Privacy Policy

Information we collect

• Account email — used as your passwordless sign-in identity.
• Carrier profile — your USDOT number, the date your authority was granted, operation type (interstate/intrastate), and legal business name, if you provide them.
• Compliance progress — which milestones you mark complete, and the documents we prepare for you.
• Billing information — handled by Stripe. We never see or store your full card number; we keep only your subscription status and a Stripe customer reference.
• Basic technical data — standard server logs needed to operate and secure the service.

How we use your information

• Generate your personalized 18-month compliance roadmap.
• Prepare your draft documents and pre-fill them from your profile.
• Send you sign-in links and proactive deadline reminders.
• Process your subscription and provide support.

How we share information

We do not sell your personal information. We share it only with the service providers we use to run the product, each acting on our instructions:

• Stripe — payment processing and subscription management.
• Brevo — sending transactional email (sign-in links and reminders).
• Railway and a managed PostgreSQL database — hosting and data storage.

Cookies

We use a single, essential session cookie to keep you signed in after you click your magic link. We do not use third-party advertising or cross-site tracking cookies.

Data retention

We keep your account and carrier data while your account is active and for as long as needed to provide the service and meet legal obligations. You can ask us to delete your account and associated data at any time.

Your rights

Depending on where you live (including under GDPR and the CCPA), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these, email hello@itsvoco.com and we will respond within a reasonable time.

Security

We protect your data with encryption in transit, and we store authentication tokens only as one-way hashes — a copy of our database yields no usable sign-in links or session tokens. No system is perfectly secure, but we work to safeguard your information.

Children

The service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.

Changes

We may update this policy; the "last updated" date above reflects the latest version.

Contact

Voco Technologies, Inc., 850 New Burton Road, Suite 201, Dover, DE 19904, USA. Privacy questions: hello@itsvoco.com.