CarrierHelm Privacy Policy

1. Overview

This Privacy Policy describes how CarrierHelm handles information collected through the public CarrierHelm website and the secure CarrierHelm application. The public website is located at carrierhelm.com, and the secure operational application is located at app.carrierhelm.com.

2. Information you provide

If you submit the Request Access form, you may provide your company name, fleet size, contact name, email address, phone number, and an optional DOT number. CarrierHelm uses this information to evaluate and respond to your access request. Submitting the form does not by itself create a company, membership, role, seat, or access to the secure CarrierHelm application.

3. Google Sign-In and the data CarrierHelm accesses

CarrierHelm requests only the basic Google Sign-In scopes needed to authenticate a user: openid, email, and profile. When you use Google Sign-In, CarrierHelm receives your Google account name, email address, profile picture, and a unique Google account identifier.

CarrierHelm does not use Google Sign-In to access Gmail messages, Google Drive files, Google Calendar, contacts, payment information, or other Google account content.

4. Why CarrierHelm uses Google account data

CarrierHelm uses Google account data only to authenticate you, confirm that the signed-in email matches an invitation, create or access your CarrierHelm account, display your account profile, connect you to the correct trucking company, and enforce the role and permissions assigned to you. Google account data is not used for advertising, profiling, or unrelated purposes.

5. How Google account data is stored and retained

CarrierHelm stores the Google account name, email address, profile picture, and unique account identifier associated with your CarrierHelm account within CarrierHelm's hosted application environment and authentication infrastructure. This allows CarrierHelm to recognize the account, authenticate the user, verify invitation ownership, display the user profile, and enforce company access boundaries.

CarrierHelm retains this account information while the CarrierHelm account or company relationship remains active and for as long as reasonably necessary to provide the service, maintain security and audit records, resolve disputes, or comply with legal obligations. When the information is no longer required, CarrierHelm deletes or de-identifies it, subject to legitimate security, audit, transaction, and legal-retention requirements.

6. Data sharing

CarrierHelm shares information only with service providers needed to operate the platform, such as authentication, hosting, email delivery, security, and infrastructure providers, or when required by law. Those providers may process information only to provide their contracted services. CarrierHelm does not sell Google user data or personal information and does not share it for targeted advertising.

7. Automatically collected information

Like most websites and web applications, CarrierHelm may collect basic technical information such as browser type, device type, IP-derived security signals, timestamps, and pages visited. CarrierHelm uses this information to operate, secure, troubleshoot, and improve the service.

8. Security and company isolation

CarrierHelm is designed around company isolation, predefined roles, and backend authorization. Google account data identifies the authenticated user but does not grant operational access by itself. Access also depends on a valid CarrierHelm company invitation, membership, assigned role, permissions, and applicable seat status.

9. Your choices, revocation, and deletion requests

You may choose not to use Google Sign-In and may use another authentication method when one is available. You may revoke CarrierHelm's Google Sign-In access through your Google Account permissions. You may also request access to, correction of, or deletion of personal information by emailing carrierhelm.admin@gmail.com.

CarrierHelm will process valid deletion requests subject to identity verification and any legitimate security, transaction, audit, or legal-retention obligations. Revoking Google authorization stops future Google Sign-In authorization but does not automatically delete records that CarrierHelm must retain for those legitimate purposes.

10. Google API Services User Data Policy

CarrierHelm's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

11. Children

CarrierHelm is intended for business use and is not directed to children under 16. CarrierHelm does not knowingly collect personal information from children.

12. Changes to this policy

CarrierHelm may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

13. Contact

For privacy questions, Google data questions, or data requests, contact carrierhelm.admin@gmail.com.