Privacy Policy
This policy explains what personal data KnowHaul collects from you as an account holder, how we use it, and the third parties that process it on our behalf.
Last updated:
What this policy covers — and what it doesn't
KnowHaul is a carrier-intelligence product. The substance of the service is data about motor carriers derived from FMCSA filings and other public records— operating authority, insurance, inspections, safety ratings, and similar. That carrier data is public-record information about businesses; it is not personal data we collected from those carriers’ website visitors, and it is governed by our Terms, not this policy.
This policy is about your data — the information you give us when you create an account and use the product.
Data we hold about you
- Account email. Stored with our auth provider (Neon Auth) to sign you in and send transactional email.
- Search history and recently viewed carriers. Kept to power your history and recents. You can opt out in settings, and we automatically delete these rows after 90 days via a daily retention job.
- Saved lanes and watchlist. The carriers and lanes you pin, so we can resurface them and send you the lane-leads digest you opted into.
- Support tickets. The email, subject, and message you send through the in-app help dialog, delivered to our support inbox so a human can reply.
- Claim and signup security signals. When you claim a carrier or sign up, we record the event for fraud detection (detecting, for example, multiple carrier profiles claimed from the same origin). We store a salted, one-way hashof the originating IP address — never the raw IP address itself — so it cannot be reversed back to your network. These events are included in your data export and deleted when you delete your account.
We do not sell your personal data, and we do not use it to build advertising profiles.
Sub-processors
We use a small set of established vendors to operate the service. Each processes only the data it needs for the function listed below. This list is current as of .
- Vercel — application hosting and edge delivery. Processes all web traffic and holds application environment secrets.
- Neon — Postgres database and authentication. Your account email address and all account data are stored here.
- Sentry — error monitoring, so we can find and fix crashes. Error events may include limited contextual data from the session that caused the error.
- Google Analytics 4 — aggregate product analytics, gated on your cookie consent. Only activated if you accept analytics cookies; no analytics data is collected otherwise.
- Resend — transactional and digest email delivery. Processes your email address and the content of emails we send you (sign-in, verification, lane digests, fraud alerts).
- Paddle — our merchant of record for payments. When you subscribe, your billing and payment details go directly to Paddle — we never see or store your card number. See our Refund Policy.
We do not sell your personal data to any of these vendors or to anyone else. Each vendor is bound by contractual obligations covering security and data handling. The complete vendor risk register — including DPA and SOC 2 status for each vendor — is maintained in our internal compliance documentation.
Email and your choices
Every marketing or digest email we send (such as the lane-leads digest) carries a one-click unsubscribe in line with RFC 8058, plus an unsubscribe link in the footer. Transactional email — sign-in, verification, support replies — is sent only as needed to operate your account.
Accessing or deleting your data
You can exercise both rights yourself, without emailing anyone, from Settings → Privacy & data:
- Export.Download a complete JSON copy of the data we hold about you — history, saved lanes and watchlist, preferences, billing record, workspace memberships, and anything you’ve submitted. The bundle is generated on demand, and every export is recorded in an audit log.
- Deletion.Request account deletion at any time. Your account enters a 30-day grace window during which you can sign back in and cancel; after the window, your data is permanently deleted by an automated daily job. If you own a team workspace that still has other members, transfer ownership first — we won’t delete your teammates’ data out from under them.
For corrections, or any access/deletion request you’d rather make by email, contact admin@knowhaul.com. We respond to verified data-subject requests within 30 days.
Changes to this policy
If we change how we handle your data, we’ll update this page and revise the “Last updated” date above. Material changes will be communicated by email where appropriate.