Privacy Policy

Effective: April 4, 2026

1. Who We Are

FleetGuard is operated by DailyVault LLC, a New Jersey limited liability company located in Hackensack, New Jersey. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our platform.

2. Data We Collect

Account Information: Name, email address, phone number, language preference.

Company Information: Company name, DOT number, MC number, address.

Driver Information: Driver names, phone numbers, email addresses, CDL numbers, CDL state, CDL class, hire dates, language preferences.

Vehicle Information: Year, make, model, VIN, license plate number, DOT inspection dates, registration and insurance expiration dates, state safety inspection dates, emissions inspection dates, current mileage readings, oil change and tire rotation schedules, vehicle type, and gross vehicle weight rating (GVWR) where provided.

Maintenance Records: Service history entries including service type (oil change, tire rotation, brake check, inspection, wash), service date, mileage at service, cost, vendor name, and free-text notes that you choose to enter.

Company Administrative Records: LLC formation documents, EIN letters, DOT authority / MC number documentation, general liability insurance certificates, commercial auto insurance certificates, workers compensation insurance, BOC-3 process agent designations, UCR / IFTA / IRP registrations, state business licenses, surety bonds, Heavy Vehicle Use Tax (Form 2290), annual report filings, and recurring obligations such as LLC annual fees, quarterly tax filings, rent, and subscription renewals. These are uploaded by the account owner to the Admin tab and are subject to the same encryption, access control, and tenant isolation as driver compliance documents.

Sensitive Compliance Documents: Photos and PDFs of DOT compliance documents uploaded by users or received via SMS. These may include but are not limited to:

  • Commercial Driver's Licenses (CDL) — Class A, B, and C
  • Medical examiner's certificates (DOT medical cards)
  • Drug and alcohol testing records
  • Motor vehicle records (MVR)
  • Vehicle insurance certificates
  • DOT annual inspection reports
  • Hazmat endorsement documentation
  • Employment verification and I-9 forms
  • Social Security cards and W-4/W-9 forms

Payment Information: Payment processing is handled entirely by Stripe. We do not store credit card numbers, bank account details, or other payment instruments on our servers. We store only your Stripe customer ID and subscription status.

Usage Data: Log data, IP addresses, browser type, device information, and pages visited for analytics, security, and service improvement purposes.

3. How We Use Your Data

Compliance Tracking: To track driver and vehicle document expirations, calculate compliance scores, and generate audit-readiness reports.

SMS and Email Alerts: To send automated expiration reminders to drivers and fleet owners at 90, 60, 30, and 7 days before document expiration via the Quo API (formerly OpenPhone) and email.

AI Document Processing: Uploaded documents are sent to the Anthropic Claude API for automated data extraction (document type, expiration dates, license numbers, holder names). The AI may additionally compare the document holder name to the assigned driver's name as a best-effort name verification check. Anthropic does not use customer data submitted via its API to train their models.

Personal Plan Data Scope: If you are subscribed to the Personal plan ($9.99/month), the data collected is limited to a single driver (you) and a single vehicle (yours). Personal plan data is stored with the same encryption and tenant isolation controls as business accounts and is never aggregated with data from other users.

Invoice Generation: To create, manage, and deliver invoices for load tracking and freight billing.

Billing: To manage your subscription and process payments through Stripe.

Audit Simulation: To generate AI-powered DOT audit simulations for informational purposes. These simulations are not actual audits and should not be treated as such.

4. Data Accuracy Disclaimer

DailyVault LLC does not guarantee the accuracy, completeness, or correctness of any data stored in or displayed by the Service, including data entered by users, data extracted by AI, or data derived from calculations (such as compliance scores). Users are solely responsible for verifying the accuracy of all data in their account.

5. Third-Party Services

We share data with the following third-party services, only as necessary to provide the Service:

  • Stripe — Payment processing. Subject to Stripe's Privacy Policy.
  • Anthropic — AI document reading via Claude API. Documents are processed for data extraction but are not used for model training per Anthropic's commercial API terms.
  • Brevo (formerly Sendinblue) — Transactional email delivery (welcome emails, password resets, compliance alerts, founder notifications). Subject to Brevo's Privacy Policy.
  • Quo (formerly OpenPhone) — SMS delivery for compliance alerts and driver communication.
  • Render — Cloud hosting, web services, and managed PostgreSQL database infrastructure.

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

6. Sensitive Document Handling

We understand that the documents uploaded to FleetGuard contain sensitive personal and regulatory information. We implement the following protections:

  • All data is transmitted over HTTPS (TLS encryption in transit).
  • Passwords are hashed using bcrypt and are never stored in plain text.
  • API keys and secrets are stored as environment variables, not in source code.
  • Documents are stored on secure cloud infrastructure (Render) with access restricted to authenticated users.
  • AI document processing occurs via encrypted API calls to Anthropic; documents are not retained by Anthropic after processing.

However, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account deletion or termination:

  • Personal data and uploaded documents will be deleted within 90 days.
  • Billing records may be retained as required by law or for legitimate accounting purposes.
  • Anonymized usage data may be retained for analytics and service improvement.

8. AI Support Chat Data

The Service includes an AI-powered support chat. When you use the support chat:

  • Your messages are sent to the Anthropic Claude API for response generation.
  • Chat conversations may be logged for support quality improvement.
  • Chat logs are associated with your user account.
  • Anthropic does not use API data to train their models per their commercial API terms.
  • Do not submit sensitive personal information (SSN, bank details, medical records) in the support chat.
  • Chat logs are retained for 90 days, then automatically deleted.

9. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Export your data in a portable format.
  • Opt out of marketing communications.
  • Request information about what personal data we have shared with third parties.

To exercise any of these rights, contact us at support@docketscreen.com. We will respond to your request within 30 days.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

  • The right to know what personal information we collect and how it is used.
  • The right to request deletion of your personal information.
  • The right to opt out of the sale of your personal information.
  • The right to non-discrimination for exercising your privacy rights.

We do not sell personal information to third parties.

11. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

12. Data Security Practices

We protect Customer Data with layered technical and administrative safeguards. A full description is available in our Information Security Statement. Summary:

  • All data transmitted to and from the Service is encrypted in transit using TLS 1.2 or higher.
  • Passwords are hashed using bcrypt and never stored in plain text.
  • Uploaded documents are stored in Cloudflare R2 with AES-256 encryption at rest, accessed only via signed URLs that expire after 15 minutes.
  • Authentication uses JSON Web Tokens. Multi-user access supports role-based permissions (Owner, Admin, Viewer).
  • All database queries are scoped by company identifier to enforce multi-tenant isolation.
  • Every document view, download, upload, deletion, and data modification is logged in an audit trail.
  • Rate limiting is applied to authentication, AI endpoints, and usage-sensitive operations to prevent abuse.
  • Input validation protects against SQL injection, XSS, and malicious file uploads.

DailyVault LLC does not currently hold SOC 2, ISO 27001, or PCI DSS certifications. Our payment processor (Stripe) is PCI DSS Level 1 certified, and our cloud object storage provider (Cloudflare R2) is SOC 2 Type II certified. DailyVault LLC is actively working toward SOC 2 Type I certification.

13. Breach Notification

In the event of a data breach affecting your personal information or Customer Data, DailyVault LLC will notify affected customers without undue delay, and in any event within seventy-two (72) hours after becoming aware of the breach. The notification will include: the nature of the breach, categories of data affected, likely consequences, and remediation measures taken or planned.

14. Subprocessors

We use the following third-party service providers (subprocessors) to deliver the Service. Each subprocessor is contractually bound to process data only as necessary to provide their service:

  • Render — Application hosting and managed PostgreSQL database (United States)
  • Cloudflare R2 — Document object storage, SOC 2 Type II certified (Global)
  • Anthropic — AI document reading and analysis via Claude API (United States). Per Anthropic's commercial API terms, data submitted is not used for model training.
  • Stripe — Payment processing, PCI DSS Level 1 certified (United States)
  • Quo / OpenPhone — SMS message delivery (United States)
  • Brevo — Transactional email delivery (European Union)
  • Sentry — Application error monitoring, optional (United States)

We do not sell personal information to any third party. We do not share personal information with any party not listed above except when required by law or with your explicit consent.

15. International Data Transfers

DailyVault LLC is based in the United States, and Customer Data is primarily stored in U.S. data centers. Some of our subprocessors (notably Brevo) may process data in the European Union. When data is transferred internationally, we rely on appropriate safeguards including Standard Contractual Clauses and the adequacy decisions where applicable.

16. Audit Trail and Exemption Records

The Service creates audit trail records when account users take certain actions, including but not limited to: creating, updating, or deleting drivers, vehicles, documents, or exemptions; uploading compliance documents; marking documents as "not applicable" with a written reason; and sending SMS reminders. These records include the acting user's identity, a timestamp, the affected entity, and (for exemptions) the written reason provided. Audit trail records are retained for the lifetime of your account plus six (6) years after account closure, or longer if required by applicable law, regulation, insurance policy, or litigation hold. We retain this information to enable you to demonstrate compliance history to regulators, insurers, or counterparties, and to protect DailyVault LLC against claims that arise from your use of the Service.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 30 days before the changes take effect. Continued use of the Service after the effective date of a revised Privacy Policy constitutes acceptance of the updated policy.

18. Contact

For privacy-related questions or data requests, contact us at:

DailyVault LLC
Hackensack, New Jersey
support@docketscreen.com