Your Privacy and Data Security

Privacy Policy

Last updated: October 14, 2026

This Privacy Policy explains how El Dorado Trucking Software ("EDTS", "we", "us", or "our"), a business registered in and operated from the State of California, USA, collects, uses, shares, secures, and retains personal information when you use our software-as-a-service platform at edtruckingsoftware.com, our applications, and our text message and email notification programs (the "Service").

This policy covers personal information only. The rules for using the Service — subscriptions, acceptable use, and your security responsibilities — are in our separate Terms of Service.

What you should know before sharing data with EDTS

By using the Service or enrolling in notifications, you acknowledge that you have read and understood this Privacy Policy and our Terms of Service, including how we encrypt and secure the database, who can access your data, how sensitive personal information is handled, and what happens if there is a cyber attack or data breach.

If you are a company administrator entering information about drivers, employees, or contractors, you are responsible for telling those people how their information is used and for obtaining any consent the law requires.

1. Who We Are and Our Role

EDTS provides cloud-based dispatch, freight bill, invoicing, settlement, and fleet management software to trucking companies ("Customers"). Our role depends on the information:

  • Service provider (processor): for information a Customer enters about its drivers, employees, contractors, and customers ("Customer Data"), we process it on the Customer's behalf and under its instructions. The Customer decides what is collected and who in its company can see it. If you are a driver or employee, please contact the company you work for first with questions about your records — we will assist them in responding.
  • Business (controller): for information about Customer account holders, website visitors, and people who enroll in our notification programs, EDTS decides how it is used, as described in this policy.

2. Information We Collect

Account information

  • Name, email address, phone number, company name, role, and password (stored only as a one-way hash).

Customer Data entered into the platform

  • Driver and employee records: names, contact details, addresses, CDL class and license details, truck assignments, pay rates, and — where a Customer enters them for payroll, tax, or settlement purposes — Social Security or taxpayer identification numbers.
  • Operational records: dispatches, jobs, freight bills, tickets and their uploaded photos, invoices, payment statements, and customer and truck information.

Notification enrollment

  • Your name, mobile number and/or email address, the trucking companies you select, the notification types you agreed to, and a record of your consent (date, consent wording version, IP address, and browser information).

Information collected automatically

  • Usage and log data: pages and features used, actions taken, API requests, response times, and errors.
  • Device data: IP address, browser type, operating system, and device type.
  • Cookies: session cookies used to keep you signed in and secure your session (see Cookies below).

Support communications

  • Messages and attachments you send to our support team.

3. How We Use Information

  • Provide, operate, and maintain the Service, including dispatching, invoicing, and settlement features;
  • Send the dispatch, job, and payment notifications you or your company enabled;
  • Authenticate users, enforce access permissions, and keep accounts secure;
  • Detect, investigate, and prevent security incidents, fraud, abuse, and cyber attacks;
  • Provide customer support and send administrative and security messages;
  • Analyze aggregated usage to fix problems and improve the Service; and
  • Comply with legal obligations and enforce our Terms.

We do not sell personal information or Customer Data, and we do not use Customer Data — including driver and employee records — for advertising.

4. How We Share Information

We share personal information only in these circumstances:

  • Within your company account: with Authorized Users of the Customer account, according to the roles and permissions the Customer assigns.
  • With the trucking companies you select: when you enroll in notifications, your enrollment is associated with the companies you chose so that they can send you notifications.
  • With service providers: companies that host and operate the Service for us — cloud hosting, managed database hosting, and email and text-message delivery. They may use the information only to provide services to EDTS and must protect it.
  • For legal reasons: when required by law, subpoena, or court order, or to protect the rights, safety, and security of EDTS, our Customers, or others. Where permitted, we notify the affected Customer first.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy's protections.

Text messaging (SMS)

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, other than service providers that deliver messages on our behalf. You can opt out at any time by replying STOP. See our SMS Terms for details.

5. How We Protect Your Information

Encrypted in transit and at rest

TLS/HTTPS on every connection; data encrypted at rest in our managed cloud database.

Secured database

Not publicly accessible — reachable only by authenticated application servers and limited authorized staff.

Restricted access

Company-level data isolation, role-based permissions, hashed passwords, and session timeouts.

Monitored for attacks

Activity logging, rate limiting, security headers, and regular dependency patching.

Encryption

  • In transit: all traffic between your browser or device and EDTS is encrypted with TLS (HTTPS). HTTP Strict Transport Security instructs browsers to never connect over unencrypted HTTP. Connections between our application servers and our database are also encrypted with TLS.
  • At rest: Customer Data and personal information are stored in a managed cloud database service that encrypts stored data at rest.
  • Passwords: passwords are salted and hashed with bcrypt before they are stored. No one at EDTS can see your password, and we will never ask you for it.

Database security

  • The production database is hosted with a managed cloud provider and is not publicly browsable. It accepts only authenticated connections from our application servers and a limited number of authorized EDTS personnel.
  • Each Customer's records are tagged with and filtered by that Customer's company, so one company's users cannot query another company's data.

Protection against cyber attacks

  • Rate limiting and submission caps on public and sensitive endpoints to slow brute-force and abuse;
  • Browser security headers, including a Content Security Policy and clickjacking protection;
  • Input validation on data received by the Service;
  • Logging of API activity and administrative actions so suspicious behavior can be detected and investigated; and
  • Regular review and patching of third-party software dependencies for known vulnerabilities.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keeping your account secure also depends on you — please follow the security responsibilities in our Terms of Service, such as never sharing passwords and removing users who no longer need access.

6. Who Can Access Your Data

  • Your company's users: only Authorized Users of the Customer account, based on their assigned role (for example, Admin, Employee, or Driver). Customer administrators control who has access and should remove users promptly when they leave.
  • EDTS personnel: a limited number of authorized staff, only when needed to operate and maintain the Service, provide support you request, investigate security or technical issues, or comply with law. They are bound by confidentiality obligations, and administrative access to the platform is logged.
  • Service providers: only to the extent needed to host the Service or deliver messages for us.
  • No one else — we do not give other Customers, advertisers, or data brokers access to your data.

7. Sensitive Personal Information

Some records, such as Social Security or taxpayer identification numbers, driver's license details, and pay information, are sensitive. We use this information only to provide the payroll, tax, settlement, and compliance features of the Service on the Customer's behalf, never for marketing or profiling, and we never sell or share it except as described in this policy.

Customers should enter sensitive information only when it is needed for a legitimate business purpose and should give account access only to users who need it. If you are a driver or employee and have concerns about sensitive information your company has entered, please contact your company or us.

8. Data Breach Notification

If we discover a security incident involving unauthorized access to or acquisition of personal information in our systems, we will:

  • Act promptly to contain the incident, secure our systems, and investigate what happened;
  • Notify affected Customers without undue delay, and within the time required by applicable law, including what we know about the data involved and the steps we are taking;
  • Notify affected individuals and, where required, regulators or law enforcement, either directly or by supporting the Customer in doing so; and
  • Take steps to reduce the risk of a similar incident happening again.

If you believe your account or information has been compromised, contact us immediately at edtruckingsoftware@gmail.com.

9. Data Retention and Deletion

  • Customer Data is kept while the Customer's account is active. After the account closes, the Customer may request an export for 30 days, after which we delete or de-identify it from active systems within a reasonable time, except where the law requires us to keep it.
  • Notification enrollment records, including consent records, are kept while you are enrolled and for as long as needed to demonstrate consent under telecommunications laws.
  • Activity and security logs are kept for a limited period and then automatically deleted.

10. Your Rights and Choices

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate or incomplete information;
  • Delete your personal information, subject to legal retention requirements;
  • Obtain a copy of your information in a portable format; and
  • Limit or object to certain uses, including the use of sensitive personal information.

To make a request, email edtruckingsoftware@gmail.com. We will verify your identity before acting on a request, and we will not discriminate against you for exercising your rights. If your information is part of a Customer's Customer Data, we may refer your request to that Customer, as it controls that data.

California residents. Because EDTS is based in California, we honor the rights California residents have under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA): the right to know what personal information we collect, use, and disclose; to delete and correct it; to limit the use of sensitive personal information; and to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising, and we use sensitive personal information only to provide the Service. We will not discriminate against you for exercising these rights. You may use an authorized agent to make a request on your behalf.

Notifications: reply STOP to any text message to stop texts, or use the unsubscribe link in an email or contact us to stop emails.

11. Cookies

We use essential cookies to keep you signed in, protect your session, and remember your preferences. Sessions expire after a period of inactivity. We also collect usage information to understand how the Service is used and to improve it. You can control cookies through your browser settings, but disabling essential cookies will prevent you from signing in.

12. Children

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

13. Where Data Is Stored

EDTS is registered and operated in California and serves customers only in the United States. All information is stored and processed in the United States. The Service is not offered outside the United States, and we do not knowingly collect personal information from people located outside the United States.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date, and we will notify Customers of material changes by email or in the Service before they take effect.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data security practices, please contact us:

El Dorado Trucking Software (EDTS)

Registered and operated in California, USA

Email: edtruckingsoftware@gmail.com

Website: edtruckingsoftware.com