Privacy Policy

Prevaylos Inc. (“Prevaylos,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information when you use our platform and services. By using Prevaylos, you agree to the practices described in this Policy.

1. Information We Collect

We collect information you provide directly and information generated by your use of the platform.

Account & Identity Information

• Full name and email address
• Company name, business type, and contact information
• Password (stored in hashed form — we never store plaintext passwords)
• Billing information (processed by Stripe — we do not store raw card data)

Platform & Usage Data

• Shipment records, order history, carrier assignments, and load board activity
• Feature usage, page views, session duration, and interaction events
• IP address, browser type, device type, and operating system
• Log data including timestamps, error reports, and API calls

GPS Location Data (Carrier App Only)

If you use the Prevaylos carrier mobile application, we collect GPS location data when the app is active and you have granted location permissions. This data is used solely to provide real-time shipment tracking to dispatchers and customers. Location data is not collected in the background when the app is closed, unless explicitly enabled by you.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Platform Operation — to provide, maintain, and improve the Prevaylos transportation management platform
• Account Management — to create and manage your account, authenticate your identity, and process transactions
• Communications — to send transactional emails (account creation, invoices, notifications), product updates, and support responses
• Analytics & Improvement — to understand how the platform is used, identify issues, and improve features and performance
• Legal & Compliance — to comply with applicable laws, respond to legal requests, and enforce our Terms of Service
• Security — to detect, investigate, and prevent fraudulent transactions, abuse, and security threats

3. Data Sharing & Third Parties

We do not sell your personal information to third parties. Ever. We share data only with the service providers necessary to operate the platform:

All third-party providers are contractually bound to process your data only as necessary to provide their services and in compliance with applicable privacy laws. We do not share your information with advertisers, data brokers, or other commercial third parties.

4. Data Retention

We retain your account data and Customer Data for as long as your account is active. If you request account deletion, we will delete your personal information within 30 days of the request, except where we are legally required to retain certain records (e.g., financial records for tax compliance).

Anonymized, aggregated usage data may be retained indefinitely for analytics and product improvement purposes, as it cannot be linked back to any individual.

To submit a deletion request, contact us at [email protected].

5. Your Rights

Depending on your location, you may have certain rights regarding your personal information. We honor the following rights for all users regardless of jurisdiction:

• Access — Request a copy of the personal information we hold about you
• Correction — Request correction of inaccurate or incomplete personal information
• Deletion — Request deletion of your personal information (subject to legal retention requirements)
• Portability — Request a machine-readable export of your data
• Opt-Out — Opt out of non-essential communications at any time via email unsubscribe links

To exercise any of these rights, contact [email protected]. We will respond within 30 days.

6. California Privacy Rights (CCPA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information collected from you
• The right to opt-out of the sale of personal information (we do not sell data)
• The right to non-discrimination for exercising your CCPA rights

To submit a verifiable consumer request under CCPA, contact us at [email protected].

7. EU / UK Users (GDPR)

If you are located in the European Union or United Kingdom, you have rights under the General Data Protection Regulation (GDPR). Our lawful basis for processing your personal data is:

• Contract performance — processing necessary to provide the Service you have subscribed to
• Legitimate interests — security monitoring, fraud prevention, and platform analytics
• Legal obligation — compliance with applicable law
• Consent — where you have explicitly agreed (e.g., marketing communications)

You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

8. Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (TLS), secure authentication, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure.

In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and/or a prominent notice on the platform. The “Effective Date” at the top of this page will reflect the most recent revision.

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

10. Contact Us

For privacy-related questions, data requests, or concerns, please contact: