Privacy Policy

1. Information we collect

We collect only the information needed to run the Service:

• Account data: your name, email address, phone number and a hash of your password (we never store the password itself). If you sign in with Google, we receive your name, email address and profile picture instead of a password.
• Team data: the name of your team, its members and their roles.
• Fleet data that you or your teammates enter: trucks, drivers (including their names and phone numbers), truck owners, insurance documents and other files you upload.
• Loads and bids: loads collected from the load boards your team connects, the bids you prepare and send, and the broker replies linked to them.
• Truck locations that you enter, used to calculate the distance from each truck to a pick-up.
• Settings and email templates you create in the app.
• Google user data from a Gmail account you choose to connect, as described in section 3.
• Technical data: IP address and browser user agent, recorded in server logs for security and rate limiting.

We do not collect payment card details: the Service is currently free during early access.

2. How we use information

• To provide the Service: show loads from your boards in one feed, find the trucks closest to each pick-up, suggest a price, send the bid emails you approve and attach broker replies to your bids.
• To create and manage your account and team, and to control who can see what according to team roles.
• To send service emails such as password resets and team invitations.
• To keep the Service secure: detect abuse, limit request rates and investigate incidents.
• To answer your support requests.
• To comply with legal obligations.

We do not show ads, we do not sell or rent personal information, and we do not use your data to build advertising profiles.

3. Google user data (Gmail)

With your consent, Loady connects to a Gmail account through Google’s OAuth. A dispatcher can connect their own mailbox, and a team lead can connect the team mailbox that receives load-board emails. We request only these scopes:

• gmail.send — to send the bid emails that you review and approve in Loady, from your own address, to the broker.
• gmail.readonly — to read load-board emails (for example, Sylectus load postings) and broker replies to the bid emails sent through Loady, so that loads appear in your feed and replies are linked to the right load and bid.

Loady uses this data only to provide and improve the user-facing features described above. OAuth tokens are encrypted (AES) at rest and are used only by our servers to call the Gmail API on your behalf.

Loady's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, Loady:

• does not use Gmail data for advertising, including retargeting, personalized or interest-based ads;
• does not sell Gmail data or transfer it to third parties, except as necessary to provide the Service, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you;
• does not use Gmail data to train generalized artificial intelligence or machine learning models;
• does not allow humans to read Gmail data, unless you give us explicit consent for specific messages (for example, for support), it is necessary for security purposes such as investigating abuse, it is required to comply with applicable law, or the data is aggregated and anonymized and used for internal operations.

You can disconnect Gmail in the Loady settings at any time. Disconnecting revokes the token at Google and deletes it from our servers, and Loady stops accessing the mailbox. You can also revoke Loady’s access in your Google Account at myaccount.google.com/permissions. Loads and bids already created in Loady remain in your team’s workspace until they are deleted as described in section 7.

4. Sign in with Google

If you choose “Sign in with Google”, we receive only your basic profile — name, email address and profile picture — and use it to create your account or sign you in. Signing in with Google does not give Loady access to your Gmail; that requires the separate connection described in section 3.

5. How we share information

Within your team, information is visible to team members according to their roles. Outside your team, we share information only with the service providers that help us run Loady, and only as needed for their service:

• Contabo — server hosting (virtual private servers in the EU, Germany).
• Cloudflare — DNS and file storage (R2) for the files you upload.
• Resend — delivery of service emails such as password resets and invitations.
• Google — the Gmail API and Sign in with Google.
• OpenStreetMap-based services — Nominatim for geocoding and OpenFreeMap for map tiles. They receive only addresses, coordinates or map requests, not your account data.

We may also disclose information if required by law or to protect the rights, property or safety of our users or others. If Loady is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction; we will notify you, and this policy (including section 3) will continue to apply to your data.

6. Cookies and local storage

The Site uses your browser’s local storage only to remember preferences such as the color theme and language. The app uses a session cookie and local storage to keep you signed in. We do not use advertising cookies, third-party trackers or analytics cookies.

7. Data retention

We keep your information for as long as your account or team exists. When you ask us to delete your account or team data, we delete it within 30 days. Backups roll over within 30 days, so deleted data disappears from them within that period. We may keep records for longer when the law requires it.

8. Security

All traffic to the Site and the Service is encrypted with HTTPS. OAuth tokens are encrypted at rest, passwords are stored only as hashes, and access to team data is limited to members of that team according to their roles. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach where the law requires.

9. Where data is processed

Our servers are located in the European Union (Germany). Some service providers listed in section 5, such as Cloudflare, Resend and Google, may process data in the United States or other countries, under their own data protection terms.

10. Your rights and choices

You can access, correct, export or delete your personal information. Much of it can be edited directly in the app; for anything else, email us at support@loady.bid. We may need to verify your identity before acting on a request, and we will respond within 30 days. You can also disconnect Gmail at any time, as described in section 3.

Information about drivers, owners and other people that your team enters into Loady is controlled by your team. If you are such a person, please contact the carrier or dispatcher who entered it; we will help them handle your request.

11. Children

Loady is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children.

12. Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, notify you in the app before they take effect.

13. Contact

Questions or requests about privacy: support@loady.bid.