Privacy Policy

1. Data We Collect

Information You Provide

• Driver profile data: name, email, phone number, home ZIP code, CDL class, endorsements, employment history, equipment preferences, and route preferences.
• Documents: CDL images (front/back), medical cards, MVR reports, and other compliance documents you upload.
• Carrier account data: company name, DOT number, MC number, contact information, fleet size, and hiring preferences.
• Recruiter account data: name, email, company affiliation, and carrier client list.
• Communications: messages, call transcripts, and email interactions conducted through the platform.

Information We Collect Automatically

• Device information (browser type, operating system, IP address).
• Usage data (pages visited, features used, search queries, time spent on pages).
• Location data derived from IP address or ZIP code (not precise GPS).

Information from Third-Party Sources

• FMCSA (Federal Motor Carrier Safety Administration) public records including carrier safety scores, inspection history, and compliance data.
• EIA (Energy Information Administration) diesel fuel price data.
• FRED (Federal Reserve Economic Data) freight market indicators.

2. How We Use Your Data

We use collected information to:

• Match drivers with carriers using our AI-powered scoring algorithm, which considers location, pay, safety records, equipment, route type, and driver preferences.
• Enrich carrier profiles with FMCSA safety data, market signals, and fleet intelligence to give drivers better information.
• Process documents via OCR to extract CDL information, medical card expiry dates, and compliance data.
• Send communications including match notifications, application updates, and platform alerts via email, SMS, or voice.
• Improve our services through analytics, aggregate trend analysis, and AI model training on anonymized data.
• Calculate market insights including regional pay benchmarks, turnover predictions, and freight market conditions.
• Prevent fraud and ensure platform security.

3. Data Sharing

We share your information in the following ways:

• Matched carriers receive a driver's profile summary (name, CDL class, endorsements, location, experience) only when a match is confirmed. Carriers never see your full application unless you approve.
• Recruiters acting on behalf of carriers may view matched driver profiles within their assigned pipeline.
• Service providers who help us operate the platform, including cloud hosting (Google Cloud Platform), email delivery (SendGrid), SMS delivery (Twilio), and payment processing (Stripe). These providers are contractually obligated to protect your data.
• Legal compliance: We may disclose information when required by law, regulation, legal process, or government request.

We do NOT sell your personal data to third parties. We do NOT share driver data with data brokers, advertising networks, or any party outside the carrier-driver matching process.

4. FMCSA Public Data

LMDR indexes publicly available data from the Federal Motor Carrier Safety Administration (FMCSA) including carrier safety ratings, inspection results, crash data, and compliance history. This data is public record maintained by the U.S. Department of Transportation and is freely accessible at safer.fmcsa.dot.gov.

We use FMCSA data to score and rank carriers on safety, helping drivers make informed decisions about where they work. Carrier safety scores displayed on our platform reflect official federal data and are updated weekly.

5. Cookies & Tracking

We use the following technologies:

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled.
• Analytics cookies: Help us understand how users interact with the platform. We use Google Analytics and BigQuery for aggregated usage metrics.
• Functional cookies: Remember your preferences (e.g., search filters, notification settings).

We do not use advertising or retargeting cookies. We do not sell cookie data to third parties.

6. Driver Data Rights

As a driver on our platform, you have the right to:

• Access: Request a copy of all personal data we hold about you.
• Correction: Update or correct inaccurate information in your profile at any time.
• Deletion: Request that we delete your account and associated personal data. We will process deletion requests within 30 days.
• Data portability: Request your data in a machine-readable format.
• Opt out of communications: Unsubscribe from non-essential emails and SMS at any time via your profile settings or by contacting us.
• Withdraw consent: Revoke consent for data processing at any time, which may limit your ability to use certain platform features.

To exercise any of these rights, contact us at levy@lastmiledr.app or call (214) 531-3751.

7. Carrier Data Handling

Carrier accounts on LMDR include company information, DOT/MC numbers, fleet details, and hiring preferences. This data is used to:

• Match carriers with qualified driver candidates.
• Display carrier profiles to drivers (including safety scores, equipment, routes, and pay ranges).
• Generate fleet intelligence reports and market benchmarks for carrier dashboard users.
• Enable recruiter management of carrier hiring pipelines.

Carriers may request data correction or account deletion by contacting us. FMCSA-sourced data (safety scores, inspection history) is public record and is not subject to deletion requests.

8. Data Security

We protect your data using:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2+.
• Encryption at rest: Data stored in Cloud SQL (PostgreSQL) and Google Cloud Storage is encrypted using Google-managed encryption keys.
• Access controls: Role-based access ensures that only authorized personnel and systems can access sensitive data. API keys are hashed and stored in GCP Secret Manager.
• Authentication: Firebase Authentication with secure session management protects user accounts.
• Monitoring: Automated anomaly detection and observability systems monitor for unauthorized access attempts.

While we implement industry-standard security measures, no system is completely secure. We encourage users to protect their account credentials and report any suspicious activity immediately.

9. Children's Privacy

LMDR is designed for commercial driver licensing (CDL) holders and trucking industry professionals. Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover that a user is under 18, we will promptly delete their account and associated data.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify users via email or an in-platform notice at least 30 days before the changes take effect. The "Last updated" date at the top of this page indicates the most recent revision.

11. Contact Information

If you have questions about this Privacy Policy, your data, or your rights, please contact us: