Privacy Policy

This Privacy Policy explains what information Haulock collects, how we use it, who we share it with, and what choices you have. By using Haulock, you agree to the practices described here.

1. Information we collect

Account information

When you sign up, we collect your email address, name, password (stored hashed by our authentication provider), and optionally your company name, MC number, and DOT number. If you sign in with Google, we receive the email address and basic profile information you authorize.

Usage information

When you use Haulock, we record which lookups you ran, what was returned, your billing plan, IP address, browser type, referrer, and rough timestamps. This is used to operate the Service, prevent abuse, enforce plan limits, and improve features.

Communications

When we send you an email, we record the recipient, subject, type of email (welcome, alert, newsletter, etc.), and the timestamp. This is used to power your account dashboard, the admin newsletter view, and to comply with anti-spam law.

Cookies and similar technologies

We use a small number of cookies and similar technologies to keep you signed in, remember preferences, and protect against abuse. We do not sell or share cookie data for cross-site advertising.

2. Where the report data comes from

The information displayed inside a Haulock report (carrier name, address, MC, DOT, authority, insurance, safety rating, crash and inspection history, web presence, social profiles, and similar data points) is collected from public and third-party sources, including FMCSA, public WHOIS, public DNS, public business listings, and search engines. We process and present this data; we do not generate or own it.

3. How we use your information

• To run, secure, and improve the Service.
• To send transactional emails such as welcome messages, login alerts, billing receipts, and high-risk lookup notifications.
• To send the Haulock fraud briefing newsletter and related industry updates if you opt in.
• To prevent fraud, abuse, and unauthorized access.
• To comply with legal obligations.

4. Service providers we share data with

We rely on a small number of trusted vendors to operate the Service. They process information on our behalf:

• Supabase — account, authentication, and database hosting.
• Resend — transactional email and newsletter delivery, plus email tracking metadata.
• Stripe — billing and subscription management. Card details are handled by Stripe and never stored on Haulock servers.
• Vercel — application hosting and edge networking.
• Google Cloud (Places API, Safe Browsing) — address verification and basic domain reputation.
• Brave Search — public web search for company name and reputation lookups.
• FMCSA — official carrier and broker data sourced from public U.S. government systems.

We do not sell your personal information. We do not share it for cross-context behavioral advertising.

5. Your choices

• Email preferences. Manage which emails you receive from Settings → Notifications, or click the unsubscribe link in any newsletter.
• Account deletion. You can delete your Haulock account from Settings. This removes your account, lookups, watchlist, fraud reports, and team membership, and removes you from our newsletter list. Backups may persist for up to 30 days before being purged.
• Access and correction. You can update your profile data from Settings. For other requests, email us.

6. Data retention

We retain account and usage data while your account is active and for a reasonable period afterwards to satisfy legal, accounting, and abuse-prevention requirements. Public report data (FMCSA snapshots, etc.) may be retained as part of the Haulock historical archive even after individual accounts are deleted, since it does not include your personal information.

7. Security

We use industry-standard practices to protect your information, including encrypted connections, hashed passwords, role-based database access, and access logging. No system is perfectly secure. You are responsible for keeping your password and access credentials confidential.

8. International users

Haulock is operated from the United States. If you use the Service from outside the United States, you understand that your information will be processed in the United States, where data protection laws may differ from those in your country.

9. Children

Haulock is not directed at children under 16, and we do not knowingly collect personal information from them.

10. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top and, where appropriate, notify account holders by email.

11. Contact

Privacy questions can be sent to privacy@haulock.com.