, email us at due.haul.remind@gmail.com and a real person will answer.

The short version

• We collect what you type into DueHaul, plus a little technical information that every website gets, like your IP address.
• We use it to run your account, send the reminders you asked for, handle billing, and keep DueHaul secure.
• We don't sell your personal information. We don't give it to other companies for their own marketing.
• A few service providers help us run DueHaul. Each one gets only what it needs for its job. They're all listed below.
• You can delete most things yourself. For anything else, email us.

Your account

When you sign up, we keep the email address you sign in with, your name if you give it, your company name, and a password if you choose to set one. Passwords are stored as a one-way hash, so we can't read them. We also keep your plan, your trial dates, your time zone, and, for older accounts, the dates we sent any trial reminder emails.

We keep a record of when each person agreed to the Terms of Use and this policy and which version they saw. We also keep a record of email opt-outs so we can honor them. If you opt out of arbitration, by email or with the form in Settings, we keep your name, account email, when we received it, and, for the form, the IP address and browser it came from, so we can show you opted out.

Who on your account can see what

• The account owner is the person who created the DueHaul account. Only the owner can invite people to the team or remove them.
• Team members are people the owner invited who accepted the invite. Everyone who signs in to your DueHaul account, owner or team member, can see, add, change, and delete your company's data. That includes trucks, drivers, deadlines, truck profiles (truck costs and how you pay your driver), the maintenance log, the payment tracker, and the reminder settings. Anyone signed in can also open billing, which takes them to Stripe's billing page for your account.
• Drivers you add in DueHaul don't get a login and can't see anything, unless the owner also invites them as a team member.
• Saved loads belong to each person. If you turn on Save my loads, the loads you save are tied to your own login. Other people on your team can't see them.
• Google Calendar connections belong to each person. Your Google tokens and connected email are tied to your own login, not the whole team.

Invites are sent as an email with a signed link that expires in 7 days. We don't store the invited email address until the person accepts and creates a login.

Reminders, trucks, and maintenance

The reminders tool keeps what you type into it: each deadline's type, name, due date, and notes, the steps and checklists in its how-to guide, any renewal details you add there, and which truck or driver it's for. It also keeps a record of which reminders already went out, so you don't get the same one twice.

For trucks, we keep the unit name, VIN, and notes you enter. The maintenance log keeps each entry's date, title, details, odometer reading, cost, and next service date. You can download your maintenance history.

In Settings, you can add extra email addresses and phone numbers that should also get your deadline reminders. Please only add people who have agreed to get them. An extra email address doesn't get reminders until that person clicks the confirmation link we send, and every reminder to it has a link to opt out. Text reminders are explained below.

Information about drivers

For drivers, we keep the name, email address, and notes you enter, and any deadlines you link to them, like a med card or CDL date. We don't send anything to a driver's email address.

DueHaul tracks dates, not health records. Please don't put medical details, diagnoses, Social Security numbers, or license numbers in driver notes or any other notes field. The date and a short reminder of what's due is all DueHaul needs.

When you enter information about your drivers or other people, you're responsible for having the right to share it with us and for letting them know, as the law requires. If you're a driver and want to see, fix, or delete information a company entered about you in DueHaul, ask that company first, since they control their account. You can also email us at due.haul.remind@gmail.com. We'll work with the account owner to handle your request, or handle it ourselves if we need to.

Load calculator and truck profile

The load calculator does its math as you type. It doesn't save the loads you run through it unless you turn on Save my loads (see Saved loads below). If you choose to, it can save a truck profile for each truck: things like miles per gallon loaded and empty, truck and trailer payments, insurance, permits, upkeep and tire costs, your trailer type, and how you pay your driver. We keep those numbers so the calculator can fill them in for you next time. The cost per mile calculator works the same way: it reads your saved truck profile and doesn't save its results.

Saved loads (only if you turn it on)

Save my loads is off unless you turn it on in Settings. When it's on, a Save this load button shows under your load calculator result, and we save a load only when you tap it. For each saved load we keep the numbers you typed in the calculator (like pay, miles, fuel price, and costs), the cities or ZIP codes you typed for the route, the truck you picked, a name if you give one, the profit math the calculator worked out, and when you saved it. We don't keep the route map, map coordinates, or the toll and scale lists from a route lookup with a saved load.

