1. Information we collect
- Account information — name, email address, password (stored securely, hashed), and company name when you create an account.
- Compliance data — documents you upload (including medical examination certificates, insurance certificates, licenses, registrations, and inspection reports), dates extracted from them, and driver, truck, and filing information you enter.
- Payment information — processed entirely by our payment provider (Stripe). We do not store card numbers.
- Communications — email addresses for reminders, and your message content when you contact us.
- Technical data — basic usage logs (pages visited, timestamps, IP address) and cookies used for authentication and security.
2. Why we collect it
We use your information to: provide and operate the Service (storing your data, extracting dates, sending reminders); process payments; communicate with you about your account; prevent abuse and secure the Service; and comply with legal obligations.
3. Sensitive information
Medical examination certificates you upload may contain health-related information. We collect this only to track your renewal dates and for no other purpose. It is stored in encrypted-at-rest databases on our hosting provider (Supabase/Vercel) and is never sold, used for advertising, or shared except as described below. You may delete any document at any time.
4. How we share information
We do not sell your personal information. We share data only with the limited set of service providers needed to run the Service:
- Supabase — database and authentication hosting.
- Stripe — payment processing (subscription and billing data).
- Resend — sending reminder emails.
- DeepSeek (or another AI provider) — processing uploaded documents to extract expiry dates.
- Twilio (if SMS is enabled) — sending SMS reminders.
- Vercel — application hosting.
We may also disclose information where required by law, subpoena, or legal process, or to protect the rights, property, or safety of DOTNudge, our users, or the public.
5. AI processing of your documents
When you upload a document, its contents are transmitted to our AI provider solely to extract dates and identifying details so we can create your checklist and reminders. AI extraction is automated; you should review all extracted data for accuracy (see our Terms of Service). Extracted data is stored in your account.
6. Retention and deletion
We retain your data while your account is active. You can delete your account and your data at any time by contacting us at privacy@dotnudge.com. On deletion, your account information, uploaded documents, and extracted data are permanently removed within 30 days, except where we are legally required to retain records (for example, financial records required by payment processors).
7. Your rights
You may access, correct, or export the personal data we hold about you, and you may request deletion as described above. You may also opt out of marketing communications at any time. Reminder emails include an unsubscribe option. Depending on your location (including California under the CCPA/CPRA and the EU under GDPR), you may have additional rights — to request a copy of your data, to restrict or object to processing, and to complain to a supervisory authority. We will honor all such requests without unreasonable delay.
8. Security
We use industry-standard safeguards, including encryption in transit (TLS) and at rest, least-privilege access controls, and monitored hosting infrastructure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Cookies and tracking
We use cookies and similar technologies strictly for authentication, session management, and basic security. We do not use third-party advertising trackers.
10. Children
The Service is not directed at anyone under 18 and is intended for business users. We do not knowingly collect information from children.
11. International data transfers
The Service is hosted in the United States. If you access it from outside the US, your information may be transferred to and processed in the US, where data protection laws may differ. By using the Service you consent to this transfer.
12. Changes to this policy
We may update this policy from time to time. Material changes will be announced through the Service or by email. Continued use after changes take effect constitutes acceptance.
13. Contact
Questions about privacy? Contact us at privacy@dotnudge.com.