Privacy Policy

Last updated September 28, 2026  ·  Canada & United States  ·  support@haulor.ai

Haulor exists to make freight more connected, efficient, and secure for carriers and brokers across Canada and the United States. A fundamental part of building that trust is being transparent about how information is collected, used, and disclosed.

This Privacy Policy describes how Haulor Technologies Inc. (“Haulor,” “we,” or “us”) collects, uses, discloses, and otherwise processes personal information. Haulor is a transportation-intelligence platform and freight marketplace that connects trucking businesses (“Carriers”), including their drivers, with freight brokers and shippers (“Customers”); matches loads; provides trust, tracking, and workflow tools; and operates a marketplace for equipment and services (together, the “Services”).

This Privacy Policy applies to the owners, personnel, and drivers associated with Carriers and Customers, to other people whose information is provided to us in the course of the Services (such as business owners named during verification), and to visitors to our websites and mobile apps (collectively, “you”). Our Services are offered to businesses. We do not offer the Services to individual consumers and do not knowingly collect information from children.

We may update this Privacy Policy from time to time and will revise the “Last updated” date. Where required by law, we will notify you in advance and seek your consent.

1. Collection of Information

Information you provide to us. We collect information you provide when you register, onboard as a Carrier, driver, or Customer, complete forms, list or buy on our marketplace, use the Services, request support, or communicate with us. Depending on your relationship with us, this may include:

• Contact and account information: name, email address, phone number, password (stored only in hashed form), two-factor authentication settings, and your role at the business.
• Business information: legal business name, mailing and registered address, business registration or tax number (for example, a Canada Revenue Agency Business Number or US Employer Identification Number), incorporation number, website, industry classification, fleet size, and equipment types.
• Operating-authority information: for Carriers, USDOT and MC numbers (United States) or CVOR and National Safety Code numbers and province (Canada), and, for brokers, broker authority numbers.
• Business owner information: to verify a business, the names, email addresses, job titles, and ownership percentages of the business’s owners and people who control it. If you provide information about another person, you confirm you are authorized to do so.
• Driver information: driver name, email, phone number, driver’s licence number, issuing province or state, licence class, endorsements, expiry date, hire date, and, if provided, a driver photo.
• Vehicle and equipment information: vehicle identification number (VIN), licence plate, insurance policy number, electronic-logging-device identifier, and photos of trucks and equipment.
• Documents: insurance certificates, operating-authority and safety certificates, vehicle registrations and inspection certificates, and other documents you upload.
• Load and transaction information: loads, bids, bookings, rates, pickup and delivery details, proof-of-delivery photos, signatures captured at pickup and delivery, check-in photos, disputes, invoices, and marketplace listings, offers, and purchases.
• Payment information: to pay or be paid, you provide payment and payout details (such as bank account information) directly to our payment processor. Haulor does not store full bank account or card numbers; we receive account identifiers, payment status, and transaction records from the processor.
• Communications: messages you exchange with other users, messages with our support team, and emails you forward or copy to Haulor (for example, broker emails sent to a Haulor capture address to create quotes), including their sender, subject, and content.
• AI assistant inputs: questions and instructions you type into Haulor’s AI features.
• Hours-of-service records: if you connect an electronic logging device or telematics account, duty-status logs and related records.
• Marketing and inquiry forms: name, email, company, role, and message when you contact us, request a demo, or subscribe to updates.

Information we collect automatically. When you use the Services, we automatically collect:

• Device and connection information: IP address, browser type, operating system, device identifiers, a device fingerprint derived from your browser or device characteristics, and, for our mobile apps, a push-notification token.
• Approximate location derived from your IP address, such as country, region, and approximate coordinates.
• Activity information: pages and screens viewed, features used, and events such as sign-ups, logins, failed login attempts, and key account actions (which we record in security and audit logs, together with IP address and device information).
• Website analytics: pages visited, the page you first arrived from and any campaign parameters in that link, and whether a visit leads to a completed sign-up. Our website analytics service is used only if you accept the cookie banner. The first-arrival page and campaign information is recorded regardless, and is attached to your account only if you sign up. See our Cookie Policy.
• App diagnostics: crash and error reports from our mobile apps, linked to your user ID.
• Precise location: see “Location Information.”

Information we collect from other sources.

• Our Verification Provider: results of identity and business verification and screening (see “Verification, Screening, and Identity Services”).
• Government and public registries: motor-carrier registration, authority, and safety records in the United States and Canada.
• Our payment processor: payment, payout, and account-status information.
• Electronic logging device and telematics providers you connect: vehicle locations, vehicle details, and hours-of-service records.
• Load boards and freight data sources: load postings, which may include the name and contact details of the posting broker.
• Other users: for example, ratings, dispute information, or driver details entered by a Carrier’s administrator.

2. Location Information

Location is central to freight tracking, so we explain it separately.