Saved loads are tied to your own login, so other people on your team can't see them. We keep a record of when you turned Save my loads on or off, which wording you saw, and whether you chose to delete your saved loads. We keep that record until you delete your account. We use your saved loads only to show them to you. We don't sell them, share them, use them for ads or marketing, or use them to train AI, and we never send them to a broker. Our hosting and database providers store them for us, like everything else in DueHaul. Load names, cities and truck names are whatever you type, so if you put a broker name in there, it's saved like anything else you enter. Please don't put rate confirmation numbers or other people's personal details in them.

You can delete one saved load or all of them anytime on My loads. When you turn Save my loads off, we ask what to do with your saved loads, and deleting all of them is the choice we pick for you. If you choose to keep them, they stay on My loads until you delete them.

Payment tracker

The payment tracker keeps the loads you're waiting to get paid for. For each one, that's the broker name, the amount, the date payment is due, and, if you add them, the delivery date, destination, and freight. It also keeps whether the load was paid, short paid, or is still waiting, how much came in, and when. Each entry is saved with the truck you pick.

We also keep a short note of which payment reminder emails we already sent for each entry so we don't send the same one twice. Payment reminder emails go only to the people who sign in to your account, not to the extra reminder addresses in Settings. We never contact a broker. We don't sell or share your broker or pay details. Reminder emails, which list the broker and amount, are delivered through our email provider.

Route lookups

When you look up a route in the load calculator, our server sends only the places you enter (city, state, or ZIP) or their map coordinates to openrouteservice (HeiGIT gGmbH, Germany) and Geoapify (Keptago Ltd, Cyprus) to work out the miles and drive time. If those aren't available, we may ask Nominatim (OpenStreetMap Foundation, UK) to find a place. Because these requests come from our server, those companies don't get your IP address, name, email, or company details.

Scales and toll roads along the route are checked on our own server against a weekly copy of OpenStreetMap data, so the route isn't sent to anyone else for that check. We get diesel prices from the U.S. Energy Information Administration, and we don't send it anything about you.

Detention timer

The detention timer saves the times you tap Start and Stop, whether each time came from our clock or your device's clock, your device's time zone, and any company, city, truck number, and driver name you add to a stop. If you save timer info on your Profile page, that's kept on this device too. To save you typing, when you're signed in we fill in your name (from your sign-in or your driver record) and, if your account has just one truck, that truck's number from your DueHaul account. Those come from information your account already has, and the request for them doesn't include anything about your stops. When you tap Start or Stop, your browser asks our server for the current time, and that request doesn't include your times or anything you type. Like any web request, these requests include standard information such as your IP address, which our hosting provider logs as described below. Your stop list and your saved timer info stay in your browser on this device and are never sent to DueHaul. When you clear them they're gone for good.

The state renew links tool works the same way. If you pick your home state, that choice is saved only in your browser.

Google Calendar (optional, not turned on yet)

Connecting Google Calendar is optional and isn't turned on yet. If we turn it on and you connect it, DueHaul puts your deadline due dates on your Google Calendar as reminder events. Your DueHaul reminder emails keep coming either way. Email stays the main way we remind you, so think of the calendar events as an extra copy, not a replacement.

What we ask Google for. We ask for three permissions and nothing else:

• "openid" and "email", so we know which Google account you connected
• "calendar.app.created", which Google describes as letting DueHaul make secondary calendars and see, create, change, and delete events on them

This permission doesn't let DueHaul see your other calendars or their events. We use the email only so your Settings page can show which Google account is connected.

What we write. DueHaul makes one calendar for you called DueHaul reminders, and only adds, updates, and removes the reminder events it creates there for the deadlines in your account. When you first connect, we add the open deadlines already in your account. After that, we update the matching event when a deadline changes, and we remove it when the deadline is marked done or deleted.

If you share a DueHaul account with a team, everyone who connects their own Google Calendar gets their own copy of the team's deadlines on their own DueHaul reminders calendar. A change or deletion by anyone on the team updates or removes each person's copy.

Each event shows the deadline's name and due date, the truck unit and driver name if added, any notes written on that deadline, and a link back to DueHaul. Once an event is on your calendar, Google keeps that copy under its own terms and privacy policy.

What we store. From Google, we receive and keep the tokens that let DueHaul reach your calendar without asking you to connect every time. We store them encrypted. We also keep:

• the ID of your DueHaul reminders calendar
• the IDs of the events we created on it, so we can update or remove those same events later
• the date you connected
• the email address of the connected Google account

Disconnecting and deletion. We keep this information for as long as your calendar stays connected. You can disconnect anytime from Settings in your DueHaul dashboard. When you do, we:

• remove the reminder events we created from your calendar, whenever Google still lets us reach it
• delete the DueHaul reminders calendar if nothing else is on it
• ask Google to cancel DueHaul's access
• delete the stored tokens, the calendar and event IDs, the connected email, and the connection date from our records

When you disconnect, we only remove the events your own connection created. Your teammates' calendars aren't touched.

