1Introduction
This Privacy Policy applies to the CargoETL mobile application for drivers and owner-operators — Android package com.cargoetl and iOS App ID 6448040261 (the "App") — and to the CargoETL dispatch platform that the App connects to.
The App and the platform are operated by ETL Group LLC ("we", "our", "us"), 436 N Main St #1042, Doylestown, PA 18901, USA. The App is published on Google Play and the Apple App Store under the developer account ALTEK LLC on behalf of ETL Group LLC. ETL Group LLC is responsible for the personal data described here.
CargoETL lets professional drivers see LTL and other loads around them, place bids at a flat price or a per-mile rate, track the trip, upload bills of lading and proofs of delivery, chat with their dispatcher, request QuickPay, and review past loads and earnings. This Policy explains how we collect, use, store, share, and protect your information when you use it.
Separate policies. This document covers the CargoETL driver app. Our newer CargoAI driver app and the dispatch platform are covered by the policy at cargoetl.com/privacy. Carriers, freight brokers, shippers, factoring companies, and payment providers you work with through CargoETL handle your data under their own privacy policies, as independent controllers.
2Information We Collect
We collect the following types of information:
- Account & Contact Information: Your phone number, used to sign you in via a one-time SMS verification code; your name; the carrier company and truck or trailer unit you select; your equipment type and role; and, optionally, an email address and profile photo. If you drive for more than one carrier, we store the list of companies linked to your account so you can switch between them without signing out.
- Load & Bid Data: Loads you view and save; the bids you place (flat rate or $/mile); accepted and completed loads; pickup and delivery locations, dates, weight, commodity and equipment details; mileage; and trip status updates.
- Settlement Data: QuickPay requests, invoice references, amounts, payment status, estimated payment dates, and your earnings history in the App. We do not collect or store bank account numbers, routing numbers, or payment card numbers in the App — freight settlement and factoring are handled by your carrier or broker outside the App.
- Location Data: While you are signed in and on duty, we collect the device's GPS location to show loads around you without asking for a ZIP code, to calculate deadhead and loaded mileage, to select optimal routes, and to report shipment progress and ETA to the carrier and broker of the load you are running. Location is reported periodically (approximately every few minutes) and only within service areas; it is not collected when you are signed out or when your vehicle is marked out of service.
- Push Notification Token: A device push token (Firebase Cloud Messaging / Apple Push Notification service) so we can deliver load alerts, bid results, chat messages, and payment status updates.
- Photos & Documents: Bills of lading, proofs of delivery, rate confirmations, lumper and scale receipts, and other images and files you choose to capture with the camera or attach from your gallery to a load or a load chat, for the purpose of communication and recordkeeping.
- Messages: The content of load chats between you, your dispatcher, and the broker, including attachments, and any correspondence you send to our support team.
- Technical & Device Data: IP address, device model, operating system and version, app version, device language and time zone, device identifiers, crash reports and diagnostics — used for security, troubleshooting, and functionality.
- Data From Your Carrier or Broker: Your name, phone number, the truck assigned to you, your driver or contractor status, load assignments, and settlement status, as provided by the company you drive for.
- Public Regulatory Data: Publicly available FMCSA/USDOT records (USDOT and MC numbers, operating authority, insurance and safety status), used to verify the carriers and brokers on the platform.
On-device biometrics. If you enable fingerprint or face unlock for the App, that biometric authentication is performed entirely by your device's operating system. We never receive, store, or transmit your biometric data.
3How We Use Information
We use the collected information for the following purposes:
- Providing, operating, and improving the CargoETL app and platform
- User authorization and authentication via one-time SMS verification code
- Showing you available loads relevant to your location, equipment, and preferences
- Transmitting your bids to the dispatcher, carrier, or broker and returning their decision to you
- Processing and managing freight transportation, including tendering, status updates, and pickup and delivery confirmation
- Automatic distribution of loads to drivers
- Distance calculation, rate-per-mile calculation, and optimal route selection
- Real-time shipment tracking, ETA, and status updates for the carrier and broker of your load
- Receiving, storing, and forwarding BOLs, PODs, and other transport documents
- Communication between drivers, dispatchers, and brokers in load chats
- Processing QuickPay requests and displaying invoice and payment status and estimated payment dates
- Storing cargo, load, and earnings history
- Delivering push notifications you have opted into
- Providing customer support and investigating the issues you report
- Ensuring security and preventing fraud, double-brokering, unauthorized access, and abuse
- Compliance with legal obligations, including transportation, tax, and accounting recordkeeping
- Establishing, exercising, or defending legal claims, including freight and payment disputes
We do not use your personal data to make decisions producing legal or similarly significant effects about you by automated means alone.
4App Permissions
Every permission below is optional except basic network access. The App requests each one at the moment the related feature is used, and you can revoke any of them at any time in your device settings.
- Location —
ACCESS_COARSE_LOCATION,ACCESS_FINE_LOCATION(iOS: "While Using the App"): to find loads around your current position and calculate distance without manual ZIP entry. - Background location —
ACCESS_BACKGROUND_LOCATION,FOREGROUND_SERVICE_LOCATION(iOS: "Always"): to keep reporting trip progress and ETA to the carrier and broker while you drive with the screen off, for the duration of an active load only. - Camera —
CAMERA: to photograph BOLs, PODs, and other paperwork. - Photos —
READ_MEDIA_IMAGES/READ_EXTERNAL_STORAGE: to attach an existing photo or scan to a load or chat. - Notifications —
POST_NOTIFICATIONS: to deliver load alerts, bid results, payment status, and chat messages. - Network —
INTERNET,ACCESS_NETWORK_STATE: to communicate with our servers. - One-time code autofill: handled through the Android SMS Retriever API and iOS AutoFill. The App does not request permission to read your SMS inbox.
CargoETL does not request access to your contacts, call log, SMS inbox, or microphone.
Prominent disclosure — location. CargoETL collects location data to show loads near your position, calculate mileage, and share your trip progress and ETA with the carrier and broker responsible for the load you are running. If you grant "Allow all the time" (Android) or "Always" (iOS), this collection can also take place while the app is closed or not in use, for the duration of an active load. You can grant, limit, or withdraw this permission at any time in your device settings. If you decline, you can still use the App, but you will need to enter a search location manually and live trip tracking will not be available.
5Use of Google APIs
The CargoETL driver app uses Google Maps Platform for maps, geocoding, and routing, and Firebase Cloud Messaging for push notifications.
On the dispatch platform used by dispatchers, we additionally use Google OAuth 2.0 for authorization and access to the user's Google profile, the Google People API to retrieve name, email address, and profile photo, and the Google Gmail API to read and send emails related to freight transportation management, where the user explicitly authorizes it.
Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer data obtained through Google APIs to third parties, except when necessary to provide our services or required by law, and we do not use this data for advertising. You can revoke access at any time at myaccount.google.com/permissions.
6Data Sharing with Third Parties
We do not sell or transfer your personal data to third parties, except in the following cases:
- Within the platform: when you place a bid or run a load, the carrier you selected and the broker or shipper of that load receive your name, phone number, truck and equipment, bid, documents, chat messages, and trip location and status. This sharing is essential to the service.
- Service providers acting on our behalf: cloud hosting and storage, SMS and one-time-password delivery, push notification delivery (FCM and APNs), maps and routing (Google Maps Platform), crash reporting and analytics, email delivery and support tooling, and security and fraud monitoring — all bound by contract to protect the data and use it only for us.
- When required by law, a subpoena, a court order, or a lawful government request
- With your explicit consent
- To protect our rights, property, or safety, as well as those of our users and the public
- In connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honour this Policy or give you notice and a choice
No advertising, no cross-app tracking. The CargoETL app does not display third-party advertising. We do not sell your personal information, we do not share it for cross-context behavioral or targeted advertising, and we do not use your location, device identifiers, or usage data to track you across other companies' apps and websites — nor do we permit our service providers to do so for their own purposes.
7Data Storage and Security
We implement modern security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. This includes:
- Encryption of all traffic between the App and our servers using TLS 1.2 or higher, and encryption of stored data and backups at rest
- One-time-code authentication with expiring, rate-limited codes and expiring session tokens
- Role-based access control, so that you see only the loads and data of the companies linked to your account
- Limited internal data access, granted to authorized personnel only, on a least-privilege basis and with logging
- Network isolation, firewalling, and monitoring of our infrastructure
- Regular security audits, dependency updates, and system patching
- Contractual security and confidentiality obligations on our service providers
Data is stored on secure servers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and the competent authorities as required by applicable law. Please keep your device locked and your phone number secure, and contact us immediately if you lose access to the number registered to your account.
