Privacy Policy

1. Overview

Direct Auto Ship ("we," "our," or "us") operates as a licensed property broker. Our technology platform connects vehicle shippers with verified auto transport carriers, offering a transparent and direct communication experience. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, mobile applications, and brokerage services (collectively, the "Platform").

By using our Platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Platform.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when using our Platform:

2.2 Information Collected Automatically

When you use our Platform, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, clickstream data
• Location Data: location information (with permission), IP-based location
• Performance Data: Loading times, errors, crash reports
• Communication Metadata: Message timestamps, delivery status

2.3 Information from Third Parties

We may receive information from:

• DOT Verification Services: Carrier safety records, operating authority status
• Insurance Providers: Coverage verification and claims history
• Payment Processors: Transaction status and fraud prevention data
• Background Check Services: Business verification for carriers
• Social Media: Public profile information (if you connect accounts)

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Core Platform Services

• Facilitate direct connections between shippers and carriers
• Process and manage transport bookings and shipments
• Verify carrier credentials and maintain platform safety
• Enable secure messaging between platform users
• Process payments through our escrow system
• Provide manual status updates and delivery updates
• Generate digital Bills of Lading and transport documentation

3.2 Account and User Management

• Create and maintain user accounts
• Authenticate users and prevent unauthorized access
• Personalize user experience and preferences
• Manage user profiles and business information
• Enable rating and review systems

3.3 Safety and Security

• Verify carrier licenses, insurance, and safety records
• Detect and prevent fraudulent activity
• Monitor platform usage for security threats
• Investigate disputes and resolve conflicts
• Maintain insurance and damage documentation

3.4 Communication and Support

• Provide customer support and technical assistance
• Send service-related notifications and updates
• Respond to user inquiries and feedback
• Facilitate direct communication between users

3.5 Platform Improvement and Analytics

• Analyze platform usage to improve services
• Develop new features and functionality
• Optimize route planning and pricing algorithms
• Generate aggregate usage statistics
• Conduct research and development

3.6 Legal and Regulatory Compliance

• Comply with applicable laws and regulations
• Respond to legal process and government requests
• Maintain records required by transportation regulations
• Report incidents as required by law

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

4.1 Between Platform Users

To facilitate our direct marketplace, we share relevant information between shippers and carriers:

• For Shippers: Carrier business name, DOT number, ratings, reviews, insurance status
• For Carriers: Shipper contact information, pickup/delivery locations, vehicle details
• During Transport: Carrier-provided status updates, delivery status, photos

4.2 Service Providers

We share information with trusted third-party service providers who assist in operating our Platform:

• Payment Processing: Stripe (for secure payment and escrow services)
• Verification Services: DOT data providers, insurance verification companies
• Maps: Google Maps API (anonymized usage data)

4.3 Legal Requirements

We may disclose information when required by law or to protect our rights:

• In response to valid legal process (subpoenas, court orders)
• To comply with transportation and safety regulations
• To protect the safety of users or the public
• To investigate fraud or security breaches
• To enforce our Terms of Service

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business transaction. We will notify users of any such transfer and any changes to this Privacy Policy.

4.5 Aggregate and De-identified Data

We may share aggregate, statistical, or de-identified information that cannot be used to identify you, such as:

• Overall platform usage statistics
• Transportation route popularity data
• Industry trend analysis
• Safety and performance metrics

5. Data Security

We implement comprehensive security measures to protect your personal information:

5.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3
• Data Storage: Personal information is encrypted at rest using AES-256 encryption
• Secure Infrastructure: AWS cloud hosting with enterprise-grade security controls
• Access Controls: Multi-factor authentication and role-based access for employees
• Regular Audits: Third-party security assessments and penetration testing

5.2 Payment Security

• All payment processing handled by Stripe (PCI DSS Level 1 certified)
• We never store complete credit card numbers or payment details
• Tokenized payment methods for recurring transactions
• Fraud detection and prevention systems

5.3 Administrative Safeguards

• Employee background checks and security training
• Limited access to personal information on a need-to-know basis
• Regular security awareness training
• Incident response procedures

5.4 Physical Safeguards

• Secure data centers with restricted access
• Environmental controls and monitoring
• Backup and disaster recovery procedures

6. Your Privacy Rights and Choices

You have several rights regarding your personal information:

6.1 Access and Portability

• Account Dashboard: View and manage your personal information through your account settings
• Data Export: Request a copy of your personal data in a machine-readable format
• Activity History: Review your platform usage and transaction history

6.2 Correction and Updates

• Update your profile information at any time
• Correct inaccurate or incomplete information
• Request assistance with data corrections through customer support

6.3 Deletion and Account Closure

• Account Deletion: Request deletion of your account and associated data
• Data Retention: Some information may be retained for legal or business purposes
• Anonymization: Personal identifiers removed while preserving aggregate data

6.4 Communication Preferences

• Opt out of marketing communications (unsubscribe links provided)
• Manage notification preferences in your account settings
• Choose frequency and types of platform updates

6.5 Location Data Controls

• Manage GPS location sharing through device settings
• Control real-time tracking during active transports
• Opt out of location-based features (may limit functionality)

6.6 State-Specific Rights

California Residents (CCPA/CPRA)

California residents have additional rights:

