Privacy Policy

Effective November 12, 2026

Truck Records is operated by Auctus Network.
Contact: apmedev@gmail.com

Information we process

For company accounts, we collect administrator names, email addresses, password hashes, company details, logos, receiving email addresses, driver rosters, timezones, and subscription references. Maintenance records can contain vehicle details, work descriptions, receipts, signatures, and submission timestamps. Driver applications may include contact and address history, date of birth, SSN, license details, employment and driving history, work hours, authorizations, and an electronic signature. Submission audit data includes IP address and browser information. Feedback posts and company votes are also stored.

Only provide information needed for the relevant form. Do not place applicant information, SSNs, or private company records on the feature request board: titles, descriptions, statuses, and vote totals are visible to other signed-in company administrators. Careers pages and open position descriptions are public while enabled.

Why we use it and who is responsible

We use this information to operate accounts, deliver forms and monthly requests, save signed records, generate PDFs, notify companies, provide support, manage subscriptions, and protect the service. Account and billing information is processed to provide the subscription, meet legal obligations, and maintain service security. Company customers decide why they collect driver and applicant information and are responsible for their own lawful basis and notices. We process that form information to provide the service to them.

If you are a driver or applicant, your submission goes to the company named on the form. Contact that company about hiring decisions, corrections, access, or deletion of its records. You may also contact us for help identifying the company or forwarding a privacy request. If your organization requires a data processing agreement, contact us before uploading personal information so the appropriate terms can be arranged.

Sharing and service providers

Company account holders can view their company’s records and receive submissions at the mailbox they configure. Submitted PDFs are attached to company notification emails. Anyone with authorized access to that mailbox may retain or forward those copies. Application PDFs mask SSNs; the underlying application data can contain the full SSN. Access to private maintenance links should be limited to the intended driver and authorized company staff.

We use hosting and infrastructure providers to operate the app, Resend for transactional email when configured in production, and Paddle for billing and payment processing. Paddle receives purchase and billing information and processes it under its privacy notice. Email delivery involves Resend processing recipient addresses and message contents; see Resend’s privacy policy. These providers may process data in countries outside your own. Contact us for current hosting locations and applicable transfer arrangements before providing data subject to residency restrictions.

We do not sell personal information or use applicant data for advertising. We may disclose information when legally required or necessary to investigate misuse and protect the service or other people.

Cookies and third-party checkout

The app uses first-party session and security cookies to sign you in, protect forms, and keep an application draft associated with your browser session. No advertising or analytics scripts are included in the app. Paddle.js loads on checkout pages to support payments and may use storage or cookies under Paddle’s own policies. Optional analytics or advertising features would require an updated notice and any required choices before being enabled.

Storage, retention, and security

We retain account and form records while needed to provide the service or fulfill legal obligations. Application drafts have a 14-day continuation window; expiry prevents resuming a draft and does not automatically delete its stored data. Canceling billing also does not automatically delete records. Contact us to request deletion or an export; retention obligations and the company’s role in controlling form data may affect a request. Backup copies may persist until replaced through the backup cycle, and copies already delivered to a company mailbox must be handled by that company.

Application payloads, application audit fields, and stored application PDFs use application-level encryption. Access to company records requires an authorized session or the relevant private driver link. Maintenance records and attachments use private storage. Email attachments are ordinary PDF copies and should be stored securely. No system or email transmission can be guaranteed completely secure.

Your choices and rights

Depending on applicable law, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal information, or to complain to a data protection authority. Send requests to apmedev@gmail.com. We may need to verify your identity and coordinate with the company that controls your form record. We do not knowingly offer account creation to children.

Changes

Updates will be published here with a new effective date. Where required, we will provide additional notice of material changes.