8International Data Transfers
We are based in the United States, and our servers and primary service providers are located in the United States. If you use the App from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those of your country. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, in particular the European Commission's Standard Contractual Clauses and the UK Addendum where applicable. You may request a copy of the relevant safeguards by contacting us.
9Data Retention
We retain data only for the time necessary to provide our services or as required by law:
- Account profile — while the account is active, and up to 24 months after your last sign-in, unless you ask us to delete it sooner
- Load, bid, settlement records and transport documents (BOL, POD, receipts) — up to 7 years, as required by transportation, tax, and accounting law and to resolve freight or payment disputes
- Location history for a completed load — up to 12 months after delivery, then deleted or aggregated into non-identifiable statistics
- Chat messages and attachments — for the duration of the relationship plus 24 months
- Push tokens and device identifiers — until the App is uninstalled, the token expires, or the account is deleted
- Server, security, and crash logs — up to 12 months
- Support correspondence — up to 36 months
- Encrypted backups — purged on a rolling basis within 90 days
Records we are legally required to keep are retained even after account deletion, in a restricted-access archive used only for the purpose that requires them.
10Your Rights
You have the right to:
- Access the personal data that we store about you
- Correct inaccurate or incomplete data
- Request deletion of your data (provided it does not conflict with our legal obligations)
- Withdraw consent for data processing
- Restrict or object to processing of your data
- Receive a copy of your data in a structured format
- Not be discriminated against for exercising your privacy rights
- Revoke access to Google APIs through your Google account settings
- Disable location or push notifications at any time through your device settings
- Lodge a complaint with your data protection authority or state attorney general
To exercise these rights, contact us at [email protected]. We verify identity by confirming control of the phone number registered to your account, and respond within 30 days (or 45 days where applicable law allows, with notice of any extension). If we decline a request, you may appeal by replying with the word "Appeal"; we will answer the appeal within 45 days.
We do not sell personal information, do not share it for cross-context behavioral advertising, and do not engage in profiling with legal or similarly significant effects. Precise geolocation, treated as sensitive data under several US state laws, is processed only with your consent and only for the purposes described in this Policy.
11Account and Data Deletion
You can delete your CargoETL account and the personal data associated with it at any time:
- In the App: open Profile → Settings → Delete account and confirm with the one-time SMS code.
- On the web: submit the form at the account deletion page on this website, which is available without installing the App.
- By email: write to [email protected] with the subject "Account deletion", stating the phone number registered to your account.
What is deleted: your profile, phone number, name, profile photo, company and truck links, saved searches and preferences, push tokens, device identifiers, location history not attached to an unresolved load, chat messages you sent, and files you uploaded that are not part of a completed transport record.
What is retained: records of completed loads, bids, invoices, payments, and transport documents that we or your carrier are legally required to keep, and any data needed for an ongoing dispute, claim, audit, or investigation. These records are disassociated from your account and kept in restricted archives for the periods set out in Section 9, then deleted or anonymized.
Timing. We acknowledge deletion requests within 7 days, complete deletion from live systems within 30 days, and purge encrypted backups within 90 days. Removing the App from your device does not delete your account.
12Cookies and Tracking Technologies
On our website we use cookies and similar technologies to ensure functionality, improve user experience, and analyze service usage. You can manage cookie settings through your browser settings. The mobile app does not use advertising cookies or advertising SDKs.
13Children's Privacy
The CargoETL app is a professional tool for the commercial transportation industry, is rated for adults, and is intended solely for use by persons aged 18 and over. It is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us so we can remove it promptly.
14Changes to This Privacy Policy
We may periodically update this Privacy Policy. We will notify you of any significant changes through the platform, the app, by push notification, or by email, and we will update the "Last updated" date at the top of this page. Where the law requires it, we will ask for your consent. Continued use of our services after changes take effect indicates your agreement with the updated policy.
15Contact Information
If you have questions or concerns regarding this Privacy Policy or the processing of your data, please contact us:
- Email: [email protected]
- Phone: +1 (267) 601-2222
- Postal address: ETL Group LLC, 436 N Main St #1042, Doylestown, PA 18901, USA
If you are in the EEA or the UK and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.
16Consent
By using the CargoETL app and the CargoETL platform, and by providing us access to your data, you agree to the terms of this Privacy Policy.