Owner Operator AI ("we," "us," or "our") operates the Owner Operator AI platform — including this website, the mobile application, and all associated services. This Privacy Policy explains what personal data we collect, why we collect it, and how you can exercise your rights. Please read it carefully.
1. Who We Are
Owner Operator AI is an AI Agents as a Service (AaaS) platform for independent truck owner-operators in the United States. Our registered business operates under the Owner Operator AI brand. For privacy inquiries contact us at privacy@owneroperator.ai.
2. Data We Collect
2.1 Data You Provide Directly
- Identity: Name, email address, phone number, profile photo
- Commercial Driver Information: CDL number, CDL state and class, expiry date, medical card details
- DOT/FMCSA Profile: DOT number, MC number, carrier authority status, safety rating
- Vehicle Information: VIN, year, make, model, GVWR, trailer type
- Financial Information: Bank account details (via Plaid), payment method (via Stripe), factoring invoices, load rates, operating costs
- Insurance: Certificate of Insurance (COI) documents, coverage amounts, policy numbers, carrier name
- Operating Preferences: Lane preferences, home base, max deadhead miles, profit margin targets, fuel MPG
- Permit & Compliance Records: State permit types, IRP registration, IFTA account, UCR filings
2.2 Data Collected Automatically
- Device & Usage Data: Device type, operating system, app version, session duration, screens visited, feature interactions
- Location Data: GPS coordinates while the app is active (used for HOS logging, fuel optimization, and relay matching). We do not sell location data.
- Log Data: IP address, browser/app user-agent, error logs, crash reports
- HOS Records: Duty-status events generated while using the device ELD bridge feature
2.3 Data from Third Parties
- FMCSA SAFER: Carrier safety data retrieved using your DOT number
- NHTSA: Vehicle specifications decoded from your VIN
- EIA: Regional diesel price data (not personally identifiable)
- Plaid: Bank account and transaction data you authorize
- Stripe: Payment processing and identity verification data
3. How We Use Your Data
We use your data to:
- Operate and deliver the platform — dispatch AI agents, calculate load rates, file IFTA, track HOS, manage invoices
- Verify your identity and CDL credentials to protect the marketplace
- Process payments and subscription billing via Stripe
- Link your bank account for fast invoice payouts via Plaid
- Train and improve the AMM (Automatic Market Maker) rate-clearing engine using aggregated, anonymized lane and rate data
- Send transactional emails (load confirmations, payment receipts, compliance alerts)
- Comply with legal obligations including FMCSA recordkeeping requirements
- Detect and prevent fraud on the factoring marketplace
We do not sell your personal data to third parties. We do not use your data for targeted advertising.
4. Data Sharing
We share data only as necessary to operate the platform:
- Shippers: When you accept a load, relevant carrier information (DOT, MC, equipment type, insurance status) is shared with the shipper as required for the transaction
- Factor Investors: Anonymized invoice details (amount, industry, payment history) are visible to investors on the factoring marketplace. Your name and DOT number are not disclosed until a funding match is confirmed.
- Asset Partners: If you enter a truck partnership, the partner receives your Driver Trust Score, CDL status, and operating history needed to complete the agreement
- Service Providers: Firebase (infrastructure), Stripe (payments), Plaid (banking), Google Gemini (AI processing), Microsoft Clarity (analytics). All are bound by data processing agreements.
- Legal Requirements: We may disclose data when required by law, court order, or FMCSA audit
5. Analytics & Tracking
This website uses Microsoft Clarity for behavioral analytics (session recordings, heatmaps, click tracking). Clarity may collect:
- Mouse movements, clicks, and scroll depth on website pages
- Session replays (no passwords or payment fields are recorded — Clarity automatically masks sensitive inputs)
- Device and browser metadata
Clarity data is processed by Microsoft under their privacy policy. You can opt out of Clarity tracking by enabling "Do Not Track" in your browser or using a browser extension that blocks tracking scripts.
We do not use Google Analytics or Facebook Pixel.
6. Data Retention
- Active account data: Retained for the life of your account plus 7 years (FMCSA recordkeeping requirements)
- HOS logs: Retained for 6 months minimum per FMCSA 49 CFR § 395.8
- Financial records: Retained for 7 years per IRS requirements
- Deleted accounts: Core identity data purged within 90 days of account deletion; anonymized aggregated data may be retained indefinitely
7. Your Rights
Depending on your state of residence, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal retention requirements)
- Portability: Request your data in a machine-readable format
- Opt-out of sale: We do not sell personal data — this right is automatically satisfied
California residents (CCPA), Virginia residents (VCDPA), Colorado residents (CPA), and residents of other states with comprehensive privacy laws may exercise these rights by contacting us at privacy@owneroperator.ai. We will respond within 45 days.
8. Security
We use industry-standard security measures including:
- Firebase Firestore with default-deny security rules — each user can only access their own data
- TLS encryption in transit on all API calls
- Stripe and Plaid handle all payment and banking credentials — we never store raw card numbers or bank credentials on our servers
- CDL and identity documents are processed by Gemini Vision and stored in Firebase Storage with owner-only access rules
No system is 100% secure. If you discover a security vulnerability, please report it responsibly to security@owneroperator.ai.
9. Children's Privacy
This platform is intended for commercial motor vehicle operators who must hold a valid CDL. It is not directed at persons under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy as our platform evolves or as legal requirements change. Material changes will be communicated via in-app notification or email at least 30 days before taking effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.
For privacy questions, data requests, or to report a concern: