Information we collect
We collect and process the following types of information:
- Account and profile information — such as name, email address, organization, role, and authentication identifiers (for example, email/password credentials or identity-provider information such as Google Sign-In).
- Fleet and operational data — such as driver assignments, load and shipment details, routes, schedules, home-time windows, and preferences provided by your Organization.
- Telematics and ELD data — including vehicle location, hours-of-service data, and vehicle health and diagnostic information, where those integrations are enabled by your Organization.
- Driver contact and messaging data — such as driver phone numbers, messaging opt-in status, and the content of dispatch communications sent and received (including through the WhatsApp Business Platform). See Section 06.
- Usage and device information — such as log data, browser type, device identifiers, IP address, and how you interact with the Services.
- Support and communications — including messages you send us, feedback, and information you provide during onboarding, training, or support interactions.
How we use information
We use information for purposes including to:
- provide, operate, and maintain the Services;
- authenticate users and secure access to the platform;
- enable dispatch, planning, and optimization workflows across your fleet;
- send operational and dispatch communications to drivers on behalf of your Organization — such as load assignments, pickup and delivery details, schedule changes, ETAs, and confirmations;
- generate AI-driven recommendations, planning, and optimization outputs, which may involve third-party AI and machine-learning service providers acting as our subprocessors under contractual confidentiality and security obligations;
- analyze usage to improve the performance, reliability, and user experience of the Services, and to develop new features and capabilities;
- provide support, respond to inquiries, and communicate with you; and
- meet legal, regulatory, and compliance obligations, and enforce our agreements.
We do not use the personal data we process on behalf of Organizations for advertising or for building profiles unrelated to the Services.
Data retention
We retain information for as long as necessary to provide the Services, to support your Organization's legitimate business needs, to comply with legal or regulatory obligations, to resolve disputes, and to enforce our agreements. Retention periods may vary depending on the type of data and the context in which it was collected. When data is no longer needed, we delete or anonymize it in accordance with our retention practices and applicable law.
Security
We use reasonable technical and organizational measures designed to protect information from unauthorized access, use, alteration, or destruction — including encryption in transit and at rest, role-based access controls, and access auditing. No system can be guaranteed to be 100% secure, and you are responsible for maintaining the security of your account credentials and devices.
WhatsApp Business Platform and Meta data
Where your Organization enables driver communications through the WhatsApp Business Platform, TrueMile sends and receives operational messages with drivers on your Organization's behalf. Our use of the WhatsApp Business Platform and any data received from Meta is consistent with the Meta Platform Terms, the WhatsApp Business Messaging Policy, and applicable Meta developer policies.
Data accessed
Through the WhatsApp Business Platform, we access the driver's phone number and WhatsApp profile name, the content and templates of messages exchanged, the WhatsApp Business Account (WABA) and phone-number identifiers, message delivery and read status, related event metadata, and messaging opt-in and opt-out status. We store the phone number, associated WhatsApp identifiers, opt-in status, and the message history needed to operate dispatch communications and link them to the correct Organization and driver.
Data usage
Meta and WhatsApp data is used solely to deliver the operational and dispatch communications requested by your Organization — such as load assignments, pickup and delivery details, schedule changes, ETAs, and confirmations — and to confirm delivery and receipt of those messages. We do not use this data for advertising or for unrelated profiling.
Data sharing
We do not sell Meta or WhatsApp data. It is shared only with our core infrastructure providers (for example, our cloud hosting and database vendors) under contracts requiring the same level of protection, with your Organization according to its configuration of the Services, and with Meta as necessary to transmit messages through the WhatsApp Business Platform.
Data storage and protection
Stored phone numbers, WhatsApp identifiers, and message records reside in our managed PostgreSQL databases, which are encrypted in transit and at rest. Access is restricted to authorized personnel, audited, and governed by role-based access controls consistent with our broader security program.
Data retention and deletion
We retain Meta and WhatsApp data only while your Organization has the integration enabled or as needed to comply with legal obligations. Administrators can remove the integration at any time. Drivers can opt out of messaging at any time by replying STOP, and any user may request deletion of their WhatsApp data by contacting privacy@truemile.ai. We will delete or anonymize the relevant records within a reasonable period, subject to legal requirements.
Your choices
Depending on your role and your Organization's configuration, you may have choices regarding certain data and communications, including:
- updating or correcting account profile information;
- managing certain notification preferences within the Services;
- opting out of WhatsApp messaging at any time by replying STOP to any message; and
- requesting access, correction, or deletion of personal data by emailing privacy@truemile.ai, or through your Organization where applicable.
Many privacy rights and requests must be managed through your Organization, which controls how the Services are used in its operations.
International transfers
TrueMile may process and store information in countries other than the country where you are located. When we transfer personal data internationally, we do so in accordance with applicable data protection laws and, where required, use appropriate safeguards.
Children's privacy
The Services are not directed to children and are intended for use only in a business and professional context. We do not knowingly collect personal data from children.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services or by other reasonable means and update the "Last updated" date above. Your continued use of the Services after the changes become effective indicates your acknowledgment of the updated policy.
Contact
If you have questions about this Privacy Policy or how we handle personal data, or to make a privacy request, please contact us at privacy@truemile.ai, or reach out to your TrueMile representative.