If the connection stops working. For example, you removed DueHaul's access in Google, or Google ended it. We stop using the connection right away and delete the stored tokens and the connected email. We keep only the ID of your DueHaul reminders calendar and the IDs of the events on it, so we can tidy them up if you reconnect, and your Settings page shows a notice. Click Clear this notice in Settings to delete those too.

Removing access in Google. You can remove DueHaul's access yourself at any time from your Google Account permissions page at myaccount.google.com/permissions. That cuts off our access right away, but it means we can't remove the events we already added, so please also delete the DueHaul reminders calendar in Google Calendar. If you ask us to delete your DueHaul account, we disconnect Google Calendar first, the same way the Disconnect button does.

How we treat Google data. We treat the information we get from Google with extra care:

• We don't sell it, we don't use it for ads, and we don't use it to decide anyone's credit or lending.
• We don't share it with anyone except the hosting providers that run DueHaul for us, or when the law requires it.
• Nobody at DueHaul reads it unless you give us permission, for example when you ask for help, or unless we need to for security reasons or to follow the law.
• We don't use it to train AI models.
• If DueHaul is ever sold or merged, we'll ask for your permission before any information we got from Google is transferred.

DueHaul's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google Calendar is a trademark of Google LLC.

Text message reminders (optional, not turned on yet)

Text reminders aren't turned on yet. If we turn them on, here's how they will work.

Consent. You can add a mobile number in Settings to get deadline reminder texts. By saving a number, you agree to get recurring DueHaul text reminders about the deadlines you track at that number. If you add someone else's number, we first text that number asking them to reply YES. Nothing else goes to it until they do.

Message details. Messages are reminders about your deadlines, like "DueHaul reminder: IFTA return is coming due (Jan 31). Reminders only, you still renew. Reply STOP to opt out." Message frequency varies with your dates. Message and data rates may apply. Reply HELP for help or STOP to cancel. You can also remove the number in Settings anytime. If you reply STOP, we stop texting that number for every DueHaul account that lists it. Reply START to turn texts back on.

What we keep. For each number, we keep the phone number, whether it's waiting for YES, confirmed, or opted out, when that changed, who added it, and which version of the consent wording was shown.

Twilio. We send and receive texts through Twilio. Twilio gets the phone number, the text of each message, and any reply sent to us. Twilio handles them under its own privacy policy: twilio.com/en-us/legal/privacy.

No sharing for marketing. We use these phone numbers only to send your reminder texts and answer your replies. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties, except the providers that send the messages for us.

Billing

When you subscribe, you pay through Stripe's checkout page. Stripe collects your card details, name, and billing address, which it also uses to figure sales tax. We never see or store your full card number.

Stripe gives us a customer ID and a subscription ID, and tells us which plan you're on, whether it's active, when it renews, and what you paid. We give Stripe your email address, your company name, and your DueHaul account and user IDs so your receipts and account match. Stripe's checkout records your agreement to our Terms, and we save which Terms version you agreed to with your Stripe subscription. Anyone who signs in to your DueHaul account can open Stripe's billing page, where Stripe shows your plan, invoices, and the last digits of the card on file.

When you agree to the automatic renewal terms before subscribing, we keep a record with the time, your plan and price, the version of the terms, and the IP address you agreed from, so we can show you agreed. Stripe keeps a copy with your checkout.

Stripe handles your payment information under its own privacy policy: stripe.com/privacy.

Emails we send

Account and service emails. These go out because you have an account or asked for them, even if you've opted out of optional emails:

• sign-in codes, password resets, and team invites
• deadline reminders and payment tracker reminders
• purchase confirmations and receipts
• yearly renewal notices, sent about 40 days before the date to cancel by
• price-change notices, sent 7 to 30 days before a new price applies to your plan
• notices about changes to our Terms or this policy

For yearly renewal notices, we note on your Stripe subscription when the notice was sent. For price-change notices, we keep a record of when each one was sent, to which address, and the email provider's message ID. If a price-change notice was missed, we also keep a record of the refund we owe and whether it was paid. Price-change notices may also show as a banner on your dashboard.

Optional emails. If you turn on the law watch digest in Settings, we'll email you those too. If you joined our earlier waitlist, we may email you product updates too. You can turn the digest off in Settings, and every optional email has an unsubscribe link. You can also email us to stop them.