• During an active load (mobile app): when a load you are hauling is booked and in progress, the Haulor mobile app collects your device’s precise location, including in the background while the app is not open, at regular intervals (about once a minute) until delivery is confirmed. Your device will show a notification while this is happening. We use it to show the load’s progress to the Customer, calculate arrival estimates, and detect arrival at pickup and delivery locations. Arriving at a pickup or delivery location may automatically confirm that pickup or delivery, which can affect when payment is released.
• Fleet drivers: while a driver is in transit or at a delivery, the app shares the vehicle’s current location with the Carrier’s fleet dashboard.
• Check-ins: when you check in at a facility, we record your precise location and, if you take one, a photo.
• Connected devices: if a Carrier connects an electronic logging device or telematics account, we receive vehicle locations from that provider.
• Identity verification: our Verification Provider may capture the location of the device used during verification, which it shares with us for fraud prevention.
• IP-based location: see “Information we collect automatically.”

We ask for your permission before the mobile app collects precise location, and you can revoke it at any time in your device settings. Stopping location sharing during an active load may prevent tracking features from working, and Customers may require it as a condition of the load.

Raw location readings from the mobile app are kept for a short period (about 24 hours) for live tracking; the most recent known position of a vehicle, check-in locations, and pickup and delivery confirmations are kept with the load record.

3. Use of Information

We use personal information to:

• Create and manage accounts and provide the Services.
• Verify identity, business legitimacy, operating authority, and insurance, and meet Customer compliance requirements.
• Operate the marketplace: match loads and Carriers, facilitate bookings, communications, tracking, payments, and payouts.
• Calculate trust information shown to other users (see “Disclosure of Information”).
• Detect, investigate, and prevent fraud, identity theft, double-brokering, security incidents, and other illegal activity (see “Fraud Prevention and Automated Decisions”).
• Provide AI-assisted features, such as drafting, summarizing, load matching and ranking, quote extraction from emails, trip planning, and dispatch suggestions.
• Send transactional messages and, where permitted, marketing communications.
• Provide support and resolve disputes.
• Analyze usage and improve the Services.
• Comply with legal, tax, accounting, and regulatory obligations, and enforce our terms.
• Any other purpose with your consent.

AI features. Some features send the information needed for the task — such as your message, email content you forward to us, load and carrier details, or, for our staff’s internal tools, dispute details, contact information, or IP addresses — to AI service providers acting on our behalf.

4. Verification, Screening, and Identity Services

Identity and business verification is performed by a third-party verification provider (“Verification Provider”) and, for operating authority and safety, by checks against government registries. Haulor is a transportation-intelligence platform; it is not an identity-verification bureau or a consumer-reporting agency.

When verification is required, you are directed to the Verification Provider’s secure flow, where you provide identity documents and a selfie and agree to the Verification Provider’s own terms and privacy policy. To start that flow, we share your business details (legal name, address, business or tax number, website, industry) and the names and email addresses of the person completing the flow and the business’s owners and controllers.

Haulor does not receive or store your ID images or selfie. We receive and keep the results: whether each check passed, the information read from your ID (such as your verified name), and device and network signals from the verification session (such as IP address, network provider, approximate and device location, and a risk indicator).

Screening and ongoing monitoring. As part of business verification, the Verification Provider screens the business and each named owner against sanctions lists, government watchlists, politically-exposed-person lists, and adverse-media sources, and may continue to monitor them while the account is active. Potential matches are reviewed by Haulor staff before any action is taken.

5. Fraud Prevention and Automated Decisions

To protect users from fraud, we use automated systems that evaluate signals such as device and IP information, location, account and payment details, verification results, and connections between accounts (for example, accounts sharing a bank account, phone number, email address, device, network, document, or owner). These systems produce internal risk assessments.

Based on these assessments, we may ask for additional verification, delay or hold a payout, or temporarily pause or restrict an account. Pauses and restrictions are reviewed by Haulor staff, and you will be notified and can respond or ask for a review by contacting us.

Internal risk assessments are used only by Haulor and are not shared with other users or sold.

6. Disclosure of Information

Connecting Carriers and Customers requires sharing some information between users. We disclose personal information as follows:

• Other users of the Services: profile and business information, operating-authority numbers, and verification status (for example, identity verified, authority confirmed, insurance current or lapsed, bank account verified); a trust score and trust report about a business, calculated from its completed activity on Haulor (such as on-time rate, completed and cancelled loads, time on the platform, and resolved disputes) — trust information does not use internal fraud risk assessments; contact details, once two parties are matched on a load; for an active load, the assigned driver’s name and photo, the vehicle, and its live location and status; and ratings, messages, and dispute information between the parties to a load. We do not share ID images, verification reports, uploaded documents, or internal risk assessments with other users.
• Service providers that process information on our behalf and under contract: cloud hosting and database providers; our Verification Provider; payment processing; email delivery and inbound email processing; push notifications; mapping and address lookup; AI service providers; website analytics and app diagnostics; bot and abuse protection; and document malware and content scanning.
• Providers you connect: if you connect an electronic logging device or telematics account, we exchange information with that provider at your direction.
• Government and legal authorities: where required by law or legal process, or to protect the rights, property, and safety of Haulor, our users, and the public. We also check operating-authority numbers against government registries.
• Professional advisors, such as lawyers, accountants, and auditors.
• Corporate transactions: in connection with a merger, financing, acquisition, or sale of assets, subject to confidentiality protections.
• With your consent or at your direction.
• De-identified or aggregated information that cannot reasonably identify you.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

