Privacy Policy

To run your compliance account we collect:

• Account details — your name, email address, and password (stored only as a salted hash), or your Google account identity if you sign in with Google.
• Carrier & fleet data — your USDOT number, legal/DBA name, operating authority, the states you run, and the vehicles, drivers, trips, fuel purchases, credentials, and filings you enter.
• Usage data — basic technical information needed to operate the service (such as session cookies and server logs).

We use your data solely to provide the service: determining which obligations apply to you, computing IFTA and state weight-distance taxes, planning truck-legal routes, tracking deadlines, and sending the alerts you ask for. We do not sell your data, and we do not use it to train third-party AI models.

We use a single first-party session cookie (tp_session) to keep you signed in. It is strictly necessary for the service to function and is not used for advertising or cross-site tracking.

We share the minimum data necessary with the processors that power specific features:

• FMCSA — to look up your carrier authority and status by USDOT number.
• HERE — to geocode addresses and compute truck-legal routes and per-state mileage.
• NHTSA vPIC — to decode a VIN you enter.
• Anthropic (Claude) — to power the AI Copilot and read documents you upload.
• Resend — to deliver deadline-alert and transactional emails.
• Dodo Payments — to process subscription payments (we never see your full card details).
• Google — only if you choose to sign in with Google.

We keep your data for as long as your account is active. You can request a copy of your data or ask us to delete your account and associated records at any time by emailing support@truepermit.com.

We may update this policy as the product evolves. Material changes will be reflected by the “Last updated” date above, and we'll notify account holders of significant changes.

Questions about privacy? Email support@truepermit.com or use our contact form.