• Right to know what personal information is collected and how it's used
• Right to delete personal information (with certain exceptions)
• Right to opt out of the sale of personal information (we don't sell data)
• Right to non-discrimination for exercising privacy rights
• Right to correct inaccurate personal information

Virginia, Colorado, and Connecticut Residents

Residents of these states have similar rights under their respective state privacy laws, including rights to access, correct, delete, and obtain copies of personal information.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your platform experience:

7.1 Types of Cookies We Use

7.2 Third-Party Tracking

We use select third-party services that may set their own cookies:

• Google Analytics: Website usage analytics (anonymized)
• Stripe: Payment processing and fraud prevention
• Customer Support Tools: Chat functionality and support tickets

7.3 Managing Cookies

You can control cookies through:

• Browser Settings: Most browsers allow you to block or delete cookies
• Platform Settings: Cookie preferences in your account dashboard
• Opt-Out Tools: Industry opt-out mechanisms for advertising cookies

8. Children's Privacy

Our Platform is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18 years of age.

8.1 Age Verification

• Users must be at least 18 years old to create an account
• Carriers must be licensed commercial operators (21+ in most states)
• Age verification required during account registration

8.2 Parental Notice

If we discover that we have collected personal information from a child under 18 without parental consent, we will:

• Delete the information immediately
• Terminate the account
• Notify parents/guardians if contact information is available

8.3 Reporting

If you believe a child under 18 has provided personal information to us, please contact us immediately at contact@directautoship.com.

9. International Data Transfers

9.1 Data Processing Location

• Primary data processing occurs in the United States
• Cloud infrastructure hosted in AWS US regions
• Some service providers may process data internationally
• All transfers comply with applicable privacy laws

9.2 International User Rights

For users outside the United States:

• GDPR (EU/UK): European users have rights under GDPR including data portability, erasure, and objection
• PIPEDA (Canada): Canadian users have rights under federal privacy legislation
• Other Jurisdictions: We respect local privacy laws where applicable

9.3 Data Transfer Safeguards

When transferring data internationally, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) with service providers
• Adequacy decisions where available
• Data Processing Agreements with clear privacy obligations
• Regular review of transfer mechanisms and legal requirements

10. Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected and to comply with legal requirements.

10.1 Retention Periods

10.2 Deletion Process

When retention periods expire or deletion is requested:

• Personal identifiers are permanently deleted or anonymized
• Backups are purged according to our data lifecycle policies
• Some aggregate, non-personal data may be retained for analytics
• Legal holds may extend retention when required by law

10.3 Active vs. Inactive Accounts

• Active Accounts: Regular retention schedules apply
• Inactive Accounts: Accounts inactive for 3+ years may be archived
• Deletion Requests: Processed within 30 days unless legally prohibited

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

11.1 Notification of Changes

When we make changes to this Privacy Policy:

• Email Notice: Registered users receive email notification of material changes
• Platform Notice: Prominent notice on our website and mobile apps
• Version History: Previous versions available upon request
• Effective Date: Changes take effect 30 days after notification (unless legally required sooner)

11.2 Material Changes

We consider the following to be material changes requiring enhanced notice:

• New categories of personal information collected
• New purposes for using personal information
• Changes to data sharing practices
• Reduction in user privacy rights
• Changes to data retention periods

11.3 Continued Use

Your continued use of the Platform after the effective date of changes constitutes acceptance of the updated Privacy Policy. If you do not agree with changes, you may delete your account before the effective date.

12. California Privacy Rights (CCPA/CPRA)

This section provides additional information for California residents under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

12.1 Categories of Personal Information

In the past 12 months, we have collected the following categories of personal information:

12.2 Sale and Sharing of Personal Information

We do not sell personal information and have not sold personal information in the past 12 months. We do not share personal information for cross-context behavioral advertising.

12.3 Sensitive Personal Information

We may collect limited sensitive personal information:

• Precise geolocation data (for transport services)
• Account login credentials (for security)
• Financial account information (for payments, processed by Stripe)

We do not use sensitive personal information for purposes other than providing our services.

12.4 California Consumer Rights

California residents have the right to:

• Know: Request information about personal information collected, used, and shared
• Delete: Request deletion of personal information (with exceptions)
• Correct: Request correction of inaccurate personal information
• Opt-Out: Opt out of sale/sharing (we don't sell/share for advertising)
• Limit Use: Limit use of sensitive personal information
• Non-Discrimination: Not receive discriminatory treatment for exercising rights

12.5 Exercising Your Rights

To exercise your California privacy rights, please submit a verifiable request through one of the following methods:

• Email: contact@directautoship.com
• Mail: To the address listed in the "Contact Information" section of this policy.

We may require identity verification to process your request for security purposes.

13. Contact Information

13.2 Business Information for Verification

• Legal Name: Direct Auto Ship, LLC
• DOT Number: 4442942
• MC Number: 01749731

14. Effective Date and Acknowledgment

This Privacy Policy is effective as of July 17, 2025 and applies to all information collected by Direct Auto Ship on or after this date.

By using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our privacy practices, please do not use our Platform.

This Privacy Policy is incorporated into and subject to our Terms of Service. Any capitalized terms not defined in this Privacy Policy have the meanings set forth in our Terms of Service.