7. Where Your Information Is Stored and Processed

Haulor serves users in Canada and the United States. We currently store and process personal information in both countries, for all users:

• Our primary database, which holds account, business, load, and transaction information, is hosted in the United States.
• Uploaded documents, photos, invoices, and our core application services are hosted in Canada.
• Several of our service providers — including our Verification Provider, website hosting, email, mapping, AI, and analytics providers — process information in the United States, and some may process it in other countries.

This means the personal information of Canadian users is transferred to and processed in the United States, and the personal information of US users is stored and processed in Canada. When information is outside your province, state, or country, it is subject to the laws of that jurisdiction and may be accessible to its courts, law enforcement, and national security authorities. We use contractual and other measures to protect personal information that our service providers process for us.

8. Data Retention

We keep personal information only as long as needed for the purposes described in this Policy, including legal, tax, accounting, and dispute-resolution requirements, and then delete or de-identify it. For example, raw location readings from the mobile app are kept for about 24 hours, and load, transaction, payment, and invoice records are kept for as long as tax and accounting law requires. Biometric data is held by our Verification Provider, not by Haulor (see “Biometric Data”).

When you close your account, we de-identify your profile and remove your contact and login information, but keep transaction and audit records for as long as the law or legitimate business needs, such as resolving disputes, require.

9. Biometric Data

To verify identity and prevent fraud, you may be asked to provide an image of yourself and your government-issued photo ID in our Verification Provider’s flow. The Verification Provider collects and processes these images — including data about your face that may be considered biometric data under some laws — to confirm your identity. Haulor does not receive or store your selfie, ID images, or any facial geometry.

Before you begin, Haulor asks for your express consent to this processing and keeps a record of that consent (including the date, the version of the notice you accepted, your IP address, and device information). You may withdraw consent at any time, which may prevent you from completing verification. The Verification Provider retains biometric data only for as long as its retention policy and applicable law permit, and then permanently deletes it. You may ask us to request earlier deletion by contacting us. For details, see the Verification Provider’s privacy policy, available at the link provided during verification.

10. Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, encryption of selected sensitive fields at rest, access controls and audit logging for staff, malware scanning of uploaded files, and two-factor authentication options. No system is completely secure; if a breach creates a real risk of significant harm, we will notify you and regulators as required by law.

11. Your Privacy Choices and Rights

• Access and correction: you can view and update much of your account and business information in the Services. For other access or correction requests, contact us.
• Deletion: you can ask us to close your account and delete or de-identify your personal information by contacting us, subject to the retention requirements above.
• Withdrawing consent: you can withdraw consent to collection, use, or disclosure, subject to legal and contractual restrictions; we may then be unable to provide some Services.
• Precise location: you can revoke location permission in your device settings at any time, or disconnect a connected logging device or telematics account in your settings.
• Communications: you can unsubscribe from optional emails using the link in each email. We will still send messages needed for your account, loads, payments, and security.
• Cookies: we use cookies that are necessary to sign you in, keep your session secure, and protect against abuse. Website analytics cookies are set only if you accept the cookie banner, and we do not use advertising cookies. You can block or delete cookies in your browser, but the Services may not work without the necessary ones. See our Cookie Policy.

We will respond to requests within the time required by law (generally within 30 days in Canada and 45 days in the United States). We may need to verify your identity before acting on a request.

12. Additional Information for Canada

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. Subject to legal exceptions, you may request access to and correction of your personal information, and you may withdraw consent as described above. We send commercial electronic messages only with your express or implied consent under Canada’s Anti-Spam Legislation (CASL) and honour unsubscribe requests within 10 business days. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

13. Additional Information for the United States

In the last 12 months we have collected the following categories of personal information: identifiers; business and professional information; commercial and transaction information; internet and device activity; precise geolocation, which some state laws treat as sensitive; audio and visual information (such as photos and signatures); inferences (such as trust scores and internal risk assessments); and sensitive information such as driver’s licence numbers and account login credentials. The sources of this information, the purposes we use it for, and the categories of recipients are described in this Policy. We do not sell personal information or share it for cross-context behavioural advertising.

Depending on your state of residence, you may have the right to know and access, correct, or delete your personal information; to receive a portable copy; to limit the use of sensitive personal information; and to opt out of profiling that produces legal or similarly significant effects. You may appeal a denied request, use an authorized agent, and will not be discriminated against for exercising your rights. To make a request, contact us as described below.

14. Contact Us

Haulor Technologies Inc.
Attn: Privacy Officer
Email: support@haulor.ai
Canada