1. What We Collect

• Search activity: USDOT numbers and carrier names you look up, used to serve results and improve the service.
• Email address: only if you sign up for monitoring alerts or create an account.
• Survey responses: if you complete a Ghost Tax or exit survey, the answers you choose to provide (e.g., role, fleet size, freight type, cost estimates) and any email address or phone number you enter, along with the IP address and browser user agent recorded with the submission.
• Payment details: collected and processed by Stripe. We never see or store full card numbers; we retain only the Stripe customer reference and transaction status.
• Technical logs: IP address, user agent, and request timing, kept for security, rate limiting, and debugging.

2. What We Do NOT Collect

Carrier data displayed on YieldShield (legal names, DBA names, addresses, authority statuses, safety metrics) is public regulatory data published by the FMCSA, not personal information collected from you. We do not sell personal data, we do not build advertising profiles, and we do not share your email address or lookup history with third parties except as described below.

3. Cookies

We use strictly necessary cookies for session management (e.g., keeping you logged in) and, where enabled, privacy-respecting analytics to understand aggregate usage. We do not use third-party advertising cookies or cross-site trackers.

4. Third-Party Services

• Stripe: payment processing. Billing data you enter at checkout is governed by Stripe's privacy policy.
• FMCSA: the source of all carrier safety data. We ingest published datasets; we do not send your personal information to the FMCSA.
• Cal.com: scheduling. If you book a call, the details you enter (and the USDOT number the booking relates to) are processed by Cal.com.
• Resend: transactional email delivery (e.g., login links and alert emails). Your email address is processed by Resend to deliver these messages.
• Infrastructure: the service is hosted on Fly.io, with encrypted database backups replicated to Cloudflare R2. Data you submit is stored on these providers' systems.

5. Data Retention

Account and alert data is retained while your account is active and deleted upon request. Technical logs are retained for a limited period (typically 90 days or less) for security and operational purposes. Payment records are retained as required for tax and accounting compliance.

6. Your Choices

• Unsubscribe from alert emails at any time via the link in each email.
• Request deletion of your account and associated data.
• Request a copy of the personal data we hold about you.

To exercise any of these, email support@getyieldshield.com.

7. Changes & Contact

We may update this policy; material changes will be reflected in the "Last updated" date above. Questions or requests: support@getyieldshield.com. See also our Terms of Service.