When someone signs up, we also email ourselves a short note with their email and plan so we know who joined.

Earlier waitlist, feedback, and emails to us

We no longer run a waitlist. If you joined it earlier, we keep the name, email, and truck count range you gave. If you send feedback through the site, your message, the name and email you give (both optional), and your browser type come to our inbox. If you email us, your email and everything in it come to our inbox.

What we don't collect

We don't ask for Social Security numbers, medical diagnoses, or full driver qualification (DQ) files. DueHaul is a date reminder tool, not a compliance file vault. We don't collect biometric information, like fingerprints or face scans. We don't collect your precise location.

How we use your information

We use your information to:

• run your account and your tools
• send the reminder emails, texts, and calendar events you asked for
• handle billing and send the account emails listed above
• answer you when you write in
• keep DueHaul secure, prevent abuse and fraud, and fix problems
• understand which pages are used, so we can improve DueHaul
• follow the law

We don't sell your personal information. We don't share it for cross-context behavioral advertising. We don't give your account data to advertisers.

Cookies, sign-in, logs, and analytics

Sign-in. Sign-in codes expire after about 15 minutes and work only once. When you sign in, we set one cookie, duehaul_session, that keeps you signed in for 30 days, or 90 days if you choose to stay signed in. If our email service isn't set up on a test copy of the site, codes may be written to the server log instead of emailed.

Browser storage. Some tools save your choices in your browser's local storage instead of on our servers, like the detention timer and your home state for state renew links.

Analytics. Our pages use Vercel Web Analytics and Speed Insights, which count page visits and show us how fast pages load.

Logs. Like every website, our server gets your IP address, browser type, and the page you asked for with each request. Our hosting provider, Vercel, keeps these in server logs for a limited time. To stop abuse, we briefly keep IP addresses in server memory to limit how many requests one address can make. We don't save them to our database.

Meta Pixel (turned off today)

DueHaul's code includes the Meta Pixel, which measures whether our Facebook and Instagram ads lead people to sign up. It's turned off today.

If we turn it on, it would load only on our public pages. It doesn't load on the sign-in, password reset, invite, onboarding, unsubscribe, and confirmation pages, or anywhere in the signed-in dashboard. It would set Meta's cookies and tell Meta about page visits and when someone creates an account, along with the technical details Meta's code collects, like your IP address, browser, and the page address. We've set it up so it doesn't send Meta your email or anything you type into DueHaul.

Meta handles that information under its own privacy policy: facebook.com/privacy/policy. You could limit it by blocking third-party cookies in your browser, by changing your ad settings at facebook.com/adpreferences, or through optout.aboutads.info.

We'll update this policy, including the next section, before we turn the Pixel on.

Do Not Track and Global Privacy Control

Today, DueHaul doesn't track you across other websites, and no other company collects information about your activity across other websites through DueHaul. Because of that, DueHaul works the same whether or not your browser sends a Do Not Track or Global Privacy Control signal. If we ever turn on the Meta Pixel, we'll update this section first to say how we respond to those signals.

Service providers we use

A few outside companies help us run DueHaul. Each one gets only what it needs for its job and handles it under its own privacy policy.

• Vercel (USA) hosts the website and app, keeps server logs, and runs our page analytics.
• Neon (database hosting), USA (Ohio, on Amazon Web Services), hosts the database where your account and tool data are stored.
• Resend (USA) sends our emails, so it gets each recipient's address and the message.
• Google (USA) runs Gmail for our own inbox, due.haul.remind@gmail.com, where feedback, earlier waitlist notes, signup notes, copies of arbitration opt-out emails, and emails you send us are kept. Google also runs Google Calendar, which gets reminder events only if you connect it.
• Stripe (USA) handles payments and billing.
• Twilio (USA) sends and receives text reminders, when text reminders are on.
• openrouteservice, by HeiGIT gGmbH (Germany), Geoapify, by Keptago Ltd (Cyprus), and Nominatim, by the OpenStreetMap Foundation (UK) answer route and place lookups.
• Geofabrik (Germany) is where we download the weekly OpenStreetMap copy used for scale and toll checks. No information about you goes to it.
• The U.S. Energy Information Administration provides diesel prices. No information about you goes to it.

Some tools also link out to official sites, like the FMCSA medical examiner registry or state DMV pages. What you do on those sites is covered by their own policies. If the Meta Pixel is ever turned on, Meta will be on this list too.

When we share information

We share personal information only in these cases:

• Service providers. With the companies listed above, only so they can do their part in running DueHaul.
• Your team and your choices. With the people on your DueHaul account, as described in "Who on your account can see what". Also with services you ask us to connect, like Google Calendar.
• Law and safety. When we believe in good faith that it's needed to follow the law or a valid legal request, like a subpoena or court order. Also to protect the rights, property, or safety of DueHaul, our users, or others, or to find and stop fraud, abuse, or security problems.
• Business transfer. If DueHaul is sold, merged, or its assets are transferred, your information may move to the new owner. The new owner must follow this policy for information collected under it, and we'll tell you before that happens. Information we got from Google follows the stricter rule in the Google Calendar section: we'll ask your permission first.

We never sell your personal information. We don't share it with other companies for their own marketing. All of the sharing above excludes text messaging opt-in data and consent. That information will not be shared with any third parties, except the providers that send text messages for us.

How long we keep it

DueHaul doesn't delete your data on a timer. Your account details and everything you save in your tools stay until you delete them or ask us to delete your account.

Deleting things yourself. You can delete deadlines, trucks, drivers, maintenance entries, payment tracker entries, and saved loads anytime.

• Deleting a deadline also deletes its reminder history, and its Google Calendar event for everyone on the team who connected a calendar.
• Deleting a truck also deletes its truck profile, saved costs, payment tracker entries, and maintenance log.
• Each truck can hold up to 300 payment tracker entries, and the oldest ones aren't removed for you.
• Saved loads stay until you delete them, turn off Save my loads and choose to delete them, or delete your account. Each login can keep up to 500 saved loads, and the oldest ones aren't removed for you.

Other things we keep:

• Sign-in sessions end after 30 or 90 days. Sign-in codes expire after about 15 minutes.
• Earlier waitlist signups stay until you ask us to remove them.
• Emails, feedback, and signup notes in our inbox stay until we delete them.
• Consent records and records of renewal and price-change notices stay with your account while it exists.
• Arbitration opt-out records stay even after an account is deleted, so we can keep honoring them.
• We keep a record that an email address has used its free trial, and which account used it, even after the account is deleted, so the same email can't start a second trial.
• Server logs stay with Vercel for a limited time under its settings.
• Data you delete may remain in our database provider's short-term backups for a limited time before it rolls off.
• Stripe keeps payment records under its own policy and what tax law requires.
• Detention timer stops, saved timer info, and your saved home state stay in your browser until you clear them.

Your choices and rights

You can:

• see the information we have about you
• fix anything that's wrong
• delete your account and data
• turn off optional emails and text reminders, and disconnect Google Calendar

Most of this you can do yourself in DueHaul. For the rest, email due.haul.remind@gmail.com from the address on your account. We'll confirm the request comes from you and answer within 45 days. Deleting an account is done by email request for now.

If you're the account owner, deleting your account deletes your company's trucks, drivers, deadlines, and tool data for everyone on the team, including each team member's saved loads. If you have Google Calendar connected, we disconnect it before we delete your account. If an owner removes you from a team, you lose access to that team's data, and any loads you saved are deleted, but your own sign-in email stays on file until you ask us to delete it.

Some state privacy laws, like California's, give their residents specific rights. Those laws may not apply to a business of DueHaul's size. We honor the requests above from anyone, wherever you live, and we won't treat you differently for making one.

Security

We take reasonable steps to protect your information:

• Connections to DueHaul are encrypted.
• Passwords are hashed.
• Google Calendar tokens are stored encrypted.
• Service keys are kept on our servers, never in your browser.

No way of sending or storing data is perfectly secure, so we can't promise perfect security. If we learn of a security breach that affects your personal information, we'll notify you without unreasonable delay, as Illinois law and other state laws require.

Age

DueHaul is for adults running trucking businesses, not for children. We don't knowingly collect personal information from anyone under 18, including children under 13. If we learn that we have information from someone under 18, we'll delete it and their account. If you think we might, email due.haul.remind@gmail.com and we'll take care of it.

Changes to this policy

We may update this policy. When we do, we'll change the "Last updated" date at the top. If we make a material change, we'll also email the people who sign in to DueHaul accounts before the change takes effect, and we may ask you to agree again when you next sign in. If a change affects how we use information from Google, we'll ask you to agree again before we use it in the new way.

Contact us

DueHaul
Email: due.haul.remind@gmail.com
Contact form: duehaul.com/contact

This policy is plain-language information for a self-serve product. It is not legal advice.