Privacy Policy

Last updated: July 2026

Oversize Ops ("we", "us", "the platform") operates oversizeops.com. This policy explains what we collect, why, how long we keep it, and the choices you have.

1. What we collect

Personal accounts (free, everyone): your name, email, and a password (stored as a one-way hash — we never store or can retrieve your plain-text password). Optionally: a bio and a profile photo.

Business accounts (Shipper, Transporter, Escort, Broker): company name, business type, and where applicable your DOT/MC number, business address, phone, and email. Transporter, Escort, and Broker accounts additionally have billing details handled directly by Stripe (see "Payment data" below).

Documents you send us: if you email supporting documents to us as part of a verification request or support inquiry (e.g. registration paperwork), those files are stored securely and used only for that purpose — never shown publicly.

Usage data: we run first-party, self-hosted analytics on page visits (page, referrer, device/browser type, approximate location from IP) to understand traffic and catch bot/scanner activity. We do not use third-party ad-tracking pixels or sell this data.

AI assistant: messages you send to the in-app assistant are processed to generate a response and may be retained briefly for session context. Assistant conversations are scoped to your own company's data and are never mixed with another company's.

Payment data: subscription billing for Transporter/Escort accounts is processed entirely by Stripe. We never see or store your full card number — Stripe handles that under its own security and compliance program (Stripe is a certified PCI Service Provider Level 1). See Subscription & Billing Terms.

2. What we never show publicly

For personal profiles specifically: your phone number, home address, and email address are never displayed on your public profile page, regardless of any other setting. Only your display name, bio, and avatar are ever public, and only if you choose to make your profile public. Business-account contact info (phone/address/email/website) is shown publicly on business directory listings by design — that is the point of a business directory — but is never shown for personal accounts.

3. Why we collect it (legal basis)

We process account and business data to provide the service you signed up for (performance of a contract), usage analytics and fraud/abuse prevention under our legitimate interest in keeping the platform safe and working, and billing data as required to process the subscription you agreed to.

4. How long we keep it

Account data is kept for as long as your account is active. If you delete your account, we remove your personal profile data and disable login within a reasonable period; some records (e.g. invoices, audit logs required for financial/legal recordkeeping) are retained longer as required by law or legitimate business need. Analytics data is aggregated over time and raw records are periodically pruned.

5. Who we share data with

We use a small number of service providers to run the platform: Stripe (payment processing for paid business plans), and infrastructure providers for hosting, email delivery, SMS (where used), and the AI assistant. These providers only receive what they need to do their job and are contractually restricted from using it for their own purposes. We do not sell personal data to data brokers or any third party, and we do not share it for cross-context behavioral advertising. See Your Privacy Choices.

6. Security

Passwords are one-way hashed, never stored in plain text. Traffic to the platform is encrypted (HTTPS). Access to business and personal data is restricted by tenant-scoped permissions — one company's staff cannot see another company's private data through normal platform use. No system is perfectly secure; if we ever learn of a data breach affecting your personal information, we will notify affected users as required by applicable law.

7. Children's privacy

Oversize Ops is a business platform for the freight industry and is not directed at children. See our full Children's Privacy statement.

8. Your rights

You can edit or delete the personal information on your profile at any time from your account settings. To request a full account deletion, a copy of your data, or to exercise any state privacy right described in Your Privacy Choices, use our contact form. We will respond within a reasonable time.

9. Changes to this policy

We may update this policy as the platform changes. Material changes will be reflected here with an updated date.

Contact

Questions about this policy: use our contact form.